last executing test programs: 5m11.056573737s ago: executing program 2 (id=18): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x94b}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="08220001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) 5m2.508618931s ago: executing program 2 (id=24): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x6, 0x4) 5m0.528525203s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4m56.694564812s ago: executing program 2 (id=29): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)='TS', 0x2}], 0x1}}], 0x1, 0xc0) 4m46.415273795s ago: executing program 2 (id=42): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) 4m43.920478562s ago: executing program 2 (id=44): timer_create(0x0, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x5, 0x484ec1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) 4m25.80134207s ago: executing program 32 (id=44): timer_create(0x0, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x5, 0x484ec1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) 2m26.997716482s ago: executing program 0 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xb9) 2m25.942830468s ago: executing program 0 (id=266): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000200)=ANY=[@ANYBLOB='adinicb,shortad,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',unhide,iocharset=macgreek,mode=00000000000020000000000,fileset=0000\x00\x00\x00\x00000000002237,adinicb,gid=forget,iocharset=cp865,gid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000000000,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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") symlink(0x0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m23.992786636s ago: executing program 0 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x2}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x4800, 0x2, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x80, 0x80000000}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.589932936s ago: executing program 0 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xb9) 2m15.89513465s ago: executing program 0 (id=278): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0xc, 0x0, 0x0, 0x24, 0x1, 0x16c0, 0x5505, 0x48b, 0x1, 0xffffffff, 'syz0\x00'}) dup2(r0, r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000180)={0x6, 0x4}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2m10.601415785s ago: executing program 0 (id=282): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/1, 0x1, 0xa0, 0xc40b, 0xffffffff, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1m55.319089633s ago: executing program 33 (id=282): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/1, 0x1, 0xa0, 0xc40b, 0xffffffff, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1m29.521396066s ago: executing program 3 (id=332): r0 = socket(0x40000000015, 0x805, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) 1m28.425756947s ago: executing program 3 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) io_setup(0x200, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90) 1m26.76981886s ago: executing program 3 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb9) 1m23.23150161s ago: executing program 3 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f000000a240)=[{{&(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000007b80)}, {&(0x7f0000000780)="a2e3eb4ff0", 0x5}], 0x2, 0x0, 0xd0, 0x20000850}}, {{&(0x7f0000008b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48800}}, {{0x0, 0x0, &(0x7f000000a140)=[{0x0}, {&(0x7f0000009140)="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", 0xfe0}], 0x2, &(0x7f000000a180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file1\x00', 0x80) r6 = open(&(0x7f0000000100)='./file1\x00', 0x14937e, 0x15c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) ftruncate(r5, 0x201f) write$cgroup_type(r5, &(0x7f0000000200), 0x175d9003) 1m21.03464379s ago: executing program 3 (id=341): socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpquota}, {@pquota}]}, 0x5, 0xb95a, &(0x7f0000017a80)="$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") r0 = getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 1m17.481591987s ago: executing program 3 (id=346): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace(0x11, r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x181840) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000007c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100009423000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 8.178571631s ago: executing program 4 (id=388): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 7.441195564s ago: executing program 1 (id=389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 7.139894355s ago: executing program 4 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) io_setup(0x200, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90) 6.732738657s ago: executing program 1 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000001c0)='./file1\x00', 0x810, &(0x7f00000002c0)={[{@treelog}, {@barrier}, {@space_cache_v1}, {@notreelog}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {}, {@noenospc_debug}, {@clear_cache}, {@flushoncommit}, {@ssd}, {@space_cache_v1}, {@ssd}]}, 0x1, 0x50f3, &(0x7f000000a240)="$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") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fdatasync(r0) 4.088345188s ago: executing program 1 (id=392): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0, 0x40000103}) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0) 3.757914591s ago: executing program 4 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000002f80)='task_rename\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') 1.770854779s ago: executing program 1 (id=394): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000200)=ANY=[@ANYBLOB='adinicb,shortad,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',unhide,iocharset=macgreek,mode=00000000000020000000000,fileset=0000\x00\x00\x00\x00000000002237,adinicb,gid=forget,iocharset=cp865,gid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000000000,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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") rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000ff0f000000000000ed030003000000000010000300000000002000000000000000"], 0xfe04, 0x3) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x80408a, &(0x7f0000000540)=ANY=[], 0x11, 0x6c1, &(0x7f000000abc0)="$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") setxattr$incfs_metadata(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/170, 0xaa}], 0x1}, 0x0) 0s ago: executing program 4 (id=395): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): e_1) entered forwarding state [ 216.018516][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.546173][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.594850][ T5813] veth0_vlan: entered promiscuous mode [ 216.739090][ T5813] veth1_vlan: entered promiscuous mode [ 216.869167][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.922932][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.232627][ T5813] veth0_macvtap: entered promiscuous mode [ 217.318557][ T5813] veth1_macvtap: entered promiscuous mode [ 217.402379][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.454904][ T5809] veth0_vlan: entered promiscuous mode [ 217.588824][ T5809] veth1_vlan: entered promiscuous mode [ 217.624433][ T5807] veth0_vlan: entered promiscuous mode [ 217.702160][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.795542][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.837364][ T5807] veth1_vlan: entered promiscuous mode [ 217.965783][ T4485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.019115][ T4485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.083903][ T4485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.153187][ T1854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.167458][ T5818] veth0_vlan: entered promiscuous mode [ 218.248576][ T5809] veth0_macvtap: entered promiscuous mode [ 218.328932][ T5818] veth1_vlan: entered promiscuous mode [ 218.363175][ T5807] veth0_macvtap: entered promiscuous mode [ 218.380071][ T5809] veth1_macvtap: entered promiscuous mode [ 218.440165][ T5807] veth1_macvtap: entered promiscuous mode [ 218.569199][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.668245][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.786226][ T5818] veth0_macvtap: entered promiscuous mode [ 218.832972][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.855478][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.876902][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.894830][ T5818] veth1_macvtap: entered promiscuous mode [ 218.934614][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.972854][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.052298][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.061381][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.166726][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.206181][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.238442][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.273165][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.295051][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.404576][ T4485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.433788][ T4485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.495639][ T4485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.541106][ T4485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.766697][ T5814] veth0_vlan: entered promiscuous mode [ 219.891133][ T5814] veth1_vlan: entered promiscuous mode [ 220.271597][ T5814] veth0_macvtap: entered promiscuous mode [ 220.348952][ T5814] veth1_macvtap: entered promiscuous mode [ 220.566960][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.671509][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.825387][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.872991][ T1854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.921515][ T1854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.974746][ T1854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.953467][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.961517][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.196804][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.205029][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.247972][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.256295][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.463431][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.471487][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.492041][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.500058][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.649628][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.658730][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.730603][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.741324][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.837783][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 227.041573][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.054442][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.855792][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 228.238607][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 228.250353][ T5871] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 228.259805][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.283903][ T6007] 9pnet_fd: p9_fd_create_tcp (6007): problem connecting socket to 127.0.0.1 [ 228.378797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.379015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.480829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.685025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.787687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.890284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.992592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 229.094875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 229.179604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.197295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.513823][ T5871] usb 2-1: config 0 descriptor?? [ 231.630477][ T1897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.638673][ T1897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.872361][ T1897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.880824][ T1897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.022148][ T5871] usb 2-1: can't set config #0, error -71 [ 232.057179][ T6015] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 232.104869][ T5871] usb 2-1: USB disconnect, device number 2 [ 235.086489][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.094029][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.213545][ T6038] loop3: detected capacity change from 0 to 32768 [ 238.293739][ T6038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15 (6038) [ 238.375413][ T6038] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.386122][ T6038] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 238.395474][ T6038] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 239.621092][ T6043] loop1: detected capacity change from 0 to 40427 [ 239.635944][ T6043] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 239.649039][ T6043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 239.679547][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 239.734297][ T6043] F2FS-fs (loop1): invalid crc value [ 239.771420][ T6038] BTRFS info (device loop3): rebuilding free space tree [ 240.018199][ T6043] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 240.032920][ T6038] BTRFS info (device loop3): disabling free space tree [ 240.040281][ T6043] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 240.040440][ T6038] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.047702][ T6043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 240.070867][ T6038] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.102804][ T6038] BTRFS info (device loop3): setting nodatasum [ 240.109495][ T6038] BTRFS info (device loop3): allowing degraded mounts [ 240.116605][ T6038] BTRFS info (device loop3): enabling ssd optimizations [ 240.123955][ T6038] BTRFS info (device loop3): turning off barriers [ 240.130583][ T6038] BTRFS info (device loop3): disabling tree log [ 240.136645][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 240.137107][ T6038] BTRFS info (device loop3): turning on flush-on-commit [ 240.150119][ T5868] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 240.163396][ T6038] BTRFS info (device loop3): enabling disk space caching [ 240.169284][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.175125][ T6038] BTRFS info (device loop3): force clearing of disk cache [ 240.821091][ T5813] syz-executor: attempt to access beyond end of device [ 240.821091][ T5813] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 240.836170][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 240.836320][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.836419][ T5813] Call Trace: [ 240.836483][ T5813] [ 240.836536][ T5813] __dump_stack+0x26/0x30 [ 240.836749][ T5813] dump_stack_lvl+0x1df/0x270 [ 240.836951][ T5813] dump_stack+0x1e/0x25 [ 240.837125][ T5813] f2fs_handle_critical_error+0xa6f/0xc20 [ 240.837384][ T5813] f2fs_stop_checkpoint+0x65/0x80 [ 240.837606][ T5813] f2fs_write_end_io+0x101c/0x1bc0 [ 240.837822][ T5813] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 240.837993][ T5813] bio_endio+0xeb1/0x1010 [ 240.838193][ T5813] submit_bio_noacct+0x213/0x2750 [ 240.838457][ T5813] submit_bio+0x57c/0x630 [ 240.838658][ T5813] f2fs_submit_write_bio+0x92/0x250 [ 240.838869][ T5813] __submit_merged_bio+0x16f/0x6a0 [ 240.839076][ T5813] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 240.839275][ T5813] __submit_merged_write_cond+0x715/0x9a0 [ 240.839482][ T5813] ? filemap_get_folios_tag+0x488/0x510 [ 240.839715][ T5813] f2fs_submit_merged_write+0x31/0x40 [ 240.839912][ T5813] f2fs_sync_node_pages+0x1fd7/0x20c0 [ 240.840116][ T5813] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 240.840380][ T5813] f2fs_write_checkpoint+0x15ff/0x2b00 [ 240.840706][ T5813] kill_f2fs_super+0x2ff/0x970 [ 240.840900][ T5813] ? __pfx_kill_f2fs_super+0x10/0x10 [ 240.841069][ T5813] deactivate_locked_super+0xcb/0x3c0 [ 240.841260][ T5813] deactivate_super+0x12f/0x140 [ 240.841436][ T5813] cleanup_mnt+0x6fb/0x780 [ 240.841640][ T5813] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 240.841828][ T5813] ? __pfx___cleanup_mnt+0x10/0x10 [ 240.842047][ T5813] __cleanup_mnt+0x22/0x30 [ 240.842247][ T5813] task_work_run+0x206/0x2b0 [ 240.842439][ T5813] exit_to_user_mode_loop+0x2a6/0x330 [ 240.842640][ T5813] do_syscall_64+0x1e3/0x210 [ 240.842796][ T5813] ? irqentry_exit+0x16/0x60 [ 240.842990][ T5813] ? clear_bhb_loop+0x40/0x90 [ 240.843164][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.843326][ T5813] RIP: 0033:0x7fe38e9901f7 [ 240.843461][ T5813] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 240.843585][ T5813] RSP: 002b:00007ffc82c758e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 240.843762][ T5813] RAX: 0000000000000000 RBX: 00007fe38ea11d7d RCX: 00007fe38e9901f7 [ 240.843868][ T5813] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc82c759a0 [ 240.843958][ T5813] RBP: 00007ffc82c759a0 R08: 0000000000000000 R09: 0000000000000000 [ 240.844049][ T5813] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc82c76a30 [ 240.844146][ T5813] R13: 00007fe38ea11d7d R14: 000000000003ac11 R15: 00007ffc82c76a70 [ 240.844280][ T5813] [ 241.123300][ T5813] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 241.139915][ T5868] usb 3-1: config 0 descriptor?? [ 243.187906][ T6071] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 243.194897][ T6077] loop0: detected capacity change from 0 to 40427 [ 243.376196][ T5818] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.449765][ T6077] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 243.456949][ T6077] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 243.513901][ T6077] F2FS-fs (loop0): invalid crc value [ 244.258688][ T6077] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 244.320487][ T6077] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 244.327970][ T6077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 246.550704][ T5868] usbhid 3-1:0.0: can't add hid device: -32 [ 246.558293][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 246.648433][ T5868] usb 3-1: USB disconnect, device number 2 [ 250.194963][ T6091] loop2: detected capacity change from 0 to 40427 [ 250.387768][ T6091] F2FS-fs (loop2): invalid crc value [ 250.710844][ T6091] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.724085][ T6091] F2FS-fs (loop2): Start checkpoint disabled! [ 250.790764][ T6091] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 251.458032][ T30] audit: type=1800 audit(1758675521.101:2): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 251.881933][ T6091] syz.2.26: attempt to access beyond end of device [ 251.881933][ T6091] loop2: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 251.912969][ T6091] syz.2.26: attempt to access beyond end of device [ 251.912969][ T6091] loop2: rw=2049, sector=79872, nr_sectors = 520 limit=40427 [ 251.999050][ T30] audit: type=1800 audit(1758675522.001:3): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 252.595737][ T1888] kworker/u8:10: attempt to access beyond end of device [ 252.595737][ T1888] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.610254][ T1888] CPU: 1 UID: 0 PID: 1888 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(none) [ 252.610397][ T1888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.610532][ T1888] Workqueue: writeback wb_workfn (flush-7:2) [ 252.610801][ T1888] Call Trace: [ 252.610855][ T1888] [ 252.610909][ T1888] __dump_stack+0x26/0x30 [ 252.611091][ T1888] dump_stack_lvl+0x1df/0x270 [ 252.611280][ T1888] dump_stack+0x1e/0x25 [ 252.611447][ T1888] f2fs_handle_critical_error+0xa6f/0xc20 [ 252.611709][ T1888] f2fs_stop_checkpoint+0x65/0x80 [ 252.611918][ T1888] f2fs_write_end_io+0x101c/0x1bc0 [ 252.612111][ T1888] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 252.612255][ T1888] bio_endio+0xeb1/0x1010 [ 252.612428][ T1888] submit_bio_noacct+0x213/0x2750 [ 252.612663][ T1888] submit_bio+0x57c/0x630 [ 252.612838][ T1888] f2fs_submit_write_bio+0x92/0x250 [ 252.613034][ T1888] __submit_merged_bio+0x16f/0x6a0 [ 252.613226][ T1888] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.613417][ T1888] __submit_merged_write_cond+0x458/0x9a0 [ 252.613651][ T1888] f2fs_write_data_pages+0x4bb2/0x5480 [ 252.613995][ T1888] ? module_trace_bprintk_format_notify+0x2b0/0xc30 [ 252.614222][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.614390][ T1888] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.614574][ T1888] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 252.614787][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.614950][ T1888] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.615138][ T1888] ? __rb_insert_augmented+0x80/0x11b0 [ 252.615346][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.615510][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.615684][ T1888] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.615857][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.616023][ T1888] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.616197][ T1888] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 252.616409][ T1888] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 252.616626][ T1888] do_writepages+0x3f2/0x860 [ 252.616773][ T1888] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 252.616962][ T1888] ? queue_io+0x731/0x790 [ 252.617101][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.617290][ T1888] __writeback_single_inode+0x101/0x1190 [ 252.617459][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.617649][ T1888] writeback_sb_inodes+0xac1/0x1cb0 [ 252.617900][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.618112][ T1888] wb_writeback+0x4ce/0xc00 [ 252.618281][ T1888] ? queue_io+0x431/0x790 [ 252.618438][ T1888] wb_workfn+0x397/0x1910 [ 252.618641][ T1888] ? kmsan_get_metadata+0xfb/0x160 [ 252.618836][ T1888] ? __pfx_wb_workfn+0x10/0x10 [ 252.619027][ T1888] process_scheduled_works+0xb8e/0x1d80 [ 252.619290][ T1888] worker_thread+0xedf/0x1590 [ 252.619529][ T1888] kthread+0xd59/0xf00 [ 252.619678][ T1888] ? __pfx_worker_thread+0x10/0x10 [ 252.619905][ T1888] ? __pfx_kthread+0x10/0x10 [ 252.620053][ T1888] ret_from_fork+0x233/0x380 [ 252.620198][ T1888] ? __pfx_kthread+0x10/0x10 [ 252.620350][ T1888] ret_from_fork_asm+0x1a/0x30 [ 252.620566][ T1888] [ 252.923721][ T1888] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 254.036834][ T6101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 254.043630][ T6101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 254.052495][ T6101] vhci_hcd vhci_hcd.0: Device attached [ 254.319207][ T6103] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 254.326100][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.334665][ T6103] vhci_hcd vhci_hcd.0: Device attached [ 254.402638][ T9] vhci_hcd: vhci_device speed not set [ 254.458561][ T6106] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 254.465348][ T6106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.473740][ T6106] vhci_hcd vhci_hcd.0: Device attached [ 254.512198][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 254.801939][ T6116] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12) [ 254.808816][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.817506][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 255.062274][ T6101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 255.069076][ T6101] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 255.077475][ T6101] vhci_hcd vhci_hcd.0: Device attached [ 255.529463][ T6103] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 255.604349][ T6106] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 255.787654][ T6111] loop3: detected capacity change from 0 to 4096 [ 255.868539][ T6116] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(14) [ 255.875497][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 255.884153][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 255.938817][ T6119] vhci_hcd: connection closed [ 255.962537][ T6121] vhci_hcd: connection closed [ 255.985236][ T6102] vhci_hcd: connection reset by peer [ 255.996970][ T6108] vhci_hcd: connection closed [ 256.003810][ T6109] vhci_hcd: connection closed [ 256.011147][ T6117] vhci_hcd: connection closed [ 256.046386][ T1888] vhci_hcd: stop threads [ 256.056377][ T1888] vhci_hcd: release socket [ 256.061059][ T1888] vhci_hcd: disconnect device [ 256.107987][ T1888] vhci_hcd: stop threads [ 256.112725][ T1888] vhci_hcd: release socket [ 256.117432][ T1888] vhci_hcd: disconnect device [ 256.235283][ T1888] vhci_hcd: stop threads [ 256.239754][ T1888] vhci_hcd: release socket [ 256.244709][ T1888] vhci_hcd: disconnect device [ 256.303163][ T1888] vhci_hcd: stop threads [ 256.307838][ T1888] vhci_hcd: release socket [ 256.313249][ T1888] vhci_hcd: disconnect device [ 256.367682][ T1888] vhci_hcd: stop threads [ 256.372501][ T1888] vhci_hcd: release socket [ 256.377364][ T1888] vhci_hcd: disconnect device [ 256.426199][ T1888] vhci_hcd: stop threads [ 256.430693][ T1888] vhci_hcd: release socket [ 256.440099][ T1888] vhci_hcd: disconnect device [ 259.178119][ T6135] loop4: detected capacity change from 0 to 16 [ 259.294207][ T6135] erofs (device loop4): mounted with root inode @ nid 36. [ 259.723154][ T9] vhci_hcd: vhci_device speed not set [ 262.852021][ T5868] usb usb42-port1: attempt power cycle [ 263.720536][ T6153] loop4: detected capacity change from 0 to 40427 [ 263.919156][ T6153] F2FS-fs (loop4): invalid crc value [ 264.008216][ T6150] loop3: detected capacity change from 0 to 4096 [ 264.223227][ T5868] usb usb42-port1: unable to enumerate USB device [ 264.235834][ T6153] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 264.248675][ T6153] F2FS-fs (loop4): Start checkpoint disabled! [ 264.339123][ T6150] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 264.369318][ T6153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 264.452386][ T30] audit: type=1800 audit(1758675534.631:4): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 265.134417][ T6150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.275322][ T6168] tipc: Enabling of bearer rejected, failed to enable media [ 268.028945][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.755945][ T6180] Bluetooth: MGMT ver 1.23 [ 270.175254][ T3713] kworker/u8:16: attempt to access beyond end of device [ 270.175254][ T3713] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.190055][ T3713] CPU: 1 UID: 0 PID: 3713 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(none) [ 270.190215][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.190326][ T3713] Workqueue: writeback wb_workfn (flush-7:4) [ 270.190559][ T3713] Call Trace: [ 270.190612][ T3713] [ 270.190662][ T3713] __dump_stack+0x26/0x30 [ 270.190837][ T3713] dump_stack_lvl+0x1df/0x270 [ 270.191018][ T3713] dump_stack+0x1e/0x25 [ 270.191184][ T3713] f2fs_handle_critical_error+0xa6f/0xc20 [ 270.191431][ T3713] f2fs_stop_checkpoint+0x65/0x80 [ 270.191643][ T3713] f2fs_write_end_io+0x101c/0x1bc0 [ 270.191833][ T3713] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 270.191974][ T3713] bio_endio+0xeb1/0x1010 [ 270.192154][ T3713] submit_bio_noacct+0x213/0x2750 [ 270.192376][ T3713] submit_bio+0x57c/0x630 [ 270.192541][ T3713] f2fs_submit_write_bio+0x92/0x250 [ 270.192764][ T3713] __submit_merged_bio+0x16f/0x6a0 [ 270.192955][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.193156][ T3713] __submit_merged_write_cond+0x458/0x9a0 [ 270.193381][ T3713] f2fs_write_data_pages+0x4bb2/0x5480 [ 270.193735][ T3713] ? module_trace_bprintk_format_notify+0x2b0/0xc30 [ 270.193941][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.194107][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.194302][ T3713] ? min_vruntime_cb_rotate+0x256/0x560 [ 270.194493][ T3713] ? __rb_insert_augmented+0xd12/0x11b0 [ 270.194704][ T3713] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 270.194872][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.195044][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.195222][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.195397][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.195567][ T3713] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 270.195775][ T3713] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 270.195978][ T3713] do_writepages+0x3f2/0x860 [ 270.196127][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.196305][ T3713] ? queue_io+0x731/0x790 [ 270.196450][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.196628][ T3713] __writeback_single_inode+0x101/0x1190 [ 270.196817][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.197010][ T3713] writeback_sb_inodes+0xac1/0x1cb0 [ 270.197258][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.197474][ T3713] wb_writeback+0x4ce/0xc00 [ 270.197647][ T3713] ? queue_io+0x431/0x790 [ 270.197804][ T3713] wb_workfn+0x397/0x1910 [ 270.198007][ T3713] ? kmsan_get_metadata+0xfb/0x160 [ 270.198203][ T3713] ? __pfx_wb_workfn+0x10/0x10 [ 270.198395][ T3713] process_scheduled_works+0xb8e/0x1d80 [ 270.198659][ T3713] worker_thread+0xedf/0x1590 [ 270.198895][ T3713] kthread+0xd59/0xf00 [ 270.199035][ T3713] ? __pfx_worker_thread+0x10/0x10 [ 270.199278][ T3713] ? __pfx_kthread+0x10/0x10 [ 270.199422][ T3713] ret_from_fork+0x233/0x380 [ 270.199563][ T3713] ? __pfx_kthread+0x10/0x10 [ 270.199713][ T3713] ret_from_fork_asm+0x1a/0x30 [ 270.199933][ T3713] [ 270.490276][ T3713] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 280.070667][ T6239] loop1: detected capacity change from 0 to 128 [ 282.553539][ T30] audit: type=1800 audit(1758675552.691:5): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.62" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 286.897027][ T6256] loop3: detected capacity change from 0 to 40427 [ 287.064184][ T6256] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 287.070716][ T6256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 287.086547][ T6256] F2FS-fs (loop3): invalid crc value [ 287.438033][ T6256] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.484449][ T6256] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 287.492112][ T6256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.094291][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.118706][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.131338][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.149006][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.161255][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.304380][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 291.342293][ T5811] Bluetooth: hci5: command tx timeout [ 293.419689][ T5811] Bluetooth: hci5: command tx timeout [ 294.456849][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 295.492235][ T5811] Bluetooth: hci5: command tx timeout [ 295.614881][ T6307] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 295.621855][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.630510][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 295.739940][ T6314] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 295.746925][ T6314] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 295.758675][ T6314] vhci_hcd vhci_hcd.0: Device attached [ 295.842148][ T9] vhci_hcd: vhci_device speed not set [ 295.890879][ T6307] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 295.898196][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 295.906620][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 295.932056][ T9] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 296.029392][ T6314] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 296.036277][ T6314] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.045355][ T6314] vhci_hcd vhci_hcd.0: Device attached [ 296.115179][ T6307] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 296.122509][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 296.131473][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 296.226467][ T6314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.295150][ T6327] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.395352][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.402558][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.604813][ T6324] vhci_hcd: connection closed [ 296.605894][ T6319] vhci_hcd: connection closed [ 296.612616][ T6311] vhci_hcd: connection reset by peer [ 296.625076][ T6322] vhci_hcd: connection closed [ 296.625955][ T6315] vhci_hcd: connection closed [ 296.632951][ T3016] vhci_hcd: stop threads [ 296.642860][ T3016] vhci_hcd: release socket [ 296.647498][ T3016] vhci_hcd: disconnect device [ 296.742776][ T3016] vhci_hcd: stop threads [ 296.747237][ T3016] vhci_hcd: release socket [ 296.752420][ T3016] vhci_hcd: disconnect device [ 296.805749][ T3016] vhci_hcd: stop threads [ 296.810476][ T3016] vhci_hcd: release socket [ 296.815727][ T3016] vhci_hcd: disconnect device [ 296.823373][ T3016] vhci_hcd: stop threads [ 296.827786][ T3016] vhci_hcd: release socket [ 296.834361][ T3016] vhci_hcd: disconnect device [ 296.942654][ T3016] vhci_hcd: stop threads [ 296.947309][ T3016] vhci_hcd: release socket [ 296.952721][ T3016] vhci_hcd: disconnect device [ 297.082889][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.095840][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.103726][ T6269] bridge_slave_0: entered allmulticast mode [ 297.112479][ T6269] bridge_slave_0: entered promiscuous mode [ 297.310185][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.318416][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.326172][ T6269] bridge_slave_1: entered allmulticast mode [ 297.336101][ T6269] bridge_slave_1: entered promiscuous mode [ 297.580158][ T5811] Bluetooth: hci5: command tx timeout [ 297.986891][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.151007][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.634407][ T11] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 298.685501][ T6269] team0: Port device team_slave_0 added [ 298.763878][ T6269] team0: Port device team_slave_1 added [ 298.823534][ T11] usb 1-1: device descriptor read/64, error -71 [ 299.069297][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.076968][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.103805][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.115715][ T11] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 299.141256][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.148455][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.175790][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.272026][ T11] usb 1-1: device descriptor read/64, error -71 [ 299.390546][ T11] usb usb1-port1: attempt power cycle [ 299.688001][ T6350] fuse: Unknown parameter 'grou00000000000000000000' [ 299.772723][ T11] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 299.858938][ T11] usb 1-1: device descriptor read/8, error -71 [ 299.942263][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 299.949489][ T6269] hsr_slave_0: entered promiscuous mode [ 299.966392][ T6269] hsr_slave_1: entered promiscuous mode [ 299.975293][ T6269] debugfs: 'hsr0' already exists in 'hsr' [ 299.981199][ T6269] Cannot create hsr debugfs directory [ 300.142535][ T11] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 300.187047][ T11] usb 1-1: device descriptor read/8, error -71 [ 300.219340][ T24] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 300.232592][ T24] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 300.245563][ T24] usb 5-1: config 0 has no interfaces? [ 300.251321][ T24] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 300.265821][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.319935][ T24] usb 5-1: config 0 descriptor?? [ 300.334617][ T11] usb usb1-port1: unable to enumerate USB device [ 300.583284][ T11] usb 5-1: USB disconnect, device number 2 [ 301.087430][ T9] vhci_hcd: vhci_device speed not set [ 301.548558][ T6362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 301.555428][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 301.563723][ T6362] vhci_hcd vhci_hcd.0: Device attached [ 301.669206][ T6365] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 301.676094][ T6365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.684418][ T6365] vhci_hcd vhci_hcd.0: Device attached [ 301.812672][ T24] vhci_hcd: vhci_device speed not set [ 301.862373][ T6362] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 301.869246][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.877490][ T6362] vhci_hcd vhci_hcd.0: Device attached [ 301.922186][ T24] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 302.021635][ T6375] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 302.028512][ T6375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 302.037319][ T6375] vhci_hcd vhci_hcd.0: Device attached [ 302.139176][ T6269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.294556][ T6362] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.465267][ T6365] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.504643][ T5868] usb usb42-port1: attempt power cycle [ 302.521215][ T6269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.699474][ T6269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.784595][ T6377] vhci_hcd: connection closed [ 302.786067][ T1854] vhci_hcd: stop threads [ 302.795702][ T1854] vhci_hcd: release socket [ 302.800362][ T1854] vhci_hcd: disconnect device [ 302.863035][ T6363] vhci_hcd: connection reset by peer [ 302.869155][ T6367] vhci_hcd: connection closed [ 302.870142][ T6372] vhci_hcd: connection closed [ 303.894348][ T6269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.094633][ T5868] usb usb42-port1: unable to enumerate USB device [ 305.173020][ T4372] vhci_hcd: stop threads [ 305.181591][ T4372] vhci_hcd: release socket [ 305.186402][ T4372] vhci_hcd: disconnect device [ 305.323446][ T4372] vhci_hcd: stop threads [ 305.328015][ T4372] vhci_hcd: release socket [ 305.333073][ T4372] vhci_hcd: disconnect device [ 305.354187][ T4372] vhci_hcd: stop threads [ 305.358817][ T4372] vhci_hcd: release socket [ 305.363861][ T4372] vhci_hcd: disconnect device [ 306.323158][ T6394] fuse: Unknown parameter 'grou00000000000000000000' [ 306.974736][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.061664][ T24] vhci_hcd: vhci_device speed not set [ 307.289611][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.374891][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 307.383349][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.391149][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.487372][ T6402] loop3: detected capacity change from 0 to 1024 [ 307.548155][ T6402] ======================================================= [ 307.548155][ T6402] WARNING: The mand mount option has been deprecated and [ 307.548155][ T6402] and is ignored by this kernel. Remove the mand [ 307.548155][ T6402] option from the mount to silence this warning. [ 307.548155][ T6402] ======================================================= [ 307.584774][ T6402] EXT4-fs: Ignoring removed oldalloc option [ 307.590916][ T6402] EXT4-fs: Ignoring removed bh option [ 307.609889][ T9] usb 5-1: device descriptor read/64, error -71 [ 307.664835][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.672494][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.822415][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.883231][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 307.899162][ T6269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.911177][ T6269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.053586][ T9] usb 5-1: device descriptor read/64, error -71 [ 308.185871][ T9] usb usb5-port1: attempt power cycle [ 308.283640][ T6402] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 308.662345][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 308.734654][ T9] usb 5-1: device descriptor read/8, error -71 [ 308.992281][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 309.005044][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.077346][ T9] usb 5-1: device descriptor read/8, error -71 [ 309.219379][ T9] usb usb5-port1: unable to enumerate USB device [ 309.364515][ T6416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 309.371513][ T6416] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.383313][ T6416] vhci_hcd vhci_hcd.0: Device attached [ 309.504640][ T6422] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 309.511517][ T6422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.520157][ T6422] vhci_hcd vhci_hcd.0: Device attached [ 309.622582][ T9] vhci_hcd: vhci_device speed not set [ 309.662431][ T6422] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 309.669315][ T6422] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 309.677999][ T6422] vhci_hcd vhci_hcd.0: Device attached [ 309.702486][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 309.797039][ T6416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 309.950844][ T6422] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 310.208616][ T6429] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 310.215500][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 310.223745][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 312.931276][ T6435] loop0: detected capacity change from 0 to 1024 [ 313.123940][ T6430] vhci_hcd: connection closed [ 313.124977][ T6427] vhci_hcd: connection closed [ 313.131072][ T6419] vhci_hcd: connection reset by peer [ 313.131125][ T6424] vhci_hcd: connection closed [ 313.157026][ T6435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.181274][ T6435] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.235630][ T35] vhci_hcd: stop threads [ 313.240077][ T35] vhci_hcd: release socket [ 313.244961][ T35] vhci_hcd: disconnect device [ 313.345521][ T35] vhci_hcd: stop threads [ 313.350104][ T35] vhci_hcd: release socket [ 313.355310][ T35] vhci_hcd: disconnect device [ 313.508145][ T35] vhci_hcd: stop threads [ 313.513042][ T35] vhci_hcd: release socket [ 313.517700][ T35] vhci_hcd: disconnect device [ 313.639252][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.695682][ T35] vhci_hcd: stop threads [ 313.700137][ T35] vhci_hcd: release socket [ 313.705152][ T35] vhci_hcd: disconnect device [ 314.012193][ T6445] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 314.065575][ T6448] fuse: Unknown parameter 'grou00000000000000000000' [ 314.138118][ T6444] loop3: detected capacity change from 0 to 32768 [ 314.155254][ T6444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.123 (6444) [ 314.195680][ T6445] EXT4-fs (loop0): Remounting filesystem read-only [ 314.205778][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.230600][ T6444] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.241376][ T6444] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 314.250764][ T6444] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 314.829228][ T6444] BTRFS info (device loop3): rebuilding free space tree [ 314.862087][ T6444] BTRFS info (device loop3): disabling free space tree [ 314.862960][ T9] vhci_hcd: vhci_device speed not set [ 314.869500][ T6444] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 314.884617][ T6444] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 314.925356][ T6444] BTRFS info (device loop3): setting nodatasum [ 314.932509][ T6444] BTRFS info (device loop3): allowing degraded mounts [ 314.939568][ T6444] BTRFS info (device loop3): enabling ssd optimizations [ 314.947085][ T6444] BTRFS info (device loop3): turning off barriers [ 314.953848][ T6444] BTRFS info (device loop3): disabling tree log [ 314.960373][ T6444] BTRFS info (device loop3): turning on flush-on-commit [ 314.967742][ T6444] BTRFS info (device loop3): enabling disk space caching [ 314.975349][ T6444] BTRFS info (device loop3): force clearing of disk cache [ 315.277533][ T5818] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.107049][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 319.293480][ T9] usb 1-1: device descriptor read/64, error -71 [ 319.629517][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 319.884502][ T9] usb 1-1: device descriptor read/64, error -71 [ 320.038991][ T9] usb usb1-port1: attempt power cycle [ 321.106332][ T6269] veth0_vlan: entered promiscuous mode [ 322.140827][ T6269] veth1_vlan: entered promiscuous mode [ 322.458201][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 322.868232][ T6269] veth0_macvtap: entered promiscuous mode [ 323.022106][ T6269] veth1_macvtap: entered promiscuous mode [ 323.176494][ T6499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 323.183390][ T6499] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.192785][ T6499] vhci_hcd vhci_hcd.0: Device attached [ 323.226903][ T9] usb 1-1: device descriptor read/8, error -71 [ 323.257982][ T6500] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 323.264864][ T6500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.274060][ T6500] vhci_hcd vhci_hcd.0: Device attached [ 323.436462][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.536744][ T5868] vhci_hcd: vhci_device speed not set [ 323.571226][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.632823][ T5868] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 323.646036][ T6499] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 323.652899][ T6499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.662728][ T6499] vhci_hcd vhci_hcd.0: Device attached [ 323.732643][ T1888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.779751][ T1888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.789940][ T6500] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 323.794740][ T6515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.796763][ T6500] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.816460][ T6500] vhci_hcd vhci_hcd.0: Device attached [ 323.895262][ T1888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.908714][ T6517] fuse: Unknown parameter 'group_i00000000000000000000' [ 323.947951][ T1888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.015615][ T6499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 324.306389][ T6511] vhci_hcd: connection closed [ 324.322809][ T6507] vhci_hcd: connection closed [ 324.334726][ T6510] vhci_hcd: connection closed [ 324.339082][ T6520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 324.347244][ T6505] vhci_hcd: connection reset by peer [ 324.367802][ T4372] vhci_hcd: stop threads [ 324.373094][ T4372] vhci_hcd: release socket [ 324.377758][ T4372] vhci_hcd: disconnect device [ 324.459506][ T4372] vhci_hcd: stop threads [ 324.469605][ T4372] vhci_hcd: release socket [ 324.475314][ T4372] vhci_hcd: disconnect device [ 324.608982][ T4372] vhci_hcd: stop threads [ 324.614124][ T4372] vhci_hcd: release socket [ 324.618787][ T4372] vhci_hcd: disconnect device [ 324.690825][ T4372] vhci_hcd: stop threads [ 324.696663][ T4372] vhci_hcd: release socket [ 324.701560][ T4372] vhci_hcd: disconnect device [ 327.656195][ T6532] Zero length message leads to an empty skb [ 328.774518][ T5868] vhci_hcd: vhci_device speed not set [ 329.176057][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 329.186038][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 329.195093][ T5103] Bluetooth: hci1: command 0x0406 tx timeout [ 329.201301][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 329.208521][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 331.173519][ T6553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 331.643031][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 333.549787][ T9] usb 2-1: device descriptor read/64, error -71 [ 333.823597][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 333.980359][ T6563] fuse: Unknown parameter 'group_i00000000000000000000' [ 335.075198][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 335.082008][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.093945][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 335.234300][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 335.241187][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 335.249589][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 335.336858][ T5868] vhci_hcd: vhci_device speed not set [ 335.424806][ T5868] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 335.433023][ T6579] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 335.433169][ T6579] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.433509][ T6579] vhci_hcd vhci_hcd.0: Device attached [ 335.455945][ T6570] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.679364][ T6590] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.702187][ T6582] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 335.709061][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 335.717422][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 336.039084][ T6585] vhci_hcd: connection closed [ 336.073990][ T4372] vhci_hcd: stop threads [ 336.083583][ T4372] vhci_hcd: release socket [ 336.088241][ T4372] vhci_hcd: disconnect device [ 336.122587][ T6581] vhci_hcd: connection closed [ 336.123277][ T6577] vhci_hcd: connection closed [ 336.128914][ T6575] vhci_hcd: connection reset by peer [ 336.234450][ T4372] vhci_hcd: stop threads [ 336.238913][ T4372] vhci_hcd: release socket [ 336.243977][ T4372] vhci_hcd: disconnect device [ 336.299487][ T4372] vhci_hcd: stop threads [ 336.304877][ T4372] vhci_hcd: release socket [ 336.314333][ T4372] vhci_hcd: disconnect device [ 336.364739][ T4372] vhci_hcd: stop threads [ 336.369192][ T4372] vhci_hcd: release socket [ 336.374411][ T4372] vhci_hcd: disconnect device [ 337.296993][ T6605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.158'. [ 340.173418][ T6618] fuse: Unknown parameter 'group_i00000000000000000000' [ 340.544193][ T5868] vhci_hcd: vhci_device speed not set [ 341.562163][ T6623] loop1: detected capacity change from 0 to 32768 [ 341.589675][ T6623] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.162 (6623) [ 341.615607][ T6623] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 341.626298][ T6623] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 341.942570][ T6623] BTRFS info (device loop1): rebuilding free space tree [ 342.010229][ T6623] BTRFS info (device loop1): enabling ssd optimizations [ 342.017697][ T6623] BTRFS info (device loop1): turning on sync discard [ 342.024786][ T6623] BTRFS info (device loop1): enabling free space tree [ 342.032070][ T6623] BTRFS info (device loop1): force clearing of disk cache [ 342.045270][ T6623] BTRFS info (device loop1): enabling auto defrag [ 342.053808][ T6623] BTRFS info (device loop1): max_inline set to 0 [ 342.299947][ T5871] usb usb36-port1: attempt power cycle [ 342.336958][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.817929][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.926556][ T6656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 342.933472][ T6656] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.941911][ T6656] vhci_hcd vhci_hcd.0: Device attached [ 342.947795][ T5871] usb usb36-port1: unable to enumerate USB device [ 343.023777][ T5813] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 343.097818][ T6662] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 343.104676][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 343.113324][ T6662] vhci_hcd vhci_hcd.0: Device attached [ 343.144354][ T6656] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 343.151238][ T6656] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.159452][ T6656] vhci_hcd vhci_hcd.0: Device attached [ 343.159553][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.265375][ T6667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 343.272607][ T6667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 343.284487][ T6667] vhci_hcd vhci_hcd.0: Device attached [ 343.294477][ T5868] vhci_hcd: vhci_device speed not set [ 343.318535][ T6656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.402286][ T5868] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 343.481272][ T6656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.572961][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.898877][ T6663] vhci_hcd: connection closed [ 344.025871][ T6665] vhci_hcd: connection closed [ 344.063125][ T4372] vhci_hcd: stop threads [ 344.072671][ T4372] vhci_hcd: release socket [ 344.077440][ T4372] vhci_hcd: disconnect device [ 344.085349][ T6668] vhci_hcd: connection closed [ 344.122247][ T6658] vhci_hcd: connection reset by peer [ 344.588651][ T4372] vhci_hcd: stop threads [ 344.593273][ T4372] vhci_hcd: release socket [ 344.598252][ T4372] vhci_hcd: disconnect device [ 344.650503][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'. [ 344.951560][ T4372] vhci_hcd: stop threads [ 344.956802][ T4372] vhci_hcd: release socket [ 344.961998][ T4372] vhci_hcd: disconnect device [ 345.158723][ T1888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.167077][ T1888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.250768][ T35] bridge_slave_1: left allmulticast mode [ 345.256771][ T35] bridge_slave_1: left promiscuous mode [ 345.263856][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.280408][ T35] bridge_slave_0: left allmulticast mode [ 345.286622][ T35] bridge_slave_0: left promiscuous mode [ 345.295189][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.328375][ T4372] vhci_hcd: stop threads [ 345.332983][ T4372] vhci_hcd: release socket [ 345.337573][ T4372] vhci_hcd: disconnect device [ 347.010240][ T6681] fuse: Unknown parameter 'group_id00000000000000000000' [ 347.077776][ T5864] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 347.303194][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 347.492389][ T5864] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 347.501015][ T5864] usb 2-1: config 179 has no interface number 0 [ 347.507941][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 347.520129][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 347.531923][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 347.543625][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 347.555471][ T5864] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 347.574932][ T5864] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 347.609322][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.670188][ T6679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.999950][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.214134][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.238852][ T35] bond0 (unregistering): Released all slaves [ 348.483133][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.542483][ T5868] vhci_hcd: vhci_device speed not set [ 348.664216][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.678328][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.712435][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.737710][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.882059][ T11] usb 2-1: USB disconnect, device number 5 [ 349.882552][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 349.898799][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 350.592838][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 350.893030][ T5811] Bluetooth: hci0: command tx timeout [ 350.931021][ T6699] loop0: detected capacity change from 0 to 32768 [ 350.954867][ T9] usb usb34-port1: attempt power cycle [ 350.983882][ T6699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.178 (6699) [ 351.007944][ T6699] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.019361][ T6699] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 351.089256][ T6709] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 351.096258][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 351.104722][ T6709] vhci_hcd vhci_hcd.0: Device attached [ 351.165380][ T6712] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 351.172254][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.180350][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 351.392164][ T24] vhci_hcd: vhci_device speed not set [ 351.400888][ T6709] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 351.407786][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.417302][ T6709] vhci_hcd vhci_hcd.0: Device attached [ 351.506469][ T24] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 351.536525][ T6712] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 351.543407][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 351.552942][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 351.649115][ T6709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 351.659928][ T6709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 351.710764][ T6699] BTRFS info (device loop0): rebuilding free space tree [ 351.747452][ T9] usb usb34-port1: unable to enumerate USB device [ 351.816807][ T6699] BTRFS info (device loop0): enabling ssd optimizations [ 351.826316][ T6699] BTRFS info (device loop0): turning on sync discard [ 351.833440][ T6699] BTRFS info (device loop0): enabling free space tree [ 351.840425][ T6699] BTRFS info (device loop0): force clearing of disk cache [ 351.848057][ T6699] BTRFS info (device loop0): enabling auto defrag [ 351.854972][ T6699] BTRFS info (device loop0): max_inline set to 0 [ 351.902579][ T35] hsr_slave_0: left promiscuous mode [ 351.982499][ T35] hsr_slave_1: left promiscuous mode [ 351.990726][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.998763][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.115183][ T6723] vhci_hcd: connection closed [ 352.152934][ T6728] vhci_hcd: connection closed [ 352.164333][ T6710] vhci_hcd: connection reset by peer [ 352.192078][ T6714] vhci_hcd: connection closed [ 352.195384][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.207942][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.218483][ T4485] vhci_hcd: stop threads [ 352.224990][ T4485] vhci_hcd: release socket [ 352.229774][ T4485] vhci_hcd: disconnect device [ 352.352696][ T4485] vhci_hcd: stop threads [ 352.357355][ T4485] vhci_hcd: release socket [ 352.362184][ T4485] vhci_hcd: disconnect device [ 352.503972][ T4485] vhci_hcd: stop threads [ 352.508617][ T4485] vhci_hcd: release socket [ 352.514194][ T4485] vhci_hcd: disconnect device [ 352.535383][ T35] veth1_macvtap: left promiscuous mode [ 352.541125][ T35] veth0_macvtap: left promiscuous mode [ 352.547187][ T35] veth1_vlan: left promiscuous mode [ 352.552837][ T35] veth0_vlan: left promiscuous mode [ 352.607343][ T4485] vhci_hcd: stop threads [ 352.612113][ T4485] vhci_hcd: release socket [ 352.616841][ T4485] vhci_hcd: disconnect device [ 352.953034][ T5811] Bluetooth: hci0: command tx timeout [ 353.007591][ T5809] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 353.259821][ T6742] fuse: Unknown parameter 'group_id00000000000000000000' [ 354.964913][ T35] team0 (unregistering): Port device team_slave_1 removed [ 355.012212][ T5811] Bluetooth: hci0: command tx timeout [ 355.089335][ T35] team0 (unregistering): Port device team_slave_0 removed [ 356.678496][ T24] vhci_hcd: vhci_device speed not set [ 356.944334][ T6772] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 357.102460][ T5811] Bluetooth: hci0: command tx timeout [ 357.187418][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.495131][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 357.544508][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.872593][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.879395][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.037967][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.209881][ T5864] usb usb42-port1: attempt power cycle [ 358.694276][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.156060][ T5864] usb usb42-port1: unable to enumerate USB device [ 359.644378][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 360.277780][ T35] bridge_slave_1: left allmulticast mode [ 360.283975][ T35] bridge_slave_1: left promiscuous mode [ 360.294294][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.343177][ T35] bridge_slave_0: left allmulticast mode [ 360.349058][ T35] bridge_slave_0: left promiscuous mode [ 360.356049][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.733373][ T6793] fuse: Unknown parameter 'group_id00000000000000000000' [ 361.360880][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.555023][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.688809][ T35] bond0 (unregistering): Released all slaves [ 362.353960][ T6801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.935575][ T35] hsr_slave_0: left promiscuous mode [ 364.026476][ T35] hsr_slave_1: left promiscuous mode [ 364.034946][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.042862][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.235504][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.243468][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.514748][ T35] veth1_macvtap: left promiscuous mode [ 364.520678][ T35] veth0_macvtap: left promiscuous mode [ 364.526843][ T35] veth1_vlan: left promiscuous mode [ 364.532656][ T35] veth0_vlan: left promiscuous mode [ 365.133071][ T6819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.203'. [ 367.346418][ T6834] fuse: Bad value for 'user_id' [ 367.351903][ T6834] fuse: Bad value for 'user_id' [ 367.600356][ T35] team0 (unregistering): Port device team_slave_1 removed [ 367.833590][ T35] team0 (unregistering): Port device team_slave_0 removed [ 370.033232][ T6851] loop4: detected capacity change from 0 to 1024 [ 370.289544][ T6851] hfsplus: request for non-existent node 3 in B*Tree [ 370.297435][ T6851] hfsplus: request for non-existent node 3 in B*Tree [ 372.018776][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.029142][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.037148][ T6690] bridge_slave_0: entered allmulticast mode [ 372.052641][ T6690] bridge_slave_0: entered promiscuous mode [ 372.143788][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 372.224706][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.234647][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.242612][ T6690] bridge_slave_1: entered allmulticast mode [ 372.257730][ T6690] bridge_slave_1: entered promiscuous mode [ 373.110070][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.222356][ T6873] program syz.3.218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.216055][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.589769][ T6880] fuse: Bad value for 'user_id' [ 375.595819][ T6880] fuse: Bad value for 'user_id' [ 376.103226][ T6690] team0: Port device team_slave_0 added [ 376.186412][ T6690] team0: Port device team_slave_1 added [ 376.590276][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.597802][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.623960][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.630880][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.977250][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.984873][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.011462][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.307159][ T6690] hsr_slave_0: entered promiscuous mode [ 380.317630][ T6690] hsr_slave_1: entered promiscuous mode [ 380.326774][ T6690] debugfs: 'hsr0' already exists in 'hsr' [ 380.333161][ T6690] Cannot create hsr debugfs directory [ 383.300776][ T6909] sctp: failed to load transform for md5: -2 [ 383.470640][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.230'. [ 384.238888][ T6690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.273226][ T6690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.307549][ T6690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.888840][ T6924] fuse: Bad value for 'user_id' [ 384.894656][ T6924] fuse: Bad value for 'user_id' [ 385.433633][ T6690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.471900][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.748441][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.854747][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.862383][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.977847][ T6964] fuse: Bad value for 'fd' [ 390.003453][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.010986][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.156304][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'. [ 391.262087][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 391.513945][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 391.561282][ T11] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 391.570561][ T11] usb 2-1: config 179 has no interface number 0 [ 391.578289][ T11] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 391.589740][ T11] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 391.605161][ T11] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 391.618007][ T11] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 391.629977][ T11] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 391.643644][ T11] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 391.653171][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.693520][ T6972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.396399][ T24] usb 2-1: USB disconnect, device number 6 [ 393.397195][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 393.411429][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 394.078793][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.252641][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 395.267243][ T7007] fuse: Bad value for 'fd' [ 395.458118][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 395.491218][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 395.506724][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 395.675517][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 395.685120][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.693540][ T24] usb 1-1: Product: syz [ 395.701328][ T24] usb 1-1: Manufacturer: syz [ 395.707472][ T24] usb 1-1: SerialNumber: syz [ 395.935496][ T24] usb 1-1: config 0 descriptor?? [ 395.989322][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 395.999967][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 396.235867][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 396.593758][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 396.611961][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 397.468234][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 397.499502][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 397.535186][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 397.618690][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 397.674973][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 397.699451][ T6690] veth0_vlan: entered promiscuous mode [ 397.712036][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 397.785108][ T24] usb 1-1: USB disconnect, device number 10 [ 397.897586][ T6690] veth1_vlan: entered promiscuous mode [ 398.291285][ T6690] veth0_macvtap: entered promiscuous mode [ 398.445735][ T6690] veth1_macvtap: entered promiscuous mode [ 398.696360][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.823658][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.899610][ T4485] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.986550][ T4485] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.032771][ T4485] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.088854][ T4485] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.730265][ T7047] syz.0.262 uses obsolete (PF_INET,SOCK_PACKET) [ 403.143298][ T7054] fuse: Bad value for 'fd' [ 403.333645][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 403.442636][ T7053] veth1_macvtap: left promiscuous mode [ 403.732412][ T11] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 403.858733][ T7059] loop3: detected capacity change from 0 to 4096 [ 403.955557][ T7059] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 403.967591][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 404.057407][ T7061] loop0: detected capacity change from 0 to 2048 [ 404.098155][ T7059] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 404.112950][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.222816][ T11] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 404.230849][ T11] usb 5-1: can't read configurations, error -71 [ 404.370219][ T7066] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.399051][ T7061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.642377][ T30] audit: type=1800 audit(1758675674.841:6): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.265" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 411.952509][ T7097] loop4: detected capacity change from 0 to 40427 [ 411.966383][ T7097] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 411.974551][ T7097] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 411.997203][ T7097] F2FS-fs (loop4): invalid crc value [ 412.497947][ T7097] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 412.526045][ T7097] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 412.534452][ T7097] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 413.104665][ T7111] fuse: Bad value for 'fd' [ 414.004881][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.017241][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.038359][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.057904][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.074272][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.332012][ T5103] Bluetooth: hci5: command tx timeout [ 416.385959][ T5814] syz-executor: attempt to access beyond end of device [ 416.385959][ T5814] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 416.402082][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 416.402236][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.402331][ T5814] Call Trace: [ 416.402396][ T5814] [ 416.402450][ T5814] __dump_stack+0x26/0x30 [ 416.402632][ T5814] dump_stack_lvl+0x1df/0x270 [ 416.402827][ T5814] dump_stack+0x1e/0x25 [ 416.402997][ T5814] f2fs_handle_critical_error+0xa6f/0xc20 [ 416.403252][ T5814] f2fs_stop_checkpoint+0x65/0x80 [ 416.403465][ T5814] f2fs_write_end_io+0x101c/0x1bc0 [ 416.403665][ T5814] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 416.403812][ T5814] bio_endio+0xeb1/0x1010 [ 416.403985][ T5814] submit_bio_noacct+0x213/0x2750 [ 416.404225][ T5814] submit_bio+0x57c/0x630 [ 416.404406][ T5814] f2fs_submit_write_bio+0x92/0x250 [ 416.404608][ T5814] __submit_merged_bio+0x16f/0x6a0 [ 416.404806][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 416.405000][ T5814] __submit_merged_write_cond+0x715/0x9a0 [ 416.405204][ T5814] ? filemap_get_folios_tag+0x488/0x510 [ 416.405426][ T5814] f2fs_submit_merged_write+0x31/0x40 [ 416.405613][ T5814] f2fs_sync_node_pages+0x1fd7/0x20c0 [ 416.405822][ T5814] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 416.405993][ T5814] ? stack_depot_save_flags+0x615/0x7b0 [ 416.406209][ T5814] f2fs_write_checkpoint+0x15ff/0x2b00 [ 416.406508][ T5814] kill_f2fs_super+0x2ff/0x970 [ 416.406694][ T5814] ? __pfx_kill_f2fs_super+0x10/0x10 [ 416.406859][ T5814] deactivate_locked_super+0xcb/0x3c0 [ 416.407051][ T5814] deactivate_super+0x12f/0x140 [ 416.407210][ T5814] cleanup_mnt+0x6fb/0x780 [ 416.407398][ T5814] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 416.407574][ T5814] ? __pfx___cleanup_mnt+0x10/0x10 [ 416.407776][ T5814] __cleanup_mnt+0x22/0x30 [ 416.407976][ T5814] task_work_run+0x206/0x2b0 [ 416.408166][ T5814] exit_to_user_mode_loop+0x2a6/0x330 [ 416.408345][ T5814] do_syscall_64+0x1e3/0x210 [ 416.408490][ T5814] ? irqentry_exit+0x16/0x60 [ 416.408676][ T5814] ? clear_bhb_loop+0x40/0x90 [ 416.408842][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.409008][ T5814] RIP: 0033:0x7f4363f901f7 [ 416.409128][ T5814] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 416.409253][ T5814] RSP: 002b:00007ffecd914b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 416.409392][ T5814] RAX: 0000000000000000 RBX: 00007f4364011d7d RCX: 00007f4363f901f7 [ 416.409491][ T5814] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecd914c20 [ 416.409586][ T5814] RBP: 00007ffecd914c20 R08: 0000000000000000 R09: 0000000000000000 [ 416.409678][ T5814] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecd915cb0 [ 416.409775][ T5814] R13: 00007f4364011d7d R14: 00000000000650a4 R15: 00007ffecd915cf0 [ 416.409914][ T5814] [ 416.409970][ T5814] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 418.581888][ T5103] Bluetooth: hci5: command tx timeout [ 419.314774][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.321444][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.349129][ T5864] hid-generic 00A0:C40B:FFFFFFFF.0001: unknown main item tag 0x0 [ 420.504134][ T5864] hid-generic 00A0:C40B:FFFFFFFF.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 420.662861][ T5103] Bluetooth: hci5: command tx timeout [ 420.681951][ T11] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 420.902007][ T11] usb 1-1: config 0 has no interfaces? [ 420.908009][ T11] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 420.917560][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.136106][ T11] usb 1-1: config 0 descriptor?? [ 421.555166][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.760486][ T7115] chnl_net:caif_netlink_parms(): no params data found [ 421.866791][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.194838][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.652237][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.703323][ T5103] Bluetooth: hci5: command tx timeout [ 423.145901][ T14] bridge_slave_1: left allmulticast mode [ 423.151999][ T14] bridge_slave_1: left promiscuous mode [ 423.158866][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.220363][ T14] bridge_slave_0: left allmulticast mode [ 423.226502][ T14] bridge_slave_0: left promiscuous mode [ 423.233457][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.286319][ T7162] fuse: Bad value for 'fd' [ 424.423311][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.477537][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.513408][ T14] bond0 (unregistering): Released all slaves [ 424.823349][ T14] hsr_slave_0: left promiscuous mode [ 424.862109][ T14] hsr_slave_1: left promiscuous mode [ 424.870422][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.878651][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.026417][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.034597][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.250662][ T14] veth1_macvtap: left promiscuous mode [ 425.256618][ T14] veth0_macvtap: left promiscuous mode [ 425.262847][ T14] veth1_vlan: left promiscuous mode [ 425.268396][ T14] veth0_vlan: left promiscuous mode [ 425.482469][ T7175] raw_sendmsg: syz.3.292 forgot to set AF_INET. Fix it! [ 428.138801][ T7177] binder_alloc: 7173: binder_alloc_buf, no vma [ 429.511780][ T14] team0 (unregistering): Port device team_slave_1 removed [ 429.647742][ T14] team0 (unregistering): Port device team_slave_0 removed [ 430.375250][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.383007][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.390708][ T7115] bridge_slave_0: entered allmulticast mode [ 430.400504][ T7115] bridge_slave_0: entered promiscuous mode [ 431.192573][ T7200] fuse: Bad value for 'fd' [ 431.983018][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.990584][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.998553][ T7115] bridge_slave_1: entered allmulticast mode [ 432.008239][ T7115] bridge_slave_1: entered promiscuous mode [ 433.349420][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.520375][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.061298][ T7115] team0: Port device team_slave_0 added [ 434.162997][ T7115] team0: Port device team_slave_1 added [ 437.008734][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.016131][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.042582][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.223052][ T7222] loop3: detected capacity change from 0 to 128 [ 437.292859][ T7223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 437.364680][ T7223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 438.667370][ T7222] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.441212][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.448739][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.475217][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.511193][ T7222] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 441.253280][ T7115] hsr_slave_0: entered promiscuous mode [ 441.263150][ T7115] hsr_slave_1: entered promiscuous mode [ 441.275637][ T7115] debugfs: 'hsr0' already exists in 'hsr' [ 441.281509][ T7115] Cannot create hsr debugfs directory [ 441.325247][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.374045][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.457632][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.658776][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.692137][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.042025][ T5811] Bluetooth: hci0: command tx timeout [ 446.065697][ T5811] Bluetooth: hci0: command tx timeout [ 446.108208][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 446.287207][ T9] usb 5-1: device descriptor read/64, error -71 [ 446.542005][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 447.602719][ T9] usb 5-1: device descriptor read/64, error -71 [ 447.737236][ T9] usb usb5-port1: attempt power cycle [ 448.535089][ T7267] loop3: detected capacity change from 0 to 32768 [ 448.580143][ T7267] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.316 (7267) [ 448.632491][ T5811] Bluetooth: hci0: command tx timeout [ 448.746413][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 448.794451][ T7267] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 448.804915][ T7267] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 448.902761][ T9] usb 5-1: device descriptor read/8, error -71 [ 448.995676][ T7115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.200300][ T7115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.262623][ T7231] chnl_net:caif_netlink_parms(): no params data found [ 449.297411][ T7115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.333695][ T7267] BTRFS info (device loop3): rebuilding free space tree [ 449.385281][ T7267] BTRFS info (device loop3): enabling ssd optimizations [ 449.393043][ T7267] BTRFS info (device loop3): turning on sync discard [ 449.400034][ T7267] BTRFS info (device loop3): enabling free space tree [ 449.407209][ T7267] BTRFS info (device loop3): force clearing of disk cache [ 449.414747][ T7267] BTRFS info (device loop3): enabling auto defrag [ 449.421368][ T7267] BTRFS info (device loop3): max_inline set to 0 [ 449.680091][ T7115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.700710][ T30] audit: type=1800 audit(1758675719.861:7): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.316" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 450.663612][ T5818] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 450.693862][ T5811] Bluetooth: hci0: command tx timeout [ 451.836025][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.092565][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.164967][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.172703][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.316628][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.324413][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.998101][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.005805][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.015043][ T7231] bridge_slave_0: entered allmulticast mode [ 454.025822][ T7231] bridge_slave_0: entered promiscuous mode [ 454.544875][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.552675][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.567701][ T7231] bridge_slave_1: entered allmulticast mode [ 454.584032][ T7231] bridge_slave_1: entered promiscuous mode [ 455.112182][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 455.230314][ T5864] usb 1-1: USB disconnect, device number 11 [ 455.282271][ T24] usb 4-1: device descriptor read/64, error -71 [ 455.419705][ T7231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.577308][ T3016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.593561][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 455.698557][ T7231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.823019][ T24] usb 4-1: device descriptor read/64, error -71 [ 455.841220][ T3016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.952465][ T24] usb usb4-port1: attempt power cycle [ 456.372330][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 456.404763][ T24] usb 4-1: device descriptor read/8, error -71 [ 456.686496][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 456.746132][ T24] usb 4-1: device descriptor read/8, error -71 [ 456.865630][ T24] usb usb4-port1: unable to enumerate USB device [ 457.224750][ T7338] loop4: detected capacity change from 0 to 32768 [ 457.246980][ T7338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.328 (7338) [ 457.269550][ T7338] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.280391][ T7338] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 457.297310][ T3016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.352247][ T7231] team0: Port device team_slave_0 added [ 457.427045][ T3016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.476093][ T7231] team0: Port device team_slave_1 added [ 457.560318][ T7338] BTRFS info (device loop4): rebuilding free space tree [ 457.606675][ T7338] BTRFS info (device loop4): enabling ssd optimizations [ 457.614074][ T7338] BTRFS info (device loop4): turning on sync discard [ 457.621048][ T7338] BTRFS info (device loop4): enabling free space tree [ 457.628339][ T7338] BTRFS info (device loop4): force clearing of disk cache [ 457.635821][ T7338] BTRFS info (device loop4): enabling auto defrag [ 457.642564][ T7338] BTRFS info (device loop4): max_inline set to 0 [ 458.345819][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.353172][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.384275][ T7231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.580403][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.234516][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.241818][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.268789][ T7231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.350115][ T3016] bridge_slave_1: left allmulticast mode [ 459.356445][ T3016] bridge_slave_1: left promiscuous mode [ 459.363136][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.375271][ T5814] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.835587][ T3016] bridge_slave_0: left allmulticast mode [ 459.835703][ T3016] bridge_slave_0: left promiscuous mode [ 459.836674][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.371062][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.544093][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.637265][ T3016] bond0 (unregistering): Released all slaves [ 464.346877][ T7231] hsr_slave_0: entered promiscuous mode [ 464.367169][ T7231] hsr_slave_1: entered promiscuous mode [ 464.376337][ T7231] debugfs: 'hsr0' already exists in 'hsr' [ 464.382416][ T7231] Cannot create hsr debugfs directory [ 465.454260][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 465.662048][ T5868] usb 5-1: device descriptor read/64, error -71 [ 465.985185][ T5868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 466.182114][ T3016] hsr_slave_0: left promiscuous mode [ 466.255279][ T3016] hsr_slave_1: left promiscuous mode [ 466.263678][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.271510][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.281939][ T5868] usb 5-1: device descriptor read/64, error -71 [ 466.358241][ T7405] loop1: detected capacity change from 0 to 32768 [ 466.380438][ T7405] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.339 (7405) [ 466.405651][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.414686][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.418810][ T5868] usb usb5-port1: attempt power cycle [ 466.430022][ T7405] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 466.440799][ T7405] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 466.504084][ T3016] veth1_macvtap: left promiscuous mode [ 466.509923][ T3016] veth0_macvtap: left promiscuous mode [ 466.518189][ T3016] veth1_vlan: left promiscuous mode [ 466.523932][ T3016] veth0_vlan: left promiscuous mode [ 467.584630][ T5868] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 467.663797][ T5868] usb 5-1: device descriptor read/8, error -71 [ 468.049868][ T7405] BTRFS info (device loop1): rebuilding free space tree [ 468.265469][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 468.280499][ T7405] BTRFS info (device loop1): enabling ssd optimizations [ 468.287938][ T7405] BTRFS info (device loop1): turning on sync discard [ 468.294297][ T5868] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 468.302709][ T7405] BTRFS info (device loop1): enabling free space tree [ 468.302820][ T7405] BTRFS info (device loop1): force clearing of disk cache [ 468.302920][ T7405] BTRFS info (device loop1): enabling auto defrag [ 468.303021][ T7405] BTRFS info (device loop1): max_inline set to 0 [ 468.474763][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 468.570668][ T5813] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 469.195652][ T5868] usb 5-1: device descriptor read/8, error -71 [ 469.432156][ T5868] usb usb5-port1: unable to enumerate USB device [ 470.396351][ T7433] loop3: detected capacity change from 0 to 65536 [ 470.625246][ T7433] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 470.810102][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.838084][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.848544][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.869655][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.882253][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.978474][ T7433] XFS (loop3): Ending clean mount [ 471.005275][ T7433] XFS (loop3): Quotacheck needed: Please wait. [ 471.061909][ T3016] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x1 [ 471.077254][ T3016] XFS (loop3): Unmount and run xfs_repair [ 471.084267][ T3016] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 471.092850][ T3016] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 471.102521][ T3016] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 471.111835][ T3016] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 471.120903][ T3016] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 471.130143][ T3016] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 471.139348][ T3016] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 471.148569][ T3016] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 471.157801][ T3016] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 471.169386][ T3016] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23d/0x550" at daddr 0x1 len 1 error 74 [ 471.664065][ T7433] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 471.763165][ T5818] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 471.828208][ T7231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.842232][ T5818] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 472.025517][ T7231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 472.144684][ T7231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 472.324313][ T7231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.013619][ T5103] Bluetooth: hci1: command tx timeout [ 474.727723][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.097829][ T5103] Bluetooth: hci1: command tx timeout [ 476.087312][ T7451] chnl_net:caif_netlink_parms(): no params data found [ 477.242547][ T5103] Bluetooth: hci1: command tx timeout [ 477.854387][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.192193][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.199828][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.216970][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.224628][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.494474][ T5103] Bluetooth: hci1: command tx timeout [ 480.956954][ T7486] loop1: detected capacity change from 0 to 32768 [ 480.989432][ T7486] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.350 (7486) [ 481.065388][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 481.072706][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.139205][ T7486] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 481.149946][ T7486] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 481.586328][ T7486] BTRFS info (device loop1): rebuilding free space tree [ 481.647687][ T7486] BTRFS info (device loop1): enabling ssd optimizations [ 481.655266][ T7486] BTRFS info (device loop1): turning on sync discard [ 481.662418][ T7486] BTRFS info (device loop1): enabling free space tree [ 481.669420][ T7486] BTRFS info (device loop1): force clearing of disk cache [ 481.676936][ T7486] BTRFS info (device loop1): enabling auto defrag [ 481.683808][ T7486] BTRFS info (device loop1): max_inline set to 0 [ 482.592923][ T3016] Bluetooth: hci5: Frame reassembly failed (-84) [ 483.083689][ T5813] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 484.074264][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.082210][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.090013][ T7451] bridge_slave_0: entered allmulticast mode [ 484.099854][ T7451] bridge_slave_0: entered promiscuous mode [ 485.243682][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 485.250124][ T5103] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 486.244375][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.256288][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.264386][ T7451] bridge_slave_1: entered allmulticast mode [ 486.274246][ T7451] bridge_slave_1: entered promiscuous mode [ 486.775946][ T24] libceph: connect (1)[c::]:6789 error -101 [ 486.782615][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 487.193957][ T24] libceph: connect (1)[c::]:6789 error -101 [ 487.200340][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 487.603033][ T7451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.634650][ T35] bridge_slave_1: left allmulticast mode [ 487.640753][ T35] bridge_slave_1: left promiscuous mode [ 487.647949][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.837527][ T35] bridge_slave_0: left allmulticast mode [ 487.844553][ T35] bridge_slave_0: left promiscuous mode [ 487.845580][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 487.851304][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.856745][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 488.427041][ T7521] ceph: No mds server is up or the cluster is laggy [ 489.573145][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 489.579524][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 489.696132][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.827871][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.268015][ T35] bond0 (unregistering): Released all slaves [ 490.404084][ T7451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.521196][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.540419][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 491.555372][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 491.600520][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 491.766197][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.884195][ T7550] loop4: detected capacity change from 0 to 40427 [ 492.934115][ T35] hsr_slave_0: left promiscuous mode [ 492.974939][ T7550] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 492.983489][ T7550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 493.013372][ T35] hsr_slave_1: left promiscuous mode [ 493.021987][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.033948][ T7550] F2FS-fs (loop4): invalid crc value [ 493.055123][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.419982][ T7550] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 493.602546][ T7550] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 493.609850][ T7550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 494.174316][ T5814] syz-executor: attempt to access beyond end of device [ 494.174316][ T5814] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 494.188931][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 494.189074][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.189157][ T5814] Call Trace: [ 494.189210][ T5814] [ 494.189263][ T5814] __dump_stack+0x26/0x30 [ 494.189443][ T5814] dump_stack_lvl+0x1df/0x270 [ 494.189638][ T5814] dump_stack+0x1e/0x25 [ 494.189805][ T5814] f2fs_handle_critical_error+0xa6f/0xc20 [ 494.190044][ T5814] f2fs_stop_checkpoint+0x65/0x80 [ 494.190261][ T5814] f2fs_write_end_io+0x101c/0x1bc0 [ 494.190450][ T5814] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 494.190601][ T5814] bio_endio+0xeb1/0x1010 [ 494.190776][ T5814] submit_bio_noacct+0x213/0x2750 [ 494.191003][ T5814] submit_bio+0x57c/0x630 [ 494.191181][ T5814] f2fs_submit_write_bio+0x92/0x250 [ 494.191377][ T5814] __submit_merged_bio+0x16f/0x6a0 [ 494.191580][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 494.191757][ T5814] __submit_merged_write_cond+0x458/0x9a0 [ 494.191970][ T5814] f2fs_write_data_pages+0x4bb2/0x5480 [ 494.192300][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 494.192462][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 494.192652][ T5814] ? folios_put_refs+0x21/0xb10 [ 494.192833][ T5814] ? filter_irq_stacks+0x49/0x190 [ 494.192985][ T5814] ? stack_depot_save_flags+0x35/0x7b0 [ 494.193131][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 494.193309][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 494.193475][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 494.193662][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 494.193827][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 494.193999][ T5814] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 494.194233][ T5814] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 494.194441][ T5814] do_writepages+0x3f2/0x860 [ 494.194605][ T5814] ? _raw_spin_unlock+0x30/0x50 [ 494.194775][ T5814] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 494.195005][ T5814] filemap_fdatawrite+0x207/0x260 [ 494.195264][ T5814] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 494.195453][ T5814] f2fs_write_checkpoint+0xfe2/0x2b00 [ 494.195759][ T5814] kill_f2fs_super+0x2ff/0x970 [ 494.195939][ T5814] ? __pfx_kill_f2fs_super+0x10/0x10 [ 494.196099][ T5814] deactivate_locked_super+0xcb/0x3c0 [ 494.196276][ T5814] deactivate_super+0x12f/0x140 [ 494.196431][ T5814] cleanup_mnt+0x6fb/0x780 [ 494.196625][ T5814] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 494.196801][ T5814] ? __pfx___cleanup_mnt+0x10/0x10 [ 494.197001][ T5814] __cleanup_mnt+0x22/0x30 [ 494.197194][ T5814] task_work_run+0x206/0x2b0 [ 494.197372][ T5814] exit_to_user_mode_loop+0x2a6/0x330 [ 494.197552][ T5814] do_syscall_64+0x1e3/0x210 [ 494.197692][ T5814] ? irqentry_exit+0x16/0x60 [ 494.197875][ T5814] ? clear_bhb_loop+0x40/0x90 [ 494.198040][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.198204][ T5814] RIP: 0033:0x7f4363f901f7 [ 494.198308][ T5814] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 494.198428][ T5814] RSP: 002b:00007ffecd914b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 494.198573][ T5814] RAX: 0000000000000000 RBX: 00007f4364011d7d RCX: 00007f4363f901f7 [ 494.198663][ T5814] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecd914c20 [ 494.198749][ T5814] RBP: 00007ffecd914c20 R08: 0000000000000000 R09: 0000000000000000 [ 494.198837][ T5814] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecd915cb0 [ 494.198928][ T5814] R13: 00007f4364011d7d R14: 00000000000788b4 R15: 00007ffecd915cf0 [ 494.199058][ T5814] [ 494.548500][ T5814] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 494.741514][ T35] team0 (unregistering): Port device team_slave_1 removed [ 494.773054][ T35] team0 (unregistering): Port device team_slave_0 removed [ 495.181817][ T5103] Bluetooth: hci5: command tx timeout [ 495.196835][ T7451] team0: Port device team_slave_0 added [ 495.242843][ T7451] team0: Port device team_slave_1 added [ 496.236681][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.244409][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.270592][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.282757][ T7451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.686747][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.694111][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.720866][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.727450][ T7451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.269635][ T5811] Bluetooth: hci5: command tx timeout [ 497.348822][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 497.360619][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 497.386676][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 497.416250][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 497.487225][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 497.564146][ T7451] hsr_slave_0: entered promiscuous mode [ 497.575733][ T7451] hsr_slave_1: entered promiscuous mode [ 497.591303][ T7451] debugfs: 'hsr0' already exists in 'hsr' [ 497.597430][ T7451] Cannot create hsr debugfs directory [ 500.023782][ T5811] Bluetooth: hci5: command tx timeout [ 500.026480][ T5103] Bluetooth: hci6: command tx timeout [ 500.408850][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 500.812392][ T7573] loop1: detected capacity change from 0 to 1024 [ 502.779988][ T5103] Bluetooth: hci5: command tx timeout [ 502.780109][ T5811] Bluetooth: hci6: command tx timeout [ 503.584950][ T1136] hfsplus: b-tree write err: -5, ino 4 [ 503.962112][ T1897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.227305][ T1897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.328707][ T7562] chnl_net:caif_netlink_parms(): no params data found [ 504.477395][ T1897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.806252][ T1897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.862334][ T5811] Bluetooth: hci6: command tx timeout [ 506.037654][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.046909][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.055313][ T7546] bridge_slave_0: entered allmulticast mode [ 506.065069][ T7546] bridge_slave_0: entered promiscuous mode [ 506.147617][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.155629][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.163681][ T7546] bridge_slave_1: entered allmulticast mode [ 506.173453][ T7546] bridge_slave_1: entered promiscuous mode [ 506.928545][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.953323][ T5811] Bluetooth: hci6: command tx timeout [ 506.959555][ T1897] bridge_slave_1: left allmulticast mode [ 506.968098][ T1897] bridge_slave_1: left promiscuous mode [ 506.975119][ T1897] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.756280][ T1897] bridge_slave_0: left allmulticast mode [ 507.763656][ T1897] bridge_slave_0: left promiscuous mode [ 507.770525][ T1897] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.560827][ T7610] loop4: detected capacity change from 0 to 40427 [ 508.581531][ T7610] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 508.589341][ T7610] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 508.628626][ T7610] F2FS-fs (loop4): invalid crc value [ 508.986409][ T7610] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 509.049261][ T1897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.061787][ T7610] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 509.069110][ T7610] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 509.140790][ T1897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.161408][ T1897] bond0 (unregistering): Released all slaves [ 509.205151][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.923567][ T5814] syz-executor: attempt to access beyond end of device [ 509.923567][ T5814] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 509.939469][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 509.939623][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.939711][ T5814] Call Trace: [ 509.939766][ T5814] [ 509.939819][ T5814] __dump_stack+0x26/0x30 [ 509.940002][ T5814] dump_stack_lvl+0x1df/0x270 [ 509.940188][ T5814] dump_stack+0x1e/0x25 [ 509.940357][ T5814] f2fs_handle_critical_error+0xa6f/0xc20 [ 509.940608][ T5814] f2fs_stop_checkpoint+0x65/0x80 [ 509.940820][ T5814] f2fs_write_end_io+0x101c/0x1bc0 [ 509.941016][ T5814] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 509.941163][ T5814] bio_endio+0xeb1/0x1010 [ 509.941341][ T5814] submit_bio_noacct+0x213/0x2750 [ 509.941574][ T5814] submit_bio+0x57c/0x630 [ 509.941747][ T5814] f2fs_submit_write_bio+0x92/0x250 [ 509.941945][ T5814] __submit_merged_bio+0x16f/0x6a0 [ 509.942141][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.942341][ T5814] __submit_merged_write_cond+0x458/0x9a0 [ 509.942570][ T5814] f2fs_write_data_pages+0x4bb2/0x5480 [ 509.942869][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.943091][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 509.943259][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.943451][ T5814] ? free_unref_folios+0x29ad/0x2a20 [ 509.943598][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 509.943797][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 509.943969][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.944148][ T5814] ? kmsan_get_metadata+0xfb/0x160 [ 509.944323][ T5814] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.944499][ T5814] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 509.944713][ T5814] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 509.944925][ T5814] do_writepages+0x3f2/0x860 [ 509.945089][ T5814] ? _raw_spin_unlock+0x30/0x50 [ 509.945262][ T5814] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 509.945514][ T5814] filemap_fdatawrite+0x207/0x260 [ 509.945776][ T5814] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 509.945968][ T5814] f2fs_write_checkpoint+0xfe2/0x2b00 [ 509.946269][ T5814] kill_f2fs_super+0x2ff/0x970 [ 509.946460][ T5814] ? __pfx_kill_f2fs_super+0x10/0x10 [ 509.946622][ T5814] deactivate_locked_super+0xcb/0x3c0 [ 509.946805][ T5814] deactivate_super+0x12f/0x140 [ 509.946963][ T5814] cleanup_mnt+0x6fb/0x780 [ 509.947155][ T5814] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 509.947337][ T5814] ? __pfx___cleanup_mnt+0x10/0x10 [ 509.947536][ T5814] __cleanup_mnt+0x22/0x30 [ 509.947734][ T5814] task_work_run+0x206/0x2b0 [ 509.947916][ T5814] exit_to_user_mode_loop+0x2a6/0x330 [ 509.948099][ T5814] do_syscall_64+0x1e3/0x210 [ 509.948245][ T5814] ? irqentry_exit+0x16/0x60 [ 509.948440][ T5814] ? clear_bhb_loop+0x40/0x90 [ 509.948603][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.948759][ T5814] RIP: 0033:0x7f4363f901f7 [ 509.948869][ T5814] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 509.948995][ T5814] RSP: 002b:00007ffecd914b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 509.949132][ T5814] RAX: 0000000000000000 RBX: 00007f4364011d7d RCX: 00007f4363f901f7 [ 509.949227][ T5814] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecd914c20 [ 509.949326][ T5814] RBP: 00007ffecd914c20 R08: 0000000000000000 R09: 0000000000000000 [ 509.949426][ T5814] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecd915cb0 [ 509.949522][ T5814] R13: 00007f4364011d7d R14: 000000000007c56f R15: 00007ffecd915cf0 [ 509.949657][ T5814] [ 510.292547][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.306637][ T5814] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 511.072802][ T7451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.237764][ T7546] team0: Port device team_slave_0 added [ 511.283713][ T7451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.485967][ T7546] team0: Port device team_slave_1 added [ 511.622563][ T7451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 511.684117][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.692242][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.700055][ T7562] bridge_slave_0: entered allmulticast mode [ 511.709957][ T7562] bridge_slave_0: entered promiscuous mode [ 511.734765][ T7451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 512.078326][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.092454][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.100273][ T7562] bridge_slave_1: entered allmulticast mode [ 512.110137][ T7562] bridge_slave_1: entered promiscuous mode [ 512.123014][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.133467][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.161033][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.243798][ T1897] hsr_slave_0: left promiscuous mode [ 512.282677][ T1897] hsr_slave_1: left promiscuous mode [ 512.290751][ T1897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.298594][ T1897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.403072][ T1897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.410682][ T1897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.509313][ T1897] veth1_macvtap: left promiscuous mode [ 512.515579][ T1897] veth0_macvtap: left promiscuous mode [ 512.521488][ T1897] veth1_vlan: left promiscuous mode [ 512.527229][ T1897] veth0_vlan: left promiscuous mode [ 513.254660][ T7640] loop1: detected capacity change from 0 to 32768 [ 513.267840][ T7640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.371 (7640) [ 513.291876][ T7640] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 513.302484][ T7640] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 513.835450][ T1897] team0 (unregistering): Port device team_slave_1 removed [ 513.849815][ T7640] BTRFS info (device loop1): enabling ssd optimizations [ 513.857221][ T7640] BTRFS info (device loop1): enabling free space tree [ 513.974468][ T1897] team0 (unregistering): Port device team_slave_0 removed [ 515.367890][ T7665] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 515.374781][ T7665] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 515.383175][ T7665] vhci_hcd vhci_hcd.0: Device attached [ 516.035638][ T5864] vhci_hcd: vhci_device speed not set [ 516.050240][ T7667] vhci_hcd: connection closed [ 516.094462][ T4485] vhci_hcd: stop threads [ 516.104816][ T4485] vhci_hcd: release socket [ 516.109424][ T4485] vhci_hcd: disconnect device [ 516.119042][ T5864] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 516.130039][ T5864] usb 35-1: enqueue for inactive port 0 [ 516.545228][ T5864] vhci_hcd: vhci_device speed not set [ 518.234780][ T5813] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 518.637846][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.645157][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.671848][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.747004][ T7562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.967492][ T7562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.072879][ T7685] loop4: detected capacity change from 0 to 40427 [ 523.143336][ T7685] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 523.150041][ T7685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 523.166698][ T7685] F2FS-fs (loop4): invalid crc value [ 523.570954][ T7685] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 524.544337][ T7562] team0: Port device team_slave_0 added [ 524.651020][ T7546] hsr_slave_0: entered promiscuous mode [ 524.664817][ T7546] hsr_slave_1: entered promiscuous mode [ 524.677961][ T7546] debugfs: 'hsr0' already exists in 'hsr' [ 524.684664][ T7546] Cannot create hsr debugfs directory [ 524.709322][ T7562] team0: Port device team_slave_1 added [ 525.597013][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.604323][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.631003][ T7562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.063066][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.070376][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.097061][ T7562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.008344][ T4416] bridge_slave_1: left allmulticast mode [ 527.016537][ T4416] bridge_slave_1: left promiscuous mode [ 527.023442][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.231476][ T4416] bridge_slave_0: left allmulticast mode [ 527.239662][ T4416] bridge_slave_0: left promiscuous mode [ 527.246536][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.893904][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.957793][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.988149][ T4416] bond0 (unregistering): Released all slaves [ 529.516290][ T7562] hsr_slave_0: entered promiscuous mode [ 529.527563][ T7562] hsr_slave_1: entered promiscuous mode [ 529.538699][ T7562] debugfs: 'hsr0' already exists in 'hsr' [ 529.544739][ T7562] Cannot create hsr debugfs directory [ 531.743144][ T4416] hsr_slave_0: left promiscuous mode [ 531.819377][ T4416] hsr_slave_1: left promiscuous mode [ 531.827671][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.976818][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.224285][ T7732] loop4: detected capacity change from 0 to 32768 [ 533.276907][ T7732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.383 (7732) [ 533.300506][ T7732] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.311386][ T7732] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 533.320278][ T7732] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 533.554283][ T7732] BTRFS info (device loop4): rebuilding free space tree [ 533.584835][ T7732] BTRFS info (device loop4): disabling free space tree [ 533.592182][ T7732] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 533.602063][ T7732] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 533.626481][ T7732] BTRFS info (device loop4): setting nodatasum [ 533.634628][ T7732] BTRFS info (device loop4): allowing degraded mounts [ 533.641715][ T7732] BTRFS info (device loop4): enabling ssd optimizations [ 533.648797][ T7732] BTRFS info (device loop4): turning off barriers [ 533.655516][ T7732] BTRFS info (device loop4): disabling tree log [ 533.662189][ T7732] BTRFS info (device loop4): turning on flush-on-commit [ 533.669294][ T7732] BTRFS info (device loop4): enabling disk space caching [ 533.676567][ T7732] BTRFS info (device loop4): force clearing of disk cache [ 533.889857][ T5814] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 534.579564][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.593731][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.610380][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.743478][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.837553][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 534.839086][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.035555][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 537.013860][ T5103] Bluetooth: hci0: command tx timeout [ 539.106549][ T5103] Bluetooth: hci0: command tx timeout [ 539.170195][ T7546] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 539.357985][ T7546] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 539.502037][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 539.544898][ T7546] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 539.695866][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 539.720271][ T5868] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 539.729615][ T5868] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 539.738842][ T5868] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 539.748206][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.758152][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.768064][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 539.782823][ T5868] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 539.792608][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.396083][ T7546] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 540.404923][ T5868] usb 2-1: config 0 descriptor?? [ 540.653148][ T5868] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 541.064376][ T5868] usb 2-1: USB disconnect, device number 7 [ 541.188810][ T5868] usblp0: removed [ 541.199502][ T5103] Bluetooth: hci0: command tx timeout [ 542.177026][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.184323][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.224462][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 543.426755][ T5103] Bluetooth: hci0: command tx timeout [ 543.785069][ T7790] loop1: detected capacity change from 0 to 32768 [ 543.898961][ T7790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.391 (7790) [ 544.067409][ T7790] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 544.080685][ T7790] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 544.089805][ T7790] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 544.546126][ T7790] BTRFS info (device loop1): rebuilding free space tree [ 544.599466][ T7790] BTRFS info (device loop1): disabling free space tree [ 544.606881][ T7790] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 544.617246][ T7790] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 544.706267][ T14] bridge_slave_1: left allmulticast mode [ 544.713508][ T14] bridge_slave_1: left promiscuous mode [ 544.720409][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.765893][ T7790] BTRFS info (device loop1): setting nodatasum [ 544.772677][ T7790] BTRFS info (device loop1): allowing degraded mounts [ 544.779745][ T7790] BTRFS info (device loop1): enabling ssd optimizations [ 544.787148][ T7790] BTRFS info (device loop1): turning off barriers [ 544.796305][ T7790] BTRFS info (device loop1): disabling tree log [ 544.802892][ T7790] BTRFS info (device loop1): turning on flush-on-commit [ 544.810034][ T7790] BTRFS info (device loop1): enabling disk space caching [ 544.817479][ T7790] BTRFS info (device loop1): force clearing of disk cache [ 545.003515][ T14] bridge_slave_0: left allmulticast mode [ 545.009521][ T14] bridge_slave_0: left promiscuous mode [ 545.019379][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.272311][ T5813] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 546.044499][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.129872][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.180078][ T14] bond0 (unregistering): Released all slaves [ 546.384608][ T7562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.552987][ T14] hsr_slave_0: left promiscuous mode [ 547.585225][ T14] hsr_slave_1: left promiscuous mode [ 547.594610][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.720783][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.905545][ T14] team0 (unregistering): Port device team_slave_1 removed [ 548.934500][ T14] team0 (unregistering): Port device team_slave_0 removed [ 549.122466][ T7825] loop1: detected capacity change from 0 to 1024 [ 549.397733][ T7562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 549.425690][ T7825] ===================================================== [ 549.433331][ T7825] BUG: KMSAN: uninit-value in hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 549.441349][ T7825] hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 549.447406][ T7825] hfs_find_rec_by_key+0xae/0x240 [ 549.452911][ T7825] __hfsplus_brec_find+0x271/0x840 [ 549.458209][ T7825] hfsplus_brec_find+0x4df/0x9f0 [ 549.464060][ T7825] hfsplus_attr_exists+0x3c4/0x4b0 [ 549.469370][ T7825] __hfsplus_setxattr+0x588/0x37b0 [ 549.474915][ T7825] hfsplus_setxattr+0x243/0x410 [ 549.479972][ T7825] hfsplus_user_setxattr+0x55/0x70 [ 549.485545][ T7825] __vfs_setxattr+0x73f/0x850 [ 549.490436][ T7825] __vfs_setxattr_noperm+0x224/0xad0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 549.496113][ T7825] __vfs_setxattr_locked+0x448/0x490 [ 549.504199][ T7825] vfs_setxattr+0x27f/0x640 [ 549.508931][ T7825] filename_setxattr+0x3a4/0xcc0 [ 549.513681][ T7562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 549.516687][ T7825] path_setxattrat+0x734/0x820 [ 549.526222][ T7825] __x64_sys_setxattr+0x100/0x1b0 [ 549.531497][ T7825] x64_sys_call+0xcb5/0x3e20 [ 549.536539][ T7825] do_syscall_64+0xd9/0x210 [ 549.541223][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.547444][ T7825] [ 549.549866][ T7825] Uninit was created at: [ 549.554502][ T7825] __kmalloc_noprof+0x95f/0x1310 [ 549.559669][ T7825] hfsplus_find_init+0x90/0x1d0 [ 549.564918][ T7825] hfsplus_attr_exists+0xe0/0x4b0 [ 549.570129][ T7825] __hfsplus_setxattr+0x588/0x37b0 [ 549.575730][ T7825] hfsplus_setxattr+0x243/0x410 [ 549.580758][ T7825] hfsplus_user_setxattr+0x55/0x70 [ 549.586176][ T7825] __vfs_setxattr+0x73f/0x850 [ 549.591055][ T7825] __vfs_setxattr_noperm+0x224/0xad0 [ 549.597127][ T7825] __vfs_setxattr_locked+0x448/0x490 [ 549.602812][ T7825] vfs_setxattr+0x27f/0x640 [ 549.609710][ T7825] filename_setxattr+0x3a4/0xcc0 [ 549.615741][ T7825] path_setxattrat+0x734/0x820 [ 549.620688][ T7825] __x64_sys_setxattr+0x100/0x1b0 [ 549.626282][ T7825] x64_sys_call+0xcb5/0x3e20 [ 549.631120][ T7825] do_syscall_64+0xd9/0x210 [ 549.635979][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.642204][ T7825] [ 549.644639][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(none) [ 549.654142][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.664540][ T7825] ===================================================== [ 549.671722][ T7825] Disabling lock debugging due to kernel taint [ 549.678005][ T7825] Kernel panic - not syncing: kmsan.panic set ... [ 549.684595][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.1.394 Tainted: G B syzkaller #0 PREEMPT(none) [ 549.695584][ T7825] Tainted: [B]=BAD_PAGE [ 549.699834][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.710017][ T7825] Call Trace: [ 549.713401][ T7825] [ 549.716428][ T7825] __dump_stack+0x26/0x30 [ 549.720945][ T7825] dump_stack_lvl+0x53/0x270 [ 549.725730][ T7825] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.731735][ T7825] dump_stack+0x1e/0x25 [ 549.736076][ T7825] vpanic+0x361/0xc50 [ 549.740251][ T7825] panic+0x15d/0x160 [ 549.744387][ T7825] kmsan_report+0x31c/0x320 [ 549.749077][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.754365][ T7825] ? __msan_warning+0x1b/0x30 [ 549.759194][ T7825] ? hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 549.764990][ T7825] ? hfs_find_rec_by_key+0xae/0x240 [ 549.770351][ T7825] ? __hfsplus_brec_find+0x271/0x840 [ 549.775790][ T7825] ? hfsplus_brec_find+0x4df/0x9f0 [ 549.781049][ T7825] ? hfsplus_attr_exists+0x3c4/0x4b0 [ 549.786494][ T7825] ? __hfsplus_setxattr+0x588/0x37b0 [ 549.791943][ T7825] ? hfsplus_setxattr+0x243/0x410 [ 549.797143][ T7825] ? hfsplus_user_setxattr+0x55/0x70 [ 549.802600][ T7825] ? __vfs_setxattr+0x73f/0x850 [ 549.807631][ T7825] ? __vfs_setxattr_noperm+0x224/0xad0 [ 549.813281][ T7825] ? __vfs_setxattr_locked+0x448/0x490 [ 549.818932][ T7825] ? vfs_setxattr+0x27f/0x640 [ 549.823795][ T7825] ? filename_setxattr+0x3a4/0xcc0 [ 549.829179][ T7825] ? path_setxattrat+0x734/0x820 [ 549.834258][ T7825] ? __x64_sys_setxattr+0x100/0x1b0 [ 549.839650][ T7825] ? x64_sys_call+0xcb5/0x3e20 [ 549.844615][ T7825] ? do_syscall_64+0xd9/0x210 [ 549.849440][ T7825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.855697][ T7825] ? filter_irq_stacks+0x49/0x190 [ 549.860882][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.866180][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.871474][ T7825] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 549.877959][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.883251][ T7825] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 549.889691][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.895061][ T7825] __msan_warning+0x1b/0x30 [ 549.899737][ T7825] hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 549.905384][ T7825] hfs_find_rec_by_key+0xae/0x240 [ 549.910564][ T7825] ? __pfx_hfsplus_attr_bin_cmp_key+0x10/0x10 [ 549.916910][ T7825] __hfsplus_brec_find+0x271/0x840 [ 549.922199][ T7825] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 549.928094][ T7825] hfsplus_brec_find+0x4df/0x9f0 [ 549.933184][ T7825] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 549.939080][ T7825] hfsplus_attr_exists+0x3c4/0x4b0 [ 549.944374][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.949692][ T7825] __hfsplus_setxattr+0x588/0x37b0 [ 549.954984][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 549.960285][ T7825] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 549.966788][ T7825] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 549.972845][ T7825] ? d_splice_alias+0x38/0x50 [ 549.977690][ T7825] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 549.983755][ T7825] ? kmsan_slab_alloc+0xde/0x160 [ 549.988861][ T7825] ? __kmalloc_cache_noprof+0x7f7/0xed0 [ 549.994612][ T7825] ? hfsplus_setxattr+0x73/0x410 [ 549.999715][ T7825] ? hfsplus_user_setxattr+0x55/0x70 [ 550.005162][ T7825] ? __vfs_setxattr+0x73f/0x850 [ 550.010194][ T7825] ? __vfs_setxattr_noperm+0x224/0xad0 [ 550.015842][ T7825] ? __vfs_setxattr_locked+0x448/0x490 [ 550.021496][ T7825] ? vfs_setxattr+0x27f/0x640 [ 550.026360][ T7825] ? filename_setxattr+0x3a4/0xcc0 [ 550.031662][ T7825] ? path_setxattrat+0x734/0x820 [ 550.036753][ T7825] ? __x64_sys_setxattr+0x100/0x1b0 [ 550.042139][ T7825] ? x64_sys_call+0xcb5/0x3e20 [ 550.047110][ T7825] ? do_syscall_64+0xd9/0x210 [ 550.051955][ T7825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.058205][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 550.063506][ T7825] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 550.070017][ T7825] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 550.076250][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 550.081539][ T7825] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.087557][ T7825] ? should_fail_ex+0x45/0x8a0 [ 550.092486][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 550.097780][ T7825] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 550.104337][ T7825] ? __msan_memcpy+0x108/0x1c0 [ 550.109272][ T7825] hfsplus_setxattr+0x243/0x410 [ 550.114314][ T7825] hfsplus_user_setxattr+0x55/0x70 [ 550.119610][ T7825] ? __pfx_hfsplus_user_setxattr+0x10/0x10 [ 550.125616][ T7825] __vfs_setxattr+0x73f/0x850 [ 550.130552][ T7825] __vfs_setxattr_noperm+0x224/0xad0 [ 550.136063][ T7825] __vfs_setxattr_locked+0x448/0x490 [ 550.141546][ T7825] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.147571][ T7825] vfs_setxattr+0x27f/0x640 [ 550.152272][ T7825] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.158277][ T7825] filename_setxattr+0x3a4/0xcc0 [ 550.163457][ T7825] path_setxattrat+0x734/0x820 [ 550.168393][ T7825] ? kmsan_internal_check_memory+0x9c/0x230 [ 550.174471][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 550.179787][ T7825] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.185792][ T7825] ? kmsan_get_metadata+0xfb/0x160 [ 550.191122][ T7825] __x64_sys_setxattr+0x100/0x1b0 [ 550.196369][ T7825] x64_sys_call+0xcb5/0x3e20 [ 550.201170][ T7825] do_syscall_64+0xd9/0x210 [ 550.205829][ T7825] ? irqentry_exit+0x16/0x60 [ 550.210621][ T7825] ? clear_bhb_loop+0x40/0x90 [ 550.215474][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.221583][ T7825] RIP: 0033:0x7fe38e98eec9 [ 550.226139][ T7825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.245932][ T7825] RSP: 002b:00007fe38f772038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 550.254527][ T7825] RAX: ffffffffffffffda RBX: 00007fe38ebe5fa0 RCX: 00007fe38e98eec9 [ 550.262633][ T7825] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000380 [ 550.270735][ T7825] RBP: 00007fe38ea11f91 R08: 0000000000000001 R09: 0000000000000000 [ 550.278834][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.286956][ T7825] R13: 00007fe38ebe6038 R14: 00007fe38ebe5fa0 R15: 00007ffc82c76658 [ 550.295101][ T7825] [ 550.298526][ T7825] Kernel Offset: disabled [ 550.303016][ T7825] Rebooting in 86400 seconds..