last executing test programs: 3.517464367s ago: executing program 2 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) 3.072091876s ago: executing program 2 (id=324): r0 = eventfd2(0x4, 0x1) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000000c0)={0x0, r0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.934710449s ago: executing program 2 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.541703257s ago: executing program 3 (id=328): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) 2.175926405s ago: executing program 1 (id=330): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000008) 1.957109049s ago: executing program 1 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000001280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"]) 1.853461811s ago: executing program 2 (id=332): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)) 1.804368742s ago: executing program 1 (id=333): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="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", 0x3d6}], 0x1}}], 0x1, 0x40094) 1.733971104s ago: executing program 1 (id=334): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x1007}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.625408196s ago: executing program 1 (id=335): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x1f, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1.595052697s ago: executing program 1 (id=336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.515591048s ago: executing program 0 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.41344087s ago: executing program 3 (id=338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394", 0x23}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/83, 0x53}], 0x2}, 0x0) 1.41299406s ago: executing program 0 (id=339): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.343424822s ago: executing program 3 (id=340): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000001100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) 1.256530474s ago: executing program 2 (id=341): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x3e) close_range(r0, 0xffffffffffffffff, 0x0) 1.001286789s ago: executing program 2 (id=342): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703837342c6572726f72733d72656d6f756e742d726f2c75737271756f74612c696f636861727365743d63703836312c696f636861727365743d6370313235302c696e7465677269747900696f636861727365743d69736f383835392d342c646973636172643d30783030303030303030303030303030396943b95b49aca56faf1cc22189cc312c696f636861727365743d6d6163677265656b2c71756f74612c726573697a653d3078303030303030303030303030376666662c646973636172643d3078303030303030303066666666666666662c756d61736b3d3078303030303030303030303032303034352c6673636f6e746578743d836e636f6e66696e65645f752c66736d616769633d3078303030303030303030303230303030392c324216873b95edfe8ceab2bb0b11835a5cf531ac6273c29a4d4f9d056f1bcb8cd0a969ed12cf99802b3e3201518ecfc59a4fd94dd5349dc55633bd2bde1128ad071807ef13a9f10c0fbf3ad861c2009067c5c6c84cdba2806fa74eddff8373799d0b8c1e6f7e2b205235161b610ae5c66d1d9cfc2bc0cb617ae49331ade71595c2a5438139933aada47236dafdffffff088a552445f95768ccecb0c35797e832beced2077fa197623cd3de51d69d7a4f77a80eb5f783f091e5ec6047a0f67676819f4bf66744c1cb0975b96baf730000000000000001004e257bbabf33e3fa8d0cca2fbb4dabe1c5634bdf889b764ce26ae4e539fdffa2ea82c34b16308e26ce945d101d5f2e2577d8e2a21d9401194a97a6c281b603da7c66934f0c341df8ff02d91cd4f2d80ea7dde697"], 0xfe, 0x61c4, &(0x7f0000006c00)="$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") syz_open_procfs$userns(0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42000, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 962.85548ms ago: executing program 0 (id=343): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'lo\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'wlan1\x00'}}) 930.441941ms ago: executing program 3 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001400000011"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 777.371064ms ago: executing program 0 (id=345): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @b}}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}]) 715.482785ms ago: executing program 3 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 317.215343ms ago: executing program 0 (id=347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = fanotify_init(0x200, 0x0) setresuid(0x0, 0x0, 0x0) fanotify_mark(r2, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) 197.454506ms ago: executing program 3 (id=348): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x7}) 0s ago: executing program 0 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.236' (ED25519) to the list of known hosts. [ 81.065827][ T5776] cgroup: Unknown subsys name 'net' [ 81.202308][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.087896][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.757717][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.766455][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.772744][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.774992][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.782799][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.789181][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.797196][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.802381][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.811233][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.824422][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.825082][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.832754][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.839546][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.854172][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.861774][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.861963][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.876729][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.884657][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.936450][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.946264][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.960519][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.975308][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.989490][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.997173][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.434443][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 85.539942][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.579813][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.667407][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.674729][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.682160][ T5794] bridge_slave_0: entered allmulticast mode [ 85.691020][ T5794] bridge_slave_0: entered promiscuous mode [ 85.726368][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.737022][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.745165][ T5794] bridge_slave_1: entered allmulticast mode [ 85.752808][ T5794] bridge_slave_1: entered promiscuous mode [ 85.791964][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 85.867366][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.874899][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.882162][ T5788] bridge_slave_0: entered allmulticast mode [ 85.889673][ T5788] bridge_slave_0: entered promiscuous mode [ 85.900206][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.907529][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.914898][ T5788] bridge_slave_1: entered allmulticast mode [ 85.922186][ T5788] bridge_slave_1: entered promiscuous mode [ 85.932642][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.009659][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.032476][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.040264][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.047844][ T5785] bridge_slave_0: entered allmulticast mode [ 86.055846][ T5785] bridge_slave_0: entered promiscuous mode [ 86.071143][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.084278][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.108534][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.119235][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.126986][ T5785] bridge_slave_1: entered allmulticast mode [ 86.135445][ T5785] bridge_slave_1: entered promiscuous mode [ 86.164292][ T5794] team0: Port device team_slave_0 added [ 86.201828][ T5794] team0: Port device team_slave_1 added [ 86.225931][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.251633][ T5788] team0: Port device team_slave_0 added [ 86.260855][ T5788] team0: Port device team_slave_1 added [ 86.286625][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.357541][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.365164][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.372372][ T5798] bridge_slave_0: entered allmulticast mode [ 86.380547][ T5798] bridge_slave_0: entered promiscuous mode [ 86.402735][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.409864][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.436520][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.451647][ T5785] team0: Port device team_slave_0 added [ 86.459125][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.466410][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.474302][ T5798] bridge_slave_1: entered allmulticast mode [ 86.481327][ T5798] bridge_slave_1: entered promiscuous mode [ 86.488671][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.496541][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.523005][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.536202][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.543302][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.569597][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.597341][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.604499][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.630582][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.644945][ T5785] team0: Port device team_slave_1 added [ 86.729561][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.736700][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.763477][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.777641][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.790092][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.817966][ T5788] hsr_slave_0: entered promiscuous mode [ 86.824850][ T5788] hsr_slave_1: entered promiscuous mode [ 86.832469][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.839798][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.865800][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.896367][ T5793] Bluetooth: hci0: command tx timeout [ 86.910123][ T5798] team0: Port device team_slave_0 added [ 86.924842][ T5798] team0: Port device team_slave_1 added [ 86.973818][ T5791] Bluetooth: hci2: command tx timeout [ 86.979638][ T5793] Bluetooth: hci1: command tx timeout [ 87.021291][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.028487][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.054824][ T5793] Bluetooth: hci3: command tx timeout [ 87.060941][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.077459][ T5794] hsr_slave_0: entered promiscuous mode [ 87.084595][ T5794] hsr_slave_1: entered promiscuous mode [ 87.090951][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.099444][ T5794] Cannot create hsr debugfs directory [ 87.123262][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.130258][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.156932][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.249565][ T5785] hsr_slave_0: entered promiscuous mode [ 87.257017][ T5785] hsr_slave_1: entered promiscuous mode [ 87.263868][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.271478][ T5785] Cannot create hsr debugfs directory [ 87.301846][ T5798] hsr_slave_0: entered promiscuous mode [ 87.309054][ T5798] hsr_slave_1: entered promiscuous mode [ 87.315668][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.324286][ T5798] Cannot create hsr debugfs directory [ 87.692566][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.718600][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.730997][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.740895][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.829642][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.841216][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.869196][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.895075][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.945719][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.968192][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.978783][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.990440][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.087498][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.110879][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.122815][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.150864][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.190315][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.240090][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.286210][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.293628][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.342208][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.349401][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.376953][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.401102][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.436424][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.443694][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.464860][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.524334][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.541614][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.548830][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.581643][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.610964][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.618158][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.672428][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.679700][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.712485][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.742547][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.749827][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.777123][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.784333][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.918253][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.975628][ T5793] Bluetooth: hci0: command tx timeout [ 89.052893][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.058684][ T5793] Bluetooth: hci1: command tx timeout [ 89.066973][ T5791] Bluetooth: hci2: command tx timeout [ 89.134313][ T5793] Bluetooth: hci3: command tx timeout [ 89.271388][ T5788] veth0_vlan: entered promiscuous mode [ 89.318713][ T5788] veth1_vlan: entered promiscuous mode [ 89.401370][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.435828][ T5788] veth0_macvtap: entered promiscuous mode [ 89.451477][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.477218][ T5788] veth1_macvtap: entered promiscuous mode [ 89.501241][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.550257][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.582480][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.627271][ T5785] veth0_vlan: entered promiscuous mode [ 89.651544][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.661325][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.672743][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.682328][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.693975][ T5794] veth0_vlan: entered promiscuous mode [ 89.715933][ T5798] veth0_vlan: entered promiscuous mode [ 89.726899][ T5794] veth1_vlan: entered promiscuous mode [ 89.749994][ T5798] veth1_vlan: entered promiscuous mode [ 89.777506][ T5785] veth1_vlan: entered promiscuous mode [ 89.842839][ T5794] veth0_macvtap: entered promiscuous mode [ 89.865764][ T5785] veth0_macvtap: entered promiscuous mode [ 89.881053][ T5785] veth1_macvtap: entered promiscuous mode [ 89.895582][ T5794] veth1_macvtap: entered promiscuous mode [ 89.942664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.966406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.986782][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.000006][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.014474][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.026842][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.040238][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.050504][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.060989][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.072804][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.085017][ T5798] veth0_macvtap: entered promiscuous mode [ 90.098590][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.109789][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.121609][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.149380][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.160404][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.170561][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.183112][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.194520][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.209925][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.218813][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.229565][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.238915][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.255128][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.265176][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.270958][ T5798] veth1_macvtap: entered promiscuous mode [ 90.288527][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298412][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.307700][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.316802][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.366862][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.378301][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.389137][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.400253][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.410699][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.421202][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.433650][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.492507][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.518415][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.541634][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.569296][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.581274][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.592227][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.603690][ T5877] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 90.606096][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.684943][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.696772][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.707230][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.719890][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.760541][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.782168][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.871358][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.881829][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.992001][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.005739][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.053462][ T5793] Bluetooth: hci0: command tx timeout [ 91.061167][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.070523][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.133778][ T5793] Bluetooth: hci1: command tx timeout [ 91.139263][ T5793] Bluetooth: hci2: command tx timeout [ 91.198806][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.213293][ T5793] Bluetooth: hci3: command tx timeout [ 91.260587][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.417483][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.463026][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.474482][ T5881] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.695450][ T5886] syz.2.3[5886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.770373][ T5886] loop2: detected capacity change from 0 to 512 [ 91.820945][ T5886] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.876631][ T5886] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.924978][ T5886] EXT4-fs (loop2): 1 truncate cleaned up [ 91.932201][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.138687][ T3062] cfg80211: failed to load regulatory.db [ 92.314913][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.134256][ T5793] Bluetooth: hci0: command tx timeout [ 93.213304][ T5793] Bluetooth: hci2: command tx timeout [ 93.218942][ T5791] Bluetooth: hci1: command tx timeout [ 93.293964][ T5793] Bluetooth: hci3: command tx timeout [ 93.322266][ T5896] loop0: detected capacity change from 0 to 40427 [ 93.355963][ T5896] F2FS-fs (loop0): heap/no_heap options were deprecated [ 93.398621][ T5896] F2FS-fs (loop0): Image doesn't support compression [ 93.430426][ T5896] F2FS-fs (loop0): heap/no_heap options were deprecated [ 93.537042][ T5896] F2FS-fs (loop0): invalid crc value [ 93.581585][ T5917] loop2: detected capacity change from 0 to 512 [ 93.608411][ T5896] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.615453][ T5917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.688614][ T5917] EXT4-fs (loop2): 1 truncate cleaned up [ 93.782331][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.881129][ T5896] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.912374][ T5917] syz.2.13 (pid 5917) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 94.050547][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.232453][ T5896] syz.0.7: attempt to access beyond end of device [ 94.232453][ T5896] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 94.270607][ T5896] syz.0.7: attempt to access beyond end of device [ 94.270607][ T5896] loop0: rw=1, sector=45112, nr_sectors = 24 limit=40427 [ 94.290438][ T5896] syz.0.7: attempt to access beyond end of device [ 94.290438][ T5896] loop0: rw=1, sector=45160, nr_sectors = 16 limit=40427 [ 94.429249][ T5794] syz-executor: attempt to access beyond end of device [ 94.429249][ T5794] loop0: rw=2049, sector=45200, nr_sectors = 8 limit=40427 [ 94.455975][ T5794] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 97.296199][ T5970] loop0: detected capacity change from 0 to 512 [ 97.390271][ T5970] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.34: casefold flag without casefold feature [ 97.398815][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.428227][ T5970] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.34: couldn't read orphan inode 15 (err -117) [ 97.481447][ T5970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.482496][ T5975] input: syz0 as /devices/virtual/input/input5 [ 97.763180][ T5970] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1718579813 > max in inode 18 [ 97.862491][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.002179][ T5877] Set syz1 is full, maxelem 65536 reached [ 98.053670][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.063437][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.260883][ T5878] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 98.279508][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.298670][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.307693][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.327248][ T786] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.345050][ T5878] usb 4-1: config 0 descriptor?? [ 98.361116][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.396967][ T786] usb 3-1: SerialNumber: syz [ 98.608331][ T5878] kaweth 4-1:0.0: Firmware present in device. [ 98.641870][ T786] usb 3-1: 0:2 : does not exist [ 98.711446][ T786] usb 3-1: USB disconnect, device number 2 [ 98.796181][ T5878] kaweth 4-1:0.0: Statistics collection: 0 [ 98.801954][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.813091][ T5878] kaweth 4-1:0.0: Multicast filter limit: 0 [ 98.840325][ T5878] kaweth 4-1:0.0: MTU: 0 [ 98.850599][ T5878] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 99.136968][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801deac400: rx timeout, send abort [ 99.146467][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801deaf000: rx timeout, send abort [ 99.155789][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801deac400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.171350][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801deaf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.436007][ T5878] kaweth 4-1:0.0: kaweth interface created at eth1 [ 99.699650][ T5878] usb 4-1: USB disconnect, device number 2 [ 99.909911][ T6005] loop1: detected capacity change from 0 to 512 [ 99.928028][ T6005] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.258334][ T5995] loop2: detected capacity change from 0 to 32768 [ 100.284530][ T5995] XFS: ikeep mount option is deprecated. [ 100.310676][ T5995] XFS: ikeep mount option is deprecated. [ 100.322461][ T5995] XFS: noikeep mount option is deprecated. [ 100.353881][ T6011] block nbd1: shutting down sockets [ 100.438119][ T5995] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.586509][ T6027] trusted_key: syz.1.50 sent an empty control message without MSG_MORE. [ 100.642671][ T6022] ALSA: mixer_oss: invalid OSS volume '/root/syz.SZtPVl' [ 100.687230][ T6022] ALSA: mixer_oss: invalid OSS volume '1ffffffff000-200000000000' [ 100.723950][ T6022] ALSA: mixer_oss: invalid OSS volume '200000000000-200001000000' [ 100.853373][ T5995] XFS (loop2): Ending clean mount [ 101.099802][ T28] audit: type=1800 audit(1759764653.023:2): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.46" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 101.120592][ T5995] XFS (loop2): User initiated shutdown received. [ 101.182057][ T6040] bridge_slave_0: left allmulticast mode [ 101.195498][ T5995] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 101.207844][ T6040] bridge_slave_0: left promiscuous mode [ 101.249593][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.268988][ T5995] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 101.327897][ T6040] bridge_slave_1: left allmulticast mode [ 101.359899][ T6040] bridge_slave_1: left promiscuous mode [ 101.381576][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.399217][ T5798] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.438776][ T6040] bond0: (slave bond_slave_0): Releasing backup interface [ 101.568188][ T6040] bond0: (slave bond_slave_1): Releasing backup interface [ 101.718716][ T6040] team0: Port device team_slave_0 removed [ 101.786672][ T6040] team0: Port device team_slave_1 removed [ 101.814292][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.833698][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.861191][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.877436][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.969077][ T6046] netlink: 'syz.3.55': attribute type 10 has an invalid length. [ 102.013338][ T6046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.55'. [ 102.023130][ T5800] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.072422][ T6046] batman_adv: batadv0: Adding interface: virt_wifi0 [ 102.100086][ T6046] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.154990][ T6046] batman_adv: batadv0: Interface activated: virt_wifi0 [ 102.243177][ T5800] usb 2-1: Using ep0 maxpacket: 8 [ 102.254433][ T5800] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.275588][ T6049] loop0: detected capacity change from 0 to 32768 [ 102.284726][ T5800] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.353983][ T5800] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.400620][ T5800] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.428333][ T28] audit: type=1800 audit(1759764654.353:3): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.57" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 102.469145][ T5800] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.504398][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.770362][ T5800] usb 2-1: GET_CAPABILITIES returned 0 [ 102.783435][ T5800] usbtmc 2-1:16.0: can't read capabilities [ 103.020128][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.041187][ T6059] loop2: detected capacity change from 0 to 40427 [ 103.050503][ T5430] usb 2-1: USB disconnect, device number 2 [ 103.070906][ T6059] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 103.092507][ T6059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.141485][ T6059] F2FS-fs (loop2): invalid crc value [ 103.184170][ T6059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.338111][ T6059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.363526][ T6059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.743260][ T5878] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.955945][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 103.985713][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 104.015084][ T5878] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 104.033159][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.056998][ T5878] usb 1-1: Product: syz [ 104.061239][ T5878] usb 1-1: Manufacturer: syz [ 104.081844][ T6097] loop1: detected capacity change from 0 to 764 [ 104.093103][ T5878] usb 1-1: SerialNumber: syz [ 104.101399][ T5878] usb 1-1: config 0 descriptor?? [ 104.133851][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.163113][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.412576][ T6099] loop1: detected capacity change from 0 to 64 [ 104.437359][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.497393][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.541818][ T6101] capability: warning: `syz.2.66' uses deprecated v2 capabilities in a way that may be insecure [ 104.552790][ T28] audit: type=1800 audit(1759764656.473:4): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 104.608070][ T28] audit: type=1800 audit(1759764656.533:5): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 104.938944][ T6095] loop3: detected capacity change from 0 to 32768 [ 104.999578][ T28] audit: type=1800 audit(1759764656.923:6): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.70" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 105.123134][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.252287][ T6112] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 105.325627][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.352401][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.368697][ T786] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.383220][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.401579][ T786] usb 3-1: SerialNumber: syz [ 105.548358][ T5878] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 105.624855][ T5878] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 105.667016][ T786] usb 3-1: 0:2 : does not exist [ 105.691695][ T5878] usb 1-1: USB disconnect, device number 2 [ 105.708228][ T786] usb 3-1: USB disconnect, device number 3 [ 105.715856][ T5878] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 105.734816][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 105.792577][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.170972][ T6118] loop3: detected capacity change from 0 to 32768 [ 106.195375][ T6118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.80 (6118) [ 106.262841][ T6118] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.270674][ T6126] loop0: detected capacity change from 0 to 512 [ 106.293288][ T6118] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.302057][ T6118] BTRFS info (device loop3): using free space tree [ 106.350095][ T6126] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.83: casefold flag without casefold feature [ 106.363908][ T6126] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.83: couldn't read orphan inode 15 (err -117) [ 106.380112][ T6126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.485582][ T6126] fscrypt (loop0, inode 18): Unsupported encryption modes (contents 0, filenames 78) [ 106.552528][ T6118] BTRFS info (device loop3): enabling ssd optimizations [ 106.568971][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.583828][ T6118] BTRFS info (device loop3): auto enabling async discard [ 107.032088][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.526684][ T6142] loop2: detected capacity change from 0 to 32768 [ 107.579956][ T28] audit: type=1800 audit(1759764659.503:7): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.85" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 107.788100][ T6153] loop0: detected capacity change from 0 to 40427 [ 107.797013][ T6153] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.808237][ T6153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.826491][ T6153] F2FS-fs (loop0): invalid crc value [ 107.838333][ T6153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.977315][ T6153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.994662][ T6153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.012290][ T6194] loop2: detected capacity change from 0 to 128 [ 109.807777][ T6206] loop2: detected capacity change from 0 to 4096 [ 109.958164][ T6204] loop3: detected capacity change from 0 to 32768 [ 110.065448][ T6204] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.108238][ T6216] process 'syz.0.107' launched './file1' with NULL argv: empty string added [ 110.281113][ T6204] XFS (loop3): Ending clean mount [ 110.306672][ T6204] XFS (loop3): Quotacheck needed: Please wait. [ 110.434235][ T6204] XFS (loop3): Quotacheck: Done. [ 110.535917][ T6222] sctp: [Deprecated]: syz.2.109 (pid 6222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.535917][ T6222] Use struct sctp_sack_info instead [ 110.725234][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.735603][ T6230] loop2: detected capacity change from 0 to 512 [ 110.740408][ T6228] loop0: detected capacity change from 0 to 512 [ 110.751046][ T6228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.769175][ T6228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.780423][ T6230] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #12: comm syz.2.112: corrupted in-inode xattr: overlapping e_value [ 110.803152][ T6228] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.850244][ T6230] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.112: couldn't read orphan inode 12 (err -117) [ 110.869517][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.904679][ T6228] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.111: Allocating blocks 41-42 which overlap fs metadata [ 110.959143][ T6228] EXT4-fs (loop0): Remounting filesystem read-only [ 110.970976][ T6228] Quota error (device loop0): write_blk: dquota write failed [ 110.974387][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.980829][ T6228] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 111.014641][ T6236] loop1: detected capacity change from 0 to 512 [ 111.023629][ T6228] Quota error (device loop0): write_blk: dquota write failed [ 111.056872][ T6228] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 111.076374][ T6228] EXT4-fs (loop0): 1 truncate cleaned up [ 111.083584][ T6228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.126601][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.180949][ T6236] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.239706][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.267844][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.274897][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.124'. [ 112.311436][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.124'. [ 112.321282][ T6263] Zero length message leads to an empty skb [ 112.560068][ T5430] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 112.573646][ T5430] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 112.582470][ T5430] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 112.626053][ T5430] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 112.832146][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.884462][ T6275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.486651][ T6287] loop2: detected capacity change from 0 to 65536 [ 114.547876][ T6287] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 114.635167][ T5430] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.675330][ T6287] XFS (loop2): Ending clean mount [ 114.833911][ T5430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.850775][ T5798] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 114.859446][ T5430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.880415][ T5430] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 114.907981][ T5430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.003421][ T5430] usb 1-1: config 0 descriptor?? [ 115.430676][ T5430] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 115.459003][ T5430] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 115.485262][ T5430] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input6 [ 115.541963][ T5430] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 115.646174][ T6309] loop0: detected capacity change from 0 to 1024 [ 115.687795][ T5430] usb 1-1: USB disconnect, device number 3 [ 115.743305][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.948334][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.958619][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.969853][ T5878] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.979864][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.987953][ T5878] usb 3-1: SerialNumber: syz [ 116.213585][ T5878] usb 3-1: 0:2 : does not exist [ 116.244849][ T997] hfsplus: b-tree write err: -5, ino 4 [ 116.259157][ T5878] usb 3-1: USB disconnect, device number 4 [ 116.318233][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.379623][ T6343] Bluetooth: MGMT ver 1.22 [ 116.403689][ T6343] Bluetooth: hci0: service_discovery: too big uuid_count value 4459 [ 116.487937][ T6348] loop3: detected capacity change from 0 to 512 [ 116.591320][ T6348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.638206][ T6348] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.748448][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.154: corrupted inode contents [ 116.804371][ T6348] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.154: mark_inode_dirty error [ 116.820612][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.154: corrupted inode contents [ 116.837109][ T6348] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.154: mark_inode_dirty error [ 116.952467][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.847019][ T6383] netlink: 104 bytes leftover after parsing attributes in process `syz.0.164'. [ 118.293250][ T6399] input: syz1 as /devices/virtual/input/input7 [ 118.588422][ T6406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.652081][ T6409] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 118.688845][ T6409] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 119.201698][ T6420] loop3: detected capacity change from 0 to 512 [ 119.229561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 119.247507][ T6420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.407851][ T6425] loop0: detected capacity change from 0 to 512 [ 119.506924][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.512482][ T6425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.529333][ T6425] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.568727][ T6425] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.183: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 119.602729][ T6425] EXT4-fs (loop0): Remounting filesystem read-only [ 120.203140][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.295627][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.308206][ T6444] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 120.316872][ T6444] syzkaller0: owner set to 803 [ 120.405060][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.436813][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.474958][ T23] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 120.503070][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.512156][ T6449] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.542364][ T23] usb 3-1: config 0 descriptor?? [ 120.693256][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.722197][ T6453] loop3: detected capacity change from 0 to 4096 [ 120.741999][ T6453] ======================================================= [ 120.741999][ T6453] WARNING: The mand mount option has been deprecated and [ 120.741999][ T6453] and is ignored by this kernel. Remove the mand [ 120.741999][ T6453] option from the mount to silence this warning. [ 120.741999][ T6453] ======================================================= [ 120.784156][ T5430] usb 3-1: USB disconnect, device number 5 [ 120.797537][ T6453] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.831896][ T6453] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 120.882224][ T6456] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.894958][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 120.913025][ T5878] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.947039][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.958050][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.968659][ T5878] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.988057][ T5878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.998327][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.249669][ T5878] usb 1-1: GET_CAPABILITIES returned 0 [ 121.266647][ T5878] usbtmc 1-1:16.0: can't read capabilities [ 121.406339][ T6455] loop1: detected capacity change from 0 to 32768 [ 121.438670][ T6455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.193 (6455) [ 121.509787][ T6455] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.541230][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 121.549522][ T6455] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 121.550598][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 121.583748][ T6455] BTRFS info (device loop1): turning on sync discard [ 121.593906][ T27] usb 1-1: USB disconnect, device number 4 [ 121.611254][ T6455] BTRFS info (device loop1): enabling disk space caching [ 121.630929][ T6455] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.647370][ T6462] loop2: detected capacity change from 0 to 2048 [ 121.659133][ T6455] BTRFS info (device loop1): trying to use backup root at mount time [ 121.685640][ T6455] BTRFS info (device loop1): force clearing of disk cache [ 121.704958][ T6455] BTRFS info (device loop1): disk space caching is enabled [ 121.730519][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.817430][ T6462] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.835183][ T6455] BTRFS info (device loop1): rebuilding free space tree [ 121.882426][ T6462] EXT4-fs (loop2): Remounting filesystem read-only [ 121.935319][ T6455] BTRFS info (device loop1): disabling free space tree [ 121.952776][ T6455] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.968432][ T6455] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.997307][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.473436][ T27] IPVS: starting estimator thread 0... [ 122.549399][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.595128][ T6492] IPVS: using max 19 ests per chain, 45600 per kthread [ 122.634047][ T6491] loop2: detected capacity change from 0 to 8192 [ 122.775379][ T6494] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 123.323947][ T6486] loop3: detected capacity change from 0 to 32768 [ 123.393426][ T786] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.507535][ T6486] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.534537][ T6508] loop0: detected capacity change from 0 to 4096 [ 123.583728][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 123.599826][ T6508] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 123.609651][ T786] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 123.625195][ T786] usb 3-1: config 0 has no interface number 0 [ 123.636392][ T786] usb 3-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 123.648768][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.668590][ T786] usb 3-1: Product: syz [ 123.673698][ T786] usb 3-1: Manufacturer: syz [ 123.678615][ T786] usb 3-1: SerialNumber: syz [ 123.719662][ T786] usb 3-1: config 0 descriptor?? [ 123.760088][ T6508] ntfs3: loop0: Inode r=19 is not in use! [ 123.774636][ T6508] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 123.840527][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 123.898854][ T6508] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 123.946399][ T6508] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 124.104888][ T58] ntfs3: loop0: ino=1d, failed to open parent directory r=400 to update [ 124.192572][ T786] kaweth 3-1:0.20: Firmware present in device. [ 124.204720][ T786] kaweth 3-1:0.20: Error reading configuration (-71), no net device created [ 124.217980][ T786] kaweth: probe of 3-1:0.20 failed with error -5 [ 124.232565][ T786] usb 3-1: USB disconnect, device number 6 [ 124.233501][ T5430] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.296547][ T6517] xt_CT: No such helper "pptp" [ 124.352803][ T6521] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.433711][ T5430] usb 4-1: Using ep0 maxpacket: 8 [ 124.446158][ T5430] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.468400][ T5430] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.506107][ T5430] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.531321][ T5430] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.563124][ T5430] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.587143][ T5430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.808504][ T5430] usb 4-1: GET_CAPABILITIES returned 0 [ 124.825498][ T5430] usbtmc 4-1:16.0: can't read capabilities [ 125.067284][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 125.076678][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 125.150500][ T5430] usb 4-1: USB disconnect, device number 3 [ 125.699763][ T6543] loop1: detected capacity change from 0 to 32768 [ 125.721297][ T6543] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.218 (6543) [ 125.771887][ T6543] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 125.789173][ T6543] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 125.802103][ T6543] BTRFS info (device loop1): using free space tree [ 125.894111][ T6543] BTRFS info (device loop1): enabling ssd optimizations [ 125.903583][ T6543] BTRFS info (device loop1): auto enabling async discard [ 126.103480][ T5788] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 128.972894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d105400: rx timeout, send abort [ 128.981329][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d104c00: rx timeout, send abort [ 128.989916][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d105400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.004366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d104c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.085833][ T6594] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 129.308825][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'. [ 129.335259][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d030c00: rx timeout, send abort [ 129.423048][ T786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.613041][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 129.620117][ T786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.631665][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.641785][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.651759][ T786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.664845][ T786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.674046][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.713149][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.835382][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbac800: rx timeout, send abort [ 129.844149][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d030c00: abort rx timeout. Force session deactivation [ 129.893140][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 129.914960][ T786] usb 3-1: GET_CAPABILITIES returned 0 [ 129.920543][ T786] usbtmc 3-1:16.0: can't read capabilities [ 129.930782][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.948250][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.958564][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.972832][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.990917][ T23] usb 2-1: config 0 descriptor?? [ 130.003817][ T23] hub 2-1:0.0: USB hub found [ 130.190131][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 130.211757][ T5430] usb 3-1: USB disconnect, device number 7 [ 130.220319][ T23] hub 2-1:0.0: 1 port detected [ 130.343872][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbac800: abort rx timeout. Force session deactivation [ 130.848205][ T23] hub 2-1:0.0: activate --> -90 [ 131.268433][ T5430] usb 2-1: USB disconnect, device number 3 [ 131.653029][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.738356][ T6652] loop2: detected capacity change from 0 to 32768 [ 131.752096][ T6652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.255 (6652) [ 131.780775][ T6656] loop3: detected capacity change from 0 to 1024 [ 131.793139][ T6652] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.795772][ T6656] EXT4-fs: Ignoring removed bh option [ 131.819545][ T6652] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 131.835434][ T6652] BTRFS info (device loop2): using free space tree [ 131.837473][ T6656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.890014][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.892741][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.906979][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.998744][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.026885][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.069262][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.098176][ T6652] BTRFS info (device loop2): enabling ssd optimizations [ 132.109000][ T6652] BTRFS info (device loop2): auto enabling async discard [ 132.121328][ T8] usb 1-1: config 0 descriptor?? [ 132.165734][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.224735][ T5430] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.345288][ T5798] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.430410][ T5430] usb 2-1: Using ep0 maxpacket: 8 [ 132.445228][ T5430] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.458543][ T5430] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.470990][ T5430] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.481650][ T5430] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.499891][ T5430] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.511000][ T5430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.574241][ T5792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5792) [ 132.596030][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 132.643726][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.757344][ T5430] usb 2-1: GET_CAPABILITIES returned 0 [ 132.792468][ T5430] usbtmc 2-1:16.0: can't read capabilities [ 133.058341][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.066130][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.526152][ T6682] loop3: detected capacity change from 0 to 40427 [ 133.542498][ T6682] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.559949][ T6682] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.584752][ T6682] F2FS-fs (loop3): invalid crc value [ 133.604971][ T6682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.740986][ T6682] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 133.748492][ T6682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.832557][ C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 133.849956][ T27] usb 1-1: USB disconnect, device number 5 [ 133.907892][ T5430] usb 2-1: USB disconnect, device number 4 [ 133.960813][ T6698] syz.3.260: attempt to access beyond end of device [ 133.960813][ T6698] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 133.978861][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 134.008117][ T6698] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 134.031009][ T6698] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 134.261085][ T6704] loop2: detected capacity change from 0 to 256 [ 135.510649][ T6706] loop2: detected capacity change from 0 to 32768 [ 135.615299][ T6706] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 135.663385][ T6706] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 135.819461][ T6718] loop0: detected capacity change from 0 to 32768 [ 135.842663][ T6718] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.271 (6718) [ 135.857534][ T6706] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 135.903717][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 135.921913][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 135.956596][ T6718] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 135.974119][ T6718] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 136.002390][ T6718] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.004529][ T6729] warning: `syz.1.276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.037313][ T6718] BTRFS info (device loop0): use zstd compression, level 3 [ 136.051869][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 129ms [ 136.076223][ T6718] BTRFS info (device loop0): using free space tree [ 136.097635][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 136.115469][ T6706] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.237564][ T6718] BTRFS info (device loop0): enabling ssd optimizations [ 136.293156][ T6718] BTRFS info (device loop0): auto enabling async discard [ 136.837797][ T5794] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.860336][ T6754] Bluetooth: hci0: unsupported parameter 5148 [ 136.874485][ T6754] Bluetooth: hci0: unsupported parameter 65024 [ 136.880716][ T6754] Bluetooth: hci0: unsupported parameter 5148 [ 136.887045][ T6754] Bluetooth: hci0: unsupported parameter 65024 [ 137.115600][ T6756] loop1: detected capacity change from 0 to 4096 [ 137.257981][ T6756] NILFS (loop1): invalid segment: Checksum error in segment payload [ 137.310923][ T6756] NILFS (loop1): trying rollback from an earlier position [ 137.401021][ T6722] loop3: detected capacity change from 0 to 40427 [ 137.438489][ T6756] NILFS (loop1): recovery complete [ 137.497366][ T6757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.517117][ T6722] F2FS-fs (loop3): build fault injection attr: rate: 694, type: 0x7ffff [ 137.581909][ T6759] tipc: Started in network mode [ 137.603122][ T6759] tipc: Node identity 4, cluster identity 4711 [ 137.623249][ T6759] tipc: Node number set to 4 [ 137.643509][ T6722] F2FS-fs (loop3): invalid crc value [ 137.729903][ T6722] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.990933][ T6722] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.210317][ T6722] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 138.635708][ T5785] syz-executor: attempt to access beyond end of device [ 138.635708][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 138.709459][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.750886][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.787365][ T6776] loop1: detected capacity change from 0 to 8192 [ 139.202926][ C1] sched: RT throttling activated [ 139.360650][ T6779] loop0: detected capacity change from 0 to 512 [ 139.396154][ T6780] loop1: detected capacity change from 0 to 512 [ 139.477195][ T6780] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.499360][ T6779] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.289: corrupted in-inode xattr: invalid ea_ino [ 139.540148][ T6780] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 139.605456][ T6779] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.289: couldn't read orphan inode 15 (err -117) [ 139.623174][ T6780] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 139.673303][ T6780] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.288: Failed to acquire dquot type 1 [ 139.697066][ T6779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.755812][ T6780] EXT4-fs (loop1): 1 truncate cleaned up [ 139.829077][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.977338][ T6780] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.288: deleted inode referenced: 12 [ 140.018332][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.280536][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.728230][ T6773] loop2: detected capacity change from 0 to 262144 [ 140.802304][ T6773] F2FS-fs (loop2): invalid crc value [ 140.843012][ T6773] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.902398][ T6773] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.960125][ T28] audit: type=1800 audit(1759764692.883:8): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 141.293049][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.495296][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 141.534502][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.545841][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.594428][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.621674][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.654458][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.674159][ T9] usb 2-1: Product: syz [ 141.679082][ T9] usb 2-1: Manufacturer: syz [ 141.703725][ T9] usb 2-1: SerialNumber: syz [ 142.155118][ T9] usb 2-1: 0:2 : does not exist [ 142.408668][ T6815] loop0: detected capacity change from 0 to 128 [ 142.432208][ T6815] EXT4-fs: Ignoring removed nobh option [ 142.470748][ T6815] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.561238][ T6815] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.923129][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.981966][ T5800] usb 2-1: USB disconnect, device number 5 [ 143.111272][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 143.123072][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 143.138996][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.157426][ T27] usb 1-1: config 0 has no interface number 0 [ 143.173394][ T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.193130][ T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.229899][ T27] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 143.251262][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.277206][ T27] usb 1-1: config 0 descriptor?? [ 143.912834][ T27] uclogic 0003:28BD:0071.0004: pen parameters not found [ 143.934845][ T27] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 143.963330][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 144.128479][ T5800] usb 1-1: USB disconnect, device number 6 [ 144.157324][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.204925][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.258624][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.270555][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.282629][ T9] usb 2-1: Product: syz [ 144.289548][ T9] usb 2-1: Manufacturer: syz [ 144.303260][ T9] usb 2-1: SerialNumber: syz [ 144.340949][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 144.669309][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.098648][ T6851] loop3: detected capacity change from 0 to 4096 [ 145.149174][ T6851] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 145.349863][ T9] cdc_ncm 2-1:1.0: bind() failure [ 145.368936][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 145.402233][ T9] cdc_ncm 2-1:1.1: bind() failure [ 145.546798][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.571226][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.590236][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.593422][ T27] usb 2-1: USB disconnect, device number 6 [ 145.611963][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.636157][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.657152][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.695949][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.706536][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.717870][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.728774][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.739259][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.750649][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.762349][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.779233][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.789340][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.800812][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.810111][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.821754][ T9] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.839491][ T9] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 145.981480][ T6872] loop3: detected capacity change from 0 to 2048 [ 146.004032][ T6870] fido_id[6870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.063538][ T6872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.204107][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 146.410625][ T27] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 146.423729][ T27] usb 1-1: config 0 has no interface number 0 [ 146.433135][ T27] usb 1-1: too many endpoints for config 0 interface 149 altsetting 88: 114, using maximum allowed: 30 [ 146.453513][ T27] usb 1-1: config 0 interface 149 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 146.512987][ T27] usb 1-1: config 0 interface 149 has no altsetting 0 [ 146.536277][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 146.566593][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.596975][ T27] usb 1-1: Product: syz [ 146.601214][ T27] usb 1-1: Manufacturer: syz [ 146.637507][ T27] usb 1-1: SerialNumber: syz [ 146.660215][ T27] usb 1-1: config 0 descriptor?? [ 146.898461][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 146.926701][ T27] usb 1-1: USB disconnect, device number 7 [ 147.636591][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 147.711018][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.908024][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.919583][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.930632][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 147.940993][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.954304][ T27] usb 2-1: config 0 descriptor?? [ 148.321425][ T6926] loop0: detected capacity change from 0 to 2048 [ 148.370737][ T27] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 148.380453][ T6926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.394206][ T27] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 148.412456][ T6926] EXT4-fs (loop0): shut down requested (2) [ 148.424308][ T27] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0006/input/input8 [ 148.479158][ T27] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 148.580067][ T27] usb 2-1: USB disconnect, device number 7 [ 148.687025][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.738498][ T6920] loop2: detected capacity change from 0 to 32768 [ 148.840259][ T6935] fido_id[6935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 148.864554][ T6920] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 148.864554][ T6920] [ 148.906942][ T6920] ERROR: (device loop2): remounting filesystem as read-only [ 148.947459][ T6920] ERROR: (device loop2): jfs_rename: [ 148.947459][ T6920] [ 148.986003][ T6938] BUG: Bad page state in process syz.2.342 pfn:29a17 [ 149.016295][ T6938] page:ffffea0000a685c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x29a17 [ 149.070915][ T6938] flags: 0xfff1000000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 149.091890][ T6938] page_type: 0xffffffff() [ 149.119193][ T6938] raw: 00fff1000000820c ffffea0001d98448 ffffc90003667940 0000000000000000 [ 149.129907][ T6938] raw: 000000000000001c ffff88805b8600f8 00000000ffffffff 0000000000000000 [ 149.149305][ T6938] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 149.163543][ T6938] page_owner tracks the page as allocated [ 149.169957][ T6938] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6920, tgid 6919 (syz.2.342), ts 148796845225, free_ts 148401780861 [ 149.188708][ T6938] post_alloc_hook+0x1cd/0x210 [ 149.193736][ T6938] get_page_from_freelist+0x195c/0x19f0 [ 149.199517][ T6938] __alloc_pages+0x1e3/0x460 [ 149.204422][ T6938] folio_alloc+0x1e/0x30 [ 149.208797][ T6938] filemap_alloc_folio+0xdf/0x470 [ 149.215634][ T6938] do_read_cache_folio+0x36c/0x7e0 [ 149.220952][ T6938] do_read_cache_page+0x32/0x250 [ 149.237542][ T6938] __get_metapage+0x31a/0xfa0 [ 149.262729][ T6938] diRead+0x6d3/0xb90 [ 149.268289][ T6938] jfs_iget+0x8d/0x3c0 [ 149.272517][ T6938] jfs_fill_super+0x70c/0xac0 [ 149.287825][ T6938] mount_bdev+0x22b/0x2d0 [ 149.295873][ T6938] legacy_get_tree+0xea/0x180 [ 149.300739][ T6938] vfs_get_tree+0x8c/0x280 [ 149.305656][ T6938] do_new_mount+0x24b/0xa40 [ 149.313013][ T6938] __se_sys_mount+0x2da/0x3c0 [ 149.317761][ T6938] page last free stack trace: [ 149.322455][ T6938] free_unref_page_prepare+0x7ce/0x8e0 [ 149.329841][ T6938] free_unref_page+0x32/0x2e0 [ 149.334764][ T6938] vfree+0x1a6/0x320 [ 149.338719][ T6938] hid_open_report+0xa5f/0xec0 [ 149.343802][ T6938] cmhid_probe+0xc6/0x170 [ 149.348173][ T6938] hid_device_probe+0x293/0x5b0 [ 149.353174][ T6938] really_probe+0x25b/0xb40 [ 149.358800][ T6938] __driver_probe_device+0x18c/0x330 [ 149.364259][ T6938] driver_probe_device+0x4f/0x420 [ 149.369324][ T6938] __device_attach_driver+0x2ca/0x520 [ 149.375038][ T6938] bus_for_each_drv+0x24b/0x2d0 [ 149.379949][ T6938] __device_attach+0x2b5/0x400 [ 149.384870][ T6938] bus_probe_device+0x180/0x260 [ 149.389752][ T6938] device_add+0x85b/0xc20 [ 149.394241][ T6938] hid_add_device+0x38d/0x530 [ 149.398983][ T6938] usbhid_probe+0xe02/0x1220 [ 149.405462][ T6938] Modules linked in: [ 149.409442][ T6938] CPU: 1 PID: 6938 Comm: syz.2.342 Not tainted syzkaller #0 [ 149.416750][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.426840][ T6938] Call Trace: [ 149.430138][ T6938] [ 149.433099][ T6938] dump_stack_lvl+0x16c/0x230 [ 149.437794][ T6938] ? show_regs_print_info+0x20/0x20 [ 149.443013][ T6938] ? swiotlb_print_info+0x70/0x70 [ 149.448052][ T6938] ? dump_page+0xba7/0x14d0 [ 149.452574][ T6938] bad_page+0x14b/0x170 [ 149.456761][ T6938] free_unref_page_prepare+0x887/0x8e0 [ 149.462252][ T6938] free_unref_page_list+0xbe/0x860 [ 149.467425][ T6938] ? __folio_memcg+0x63/0x160 [ 149.472134][ T6938] ? folio_memcg+0x127/0x480 [ 149.476743][ T6938] release_pages+0x1fa0/0x2220 [ 149.481532][ T6938] ? lru_cache_disable+0x30/0x30 [ 149.486492][ T6938] ? mlock_drain_local+0x79/0x490 [ 149.491549][ T6938] ? mlock_drain_local+0x79/0x490 [ 149.496628][ T6938] ? mlock_drain_local+0x28d/0x490 [ 149.501800][ T6938] __folio_batch_release+0x71/0xe0 [ 149.506925][ T6938] truncate_inode_pages_range+0x358/0xf00 [ 149.512670][ T6938] ? filemap_fdatawait_range+0x40/0x40 [ 149.518178][ T6938] ? mapping_evict_folio+0x510/0x510 [ 149.523524][ T6938] ? jfs_sync_fs+0x87/0xa0 [ 149.527956][ T6938] ? sync_filesystem+0x1e6/0x220 [ 149.532926][ T6938] jfs_remount+0x33b/0x5b0 [ 149.537377][ T6938] ? jfs_statfs+0x550/0x550 [ 149.541907][ T6938] reconfigure_super+0x21e/0x880 [ 149.546884][ T6938] path_mount+0xd19/0xfe0 [ 149.551246][ T6938] __se_sys_mount+0x2da/0x3c0 [ 149.555941][ T6938] ? __x64_sys_mount+0xc0/0xc0 [ 149.560735][ T6938] ? lockdep_hardirqs_on+0x98/0x150 [ 149.565986][ T6938] ? __x64_sys_mount+0x20/0xc0 [ 149.570781][ T6938] do_syscall_64+0x55/0xb0 [ 149.575234][ T6938] ? clear_bhb_loop+0x40/0x90 [ 149.579962][ T6938] ? clear_bhb_loop+0x40/0x90 [ 149.584654][ T6938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.590557][ T6938] RIP: 0033:0x7f78b359066a [ 149.595094][ T6938] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.614741][ T6938] RSP: 002b:00007f78b43b2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.623193][ T6938] RAX: ffffffffffffffda RBX: 00007f78b43b2ef0 RCX: 00007f78b359066a [ 149.631202][ T6938] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 149.639195][ T6938] RBP: 0000200000000f40 R08: 00007f78b43b2ef0 R09: 0000000001a4a438 [ 149.647185][ T6938] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 149.655179][ T6938] R13: 00007f78b43b2eb0 R14: 0000000000000000 R15: 0000200000000f80 [ 149.663285][ T6938] [ 149.668830][ T6938] Disabling lock debugging due to kernel taint [ 149.685003][ T6920] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.685003][ T6920] [ 149.696794][ T6920] ERROR: (device loop2): remounting filesystem as read-only [ 149.705102][ T6920] xtLookup: xtSearch returned -5 [ 149.710676][ T6920] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 149.710676][ T6920] [ 149.720911][ T6920] xtLookup: xtSearch returned -5 [ 149.737581][ T5798] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 149.737581][ T5798]