last executing test programs: 19m40.007041742s ago: executing program 3 (id=1575): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x9ee, 0x1, 'client0\x00', 0x0, "a44bf30000051057", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x15, 0x800}) 19m38.325533642s ago: executing program 3 (id=1579): rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 19m38.258673143s ago: executing program 3 (id=1580): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x0, 0x40002122, 0x0) ioctl$sock_ifreq(r0, 0x8923, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) read$char_usb(r3, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000640)={'syz', 0x0}, &(0x7f00000008c0)="3dc699c89acba2dc0eb735e19cc19f0ea9b8471ab09cc0b1af62e5afb8f2b6fc4fa1331dd7707d052a0a60503fc5f9c29a67925bcfdba829622c5937d28956bc8e37", 0x42, 0x0) syz_usb_disconnect(r2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) 19m35.159481069s ago: executing program 3 (id=1584): socket(0x28, 0xa, 0x0) socket(0x28, 0x5, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}}) mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 19m34.056277932s ago: executing program 3 (id=1587): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x9ee, 0x1, 'client0\x00', 0x0, "a44bf30000051057", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x15, 0x800}) tkill(r0, 0x7) 19m33.796210275s ago: executing program 3 (id=1590): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 19m18.631494452s ago: executing program 32 (id=1590): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m52.173330642s ago: executing program 1 (id=4151): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2e4, &(0x7f00000008c0)="$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") 2m51.535104812s ago: executing program 1 (id=4152): close(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}], 0x3) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2m48.741687859s ago: executing program 1 (id=4155): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000400)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@nodiscard}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f00000079c0)="$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") r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, &(0x7f0000000000)='.\x00') 2m47.390106652s ago: executing program 1 (id=4159): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 2m44.716864665s ago: executing program 1 (id=4165): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f0, &(0x7f00000000c0)={0x0, 0x770000, 0x8, 0x0, 0x19, "bb5dee0403081c012083d08600"}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) sendmmsg$inet6(r3, 0x0, 0x0, 0x800) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff000000191001002dbd7000000000000000000000000d000000000000000001ac1414aa00"/51, @ANYRES32], 0xfc}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffff, &(0x7f0000006680)) timer_settime(0x0, 0x0, 0x0, 0x0) getpriority(0x0, 0x0) socket(0xa, 0x3, 0xfc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m42.989787519s ago: executing program 1 (id=4170): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m42.233918943s ago: executing program 33 (id=4170): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m9.978094278s ago: executing program 0 (id=4219): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x74, 0xeb, 0x78, 0x40, 0x1bcf, 0xb40, 0x4abf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x67, 0x4, 0x10, 0xf, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0xe, 0x1, 0x0, 0x96}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_disconnect(r0) 2m6.840907065s ago: executing program 0 (id=4225): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000002c0)={[{@filestreams}, {@prjquota}, {@pquota}, {@usrquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@dax_always}]}, 0xc2, 0x9678, &(0x7f0000009680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140), &(0x7f0000000440)=@v2={0x3, 0x3, 0x6, 0x5}, 0x9, 0x0) 1m59.978129858s ago: executing program 0 (id=4234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000032c0)=[{0x0}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m58.103179967s ago: executing program 0 (id=4239): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4) r5 = io_uring_setup(0x818, &(0x7f0000000300)={0x0, 0x81f, 0x0, 0x3, 0x259, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800010000000000000000f30900000000000000040004003b77f90e67394f88d2b2692adde7975c8593e9c3ff60ebf0c0e16f8cb1f8a3f4594730d56874e30d153cc27eb79bb5074464d04fd3fe6d015d2bf5bc4a7f3dae1a7bf8df8ead72fe60cf0eaa92e82b9602c934a2afcd77f373109e88518052b5fa78e3b905e12c19b73c54765926158d5ece5567c13e13"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x210) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffff}}, 0x18) 1m54.631988545s ago: executing program 0 (id=4243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000300)={0x80, 0x0, 0x1}) 1m54.284626535s ago: executing program 0 (id=4246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m38.929532523s ago: executing program 34 (id=4246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 34.495840117s ago: executing program 6 (id=4353): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x34, &(0x7f0000000000)=@generic={0x6, 0x2, 0x2c, "8d961a31", "eca23c0dc9b0f98c7946b83bea72b4fe05e07e774bb5c1f76df3cdc87964d439cbd155c5713c01fc092d9c10"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001097"], 0x0) 30.793539122s ago: executing program 6 (id=4360): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d6d616363656c7469632c00910d0000004f40c49242d1b1d1ab77b6f1ab4ccc896daa46a67aa4b73b6801cb73885aa13af1852cb136e8b4eaf390dc096997d238fd8be843d09ec4c109375014d227b5352e3e227762f759aae12885b13d39260987c424de2d64943f53abe423dd980de7f7142c2756618b3cb2fa683a50992b2b1df0f65ebe22c97f48fcfad913d4f8b0fbd96ac316009b0bbda1dec06d7f7e880f63727be286c75abc0983dbd4d3196203a114711f16bce73cb95049b996dbae", @ANYBLOB="3e257fc0ddd0dcd223bdb7340f606f61135994256b84f21bba7db988a8e4a19a9c2c1d52a07d082cdde9133b045e5194bc"], 0x1, 0x5c8, &(0x7f00000013c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) 30.314342557s ago: executing program 6 (id=4362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee16", 0x1e}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 29.88245744s ago: executing program 6 (id=4365): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 29.677155517s ago: executing program 6 (id=4366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000200), 0x0, 0x4040) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 29.162891633s ago: executing program 6 (id=4369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x34, &(0x7f0000000000)=@generic={0x6, 0x2, 0x2c, "8d961a31", "eca23c0dc9b0f98c7946b83bea72b4fe05e07e774bb5c1f76df3cdc87964d439cbd155c5713c01fc092d9c10"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d"], 0x0) 27.910851112s ago: executing program 35 (id=4369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x34, &(0x7f0000000000)=@generic={0x6, 0x2, 0x2c, "8d961a31", "eca23c0dc9b0f98c7946b83bea72b4fe05e07e774bb5c1f76df3cdc87964d439cbd155c5713c01fc092d9c10"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d"], 0x0) 15.356938702s ago: executing program 5 (id=4389): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0xc08, 0x3, 0x228, 0xb8, 0x5002004a, 0xb, 0xb8, 0xea13, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'dummy0\x00', 'batadv_slave_0\x00', {}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0xffffffff, 'nr0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x5e, 0x0, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x4, 0x8, 0x5, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1, 0x400, 0x101) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000007) 14.943127855s ago: executing program 4 (id=4391): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x4d3f, &(0x7f0000000140)={0x0, 0xb18d, 0x8, 0x3, 0x105}) 13.516848949s ago: executing program 5 (id=4393): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 12.112218163s ago: executing program 5 (id=4394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000200), 0x0, 0x4040) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 11.550327001s ago: executing program 5 (id=4395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4", 0x20}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 10.496484234s ago: executing program 4 (id=4396): r0 = socket(0x23, 0x2, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="c4e1985537b90d0a0000b88b090000ba000000000f30260fbab200480000f7b9800000c00f3235000800000f300f01c82e3664660f3881825300000066b81f000f00d03e66f30f096726660f388270ba0fc77331", 0xffffff6c}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000452000/0x18000)=nil, 0x0, 0x0, 0x11, &(0x7f0000000280), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00'}) 6.955962553s ago: executing program 2 (id=4401): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x10, 0x2, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 6.023117573s ago: executing program 2 (id=4402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200), 0x0, 0x4040) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 4.647665885s ago: executing program 2 (id=4403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.915083269s ago: executing program 5 (id=4404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast2}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) 2.809422242s ago: executing program 4 (id=4405): r0 = syz_usb_connect(0x5, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000fc0)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.653595047s ago: executing program 2 (id=4406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1.9103284s ago: executing program 5 (id=4407): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.854553672s ago: executing program 4 (id=4408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='d']) 1.567889071s ago: executing program 4 (id=4409): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x541b, 0x1000000000000) 1.345209038s ago: executing program 4 (id=4410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200), 0x0, 0x4040) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1.073679896s ago: executing program 2 (id=4411): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x6, &(0x7f0000000300)=[{0x50, 0x5, 0x7}, {0x30, 0x0, 0x4, 0xfffff00c}, {0x5, 0x0, 0x8, 0x5}, {0x9, 0x1, 0x0, 0x1}, {0x8, 0x8, 0xfb, 0x1}, {0x2bc2, 0x7, 0x5, 0xffff}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000500), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lseek(r0, 0xffff800000000002, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4b, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "73001169", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x1ff) 0s ago: executing program 2 (id=4412): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0)) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r4 = syz_clone3(&(0x7f0000000540)={0x2190000, 0x0, &(0x7f00000002c0), &(0x7f0000000300), {0x6}, &(0x7f0000000340)=""/145, 0x91, &(0x7f0000000400)=""/251, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) migrate_pages(r4, 0x2, 0x0, &(0x7f0000000700)=0x5a43) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000740)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1) listen(r6, 0x204) r7 = socket$netlink(0x10, 0x3, 0x7) writev(r7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="772f74708e84330ae8bf9d428c77976080538fbf69a99f756ff9340f3dbc50b4285f9d4373ce620d0cd1cf727182cc0c814a80d4cc0a383b3c53292f53e36a36c6171260a516bf84a4c02aab79736ad1c97a9157ae396c2d196f2b8e552c5ec605e4bc29631f1d3acdb4f193f4019570605f5f5f288e842de33064b92fb15e73a34bae359b0fcbcf3dc689791cc1396be9c9beec438325539c80f3884850165607a50fe6f484e707d712eecb0357aab8f47893551cd975a9dd2b2e", 0xbb, 0x20008810, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast1, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) kernel console output (not intermixed with test programs): [T12263] usb 1-1: config 0 descriptor?? [ 1533.236719][ T5828] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1533.312329][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.325736][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.538056][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 1533.560990][ T5828] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1533.587150][T12263] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 1533.588268][ T5828] usb 5-1: config 179 has no interface number 0 [ 1533.618149][ T5828] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1533.628268][T12263] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 1533.644844][T12263] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 1533.648073][ T5828] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1533.653400][T12263] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 1533.680855][T12263] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 1533.704001][T15106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.708132][ T5828] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1533.738315][T22684] loop1: detected capacity change from 0 to 32768 [ 1533.747904][ T5828] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1533.762490][T12263] cougar 0003:060B:700A.0019: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1533.796414][T22684] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1533.806873][T12263] usb 1-1: USB disconnect, device number 49 [ 1533.816551][T22684] JBD2: Ignoring recovery information on journal [ 1533.836718][ T5828] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1533.928082][ T5828] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1533.930179][T22684] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1533.958258][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.993578][T22690] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1534.132681][T22697] fido_id[22697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1534.291223][ T5828] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input63 [ 1534.504198][T22684] loop1: detected capacity change from 32768 to 64 [ 1534.533227][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1534.541690][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1534.565292][ T5828] usb 5-1: USB disconnect, device number 127 [ 1534.581813][ T5828] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1534.639213][T22684] syz.1.4159 (22684) used greatest stack depth: 17936 bytes left [ 1534.818475][T14809] syz-executor: attempt to access beyond end of device [ 1534.818475][T14809] loop1: rw=0, sector=17057, nr_sectors = 1 limit=64 [ 1534.867236][T14809] (syz-executor,14809,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 1534.878427][T14809] syz-executor: attempt to access beyond end of device [ 1534.878427][T14809] loop1: rw=0, sector=17057, nr_sectors = 1 limit=64 [ 1534.897609][T14809] (syz-executor,14809,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 1535.311655][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.311655][T22696] loop1: rw=38913, sector=642, nr_sectors = 1 limit=64 [ 1535.548070][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.548070][T22696] loop1: rw=38913, sector=643, nr_sectors = 1 limit=64 [ 1535.616976][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.616976][T22696] loop1: rw=38913, sector=644, nr_sectors = 1 limit=64 [ 1535.683073][T17671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.708049][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.708049][T22696] loop1: rw=38913, sector=645, nr_sectors = 1 limit=64 [ 1535.747465][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.747465][T22696] loop1: rw=38913, sector=646, nr_sectors = 1 limit=64 [ 1535.776318][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.776318][T22696] loop1: rw=38913, sector=647, nr_sectors = 1 limit=64 [ 1535.827701][T22696] jbd2/loop1-75: attempt to access beyond end of device [ 1535.827701][T22696] loop1: rw=38913, sector=648, nr_sectors = 1 limit=64 [ 1535.856654][T22696] Aborting journal on device loop1-75. [ 1535.869461][T22696] Buffer I/O error on dev loop1, logical block 640, lost sync page write [ 1535.883354][T22696] JBD2: I/O error when updating journal superblock for loop1-75. [ 1535.892969][T14809] (syz-executor,14809,0):ocfs2_start_trans:379 ERROR: status = -30 [ 1535.916139][T14809] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 1535.934027][T14809] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1535.944387][T14809] OCFS2: File system is now read-only. [ 1535.950679][T17671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.988093][T14809] (syz-executor,14809,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 1536.001073][T14809] Buffer I/O error on dev loop1, logical block 17024, lost sync page write [ 1536.011082][T14809] (syz-executor,14809,0):ocfs2_write_block:78 ERROR: status = -5 [ 1536.025000][T14809] (syz-executor,14809,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 1536.078635][T14809] (syz-executor,14809,0):ocfs2_put_slot:517 ERROR: status = -5 [ 1536.088413][ T5828] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1536.104598][T14809] (syz-executor,14809,0):ocfs2_journal_shutdown:1107 ERROR: status = -5 [ 1536.152455][T14809] ocfs2: Unmounting device (7,1) on (node local) [ 1536.163741][T17671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.278307][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 1536.286374][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1536.297586][ T5828] usb 1-1: config 128 has an invalid interface number: 216 but max is 0 [ 1536.320974][ T5828] usb 1-1: config 128 has no interface number 0 [ 1536.341261][ T5828] usb 1-1: config 128 interface 216 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 1536.365627][T17671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.372356][ T5828] usb 1-1: config 128 interface 216 altsetting 7 has an invalid endpoint with address 0xD2, skipping [ 1536.427633][ T5828] usb 1-1: config 128 interface 216 altsetting 7 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1536.458943][ T5828] usb 1-1: config 128 interface 216 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1536.488165][ T5828] usb 1-1: config 128 interface 216 has no altsetting 0 [ 1536.500406][ T5828] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a28, bcdDevice=29.ea [ 1536.510178][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.528025][ T5828] usb 1-1: Product: syz [ 1536.532240][ T5828] usb 1-1: Manufacturer: syz [ 1536.536899][ T5828] usb 1-1: SerialNumber: syz [ 1536.562629][T22709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1536.579061][T22709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1536.586449][T22709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1536.883147][T22705] loop2: detected capacity change from 0 to 40427 [ 1536.915339][T17671] tipc: Left network mode [ 1536.929645][ T5828] usb 1-1: USB disconnect, device number 50 [ 1536.942711][T22705] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 1536.989329][T22705] F2FS-fs (loop2): Image doesn't support compression [ 1537.024426][T22705] F2FS-fs (loop2): Image doesn't support compression [ 1537.052890][T22705] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 1537.095754][T22705] F2FS-fs (loop2): invalid crc value [ 1537.137864][T22705] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1537.232424][T22713] loop4: detected capacity change from 0 to 32768 [ 1537.248176][T22713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4169 (22713) [ 1537.343299][T22713] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1537.358078][T22705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1537.394110][T22713] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1537.414961][T22713] BTRFS info (device loop4): setting nodatasum [ 1537.424232][T22713] BTRFS info (device loop4): force zlib compression, level 3 [ 1537.431820][T22713] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1537.445308][T22713] BTRFS info (device loop4): use lzo compression, level 0 [ 1537.453101][T22713] BTRFS info (device loop4): turning on flush-on-commit [ 1537.489737][T22713] BTRFS info (device loop4): enabling auto defrag [ 1537.496278][T22713] BTRFS info (device loop4): max_inline at 4096 [ 1537.516790][T22713] BTRFS info (device loop4): using free space tree [ 1537.776271][T22713] BTRFS info (device loop4): enabling ssd optimizations [ 1538.078248][T22046] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1538.306504][T12687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1538.335611][T12687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1538.358328][T12687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1538.421978][T12687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1538.448494][T12687] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1538.459152][T12687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1538.680618][T22755] overlayfs: statfs failed on './file0' [ 1538.848636][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1539.038539][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 1539.070264][ T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1539.231867][ T23] usb 5-1: config 179 has no interface number 0 [ 1539.324167][T22766] tipc: Cannot configure node identity twice [ 1539.346879][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1539.575621][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1539.794933][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1539.858993][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1539.944317][ T23] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1539.990109][ T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1540.045687][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.096384][T22757] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1540.208908][T22750] lo speed is unknown, defaulting to 1000 [ 1540.365367][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input64 [ 1540.568117][T22050] Bluetooth: hci0: command tx timeout [ 1540.638583][ T23] usb 5-1: USB disconnect, device number 2 [ 1540.638652][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1540.652858][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1540.670681][ T23] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1540.892250][T22750] chnl_net:caif_netlink_parms(): no params data found [ 1540.899445][T21800] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1540.951533][T22759] lo speed is unknown, defaulting to 1000 [ 1541.125087][T21800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.143096][T21800] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1541.154080][T21800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.177484][T21800] usb 1-1: config 0 descriptor?? [ 1541.190118][T21800] pwc: Askey VC010 type 2 USB webcam detected. [ 1541.210120][T17671] hsr_slave_0: left promiscuous mode [ 1541.216131][T17671] hsr_slave_1: left promiscuous mode [ 1541.222863][T17671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.230447][T17671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.238737][T17671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.248245][T17671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.265538][T17671] bridge_slave_1: left allmulticast mode [ 1541.274805][T17671] bridge_slave_1: left promiscuous mode [ 1541.284472][T17671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.302457][T17671] bridge_slave_0: left allmulticast mode [ 1541.316832][T17671] bridge_slave_0: left promiscuous mode [ 1541.341414][T17671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.428399][T17671] veth1_macvtap: left promiscuous mode [ 1541.436909][T17671] veth0_macvtap: left promiscuous mode [ 1541.451818][T17671] veth1_vlan: left allmulticast mode [ 1541.457468][T17671] veth1_vlan: left promiscuous mode [ 1541.467482][T17671] veth0_vlan: left promiscuous mode [ 1541.609438][T21800] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1541.621306][T21800] pwc: recv_control_msg error -32 req 02 val 2700 [ 1541.756269][T22796] loop4: detected capacity change from 0 to 32768 [ 1542.049307][T21800] pwc: recv_control_msg error -71 req 04 val 1300 [ 1542.068359][T21800] pwc: recv_control_msg error -71 req 04 val 1400 [ 1542.075258][T21800] pwc: recv_control_msg error -71 req 02 val 2000 [ 1542.082379][T17671] bond4 (unregistering): Released all slaves [ 1542.089205][T21800] pwc: recv_control_msg error -71 req 02 val 2100 [ 1542.112903][T21800] pwc: recv_control_msg error -71 req 04 val 1500 [ 1542.129230][T21800] pwc: recv_control_msg error -71 req 02 val 2500 [ 1542.148152][T21800] pwc: recv_control_msg error -71 req 02 val 2400 [ 1542.156984][T21800] pwc: recv_control_msg error -71 req 02 val 2600 [ 1542.187195][T21800] pwc: recv_control_msg error -71 req 02 val 2900 [ 1542.198435][T21800] pwc: recv_control_msg error -71 req 02 val 2800 [ 1542.212882][T21800] pwc: recv_control_msg error -71 req 04 val 1100 [ 1542.234410][T21800] pwc: recv_control_msg error -71 req 04 val 1200 [ 1542.260016][T21800] pwc: Registered as video103. [ 1542.288678][T21800] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 1542.345153][T21800] usb 1-1: USB disconnect, device number 51 [ 1542.605303][T17671] bond3 (unregistering): Released all slaves [ 1542.646272][T22798] loop4: detected capacity change from 0 to 40427 [ 1542.653041][T22050] Bluetooth: hci0: command tx timeout [ 1542.684935][T22798] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1542.693412][T22798] F2FS-fs (loop4): Image doesn't support compression [ 1542.700250][T22798] F2FS-fs (loop4): Image doesn't support compression [ 1542.707746][T22798] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 1542.722832][T22798] F2FS-fs (loop4): invalid crc value [ 1542.773382][T22798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1542.863658][T22798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1543.061427][T17671] bond2 (unregistering): Released all slaves [ 1543.149405][T17671] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1543.375272][T22802] loop0: detected capacity change from 0 to 32768 [ 1543.394940][T22802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4181 (22802) [ 1543.452674][T22802] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1543.466196][T22802] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1543.475623][T22802] BTRFS info (device loop0): setting nodatasum [ 1543.481888][T22802] BTRFS info (device loop0): force zlib compression, level 3 [ 1543.489850][T22802] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1543.499413][T22802] BTRFS info (device loop0): use lzo compression, level 0 [ 1543.506648][T22802] BTRFS info (device loop0): turning on flush-on-commit [ 1543.514054][T22802] BTRFS info (device loop0): enabling auto defrag [ 1543.521684][T22802] BTRFS info (device loop0): max_inline at 4096 [ 1543.544370][T22802] BTRFS info (device loop0): using free space tree [ 1543.571727][T17671] bond1 (unregistering): Released all slaves [ 1543.658226][T22802] BTRFS info (device loop0): enabling ssd optimizations [ 1543.836476][T14449] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1543.914985][T22820] Trying to write to read-only block-device nullb0 [ 1544.140483][T17671] team0 (unregistering): Port device macvlan0 removed [ 1544.725048][T22050] Bluetooth: hci0: command tx timeout [ 1544.868714][T21800] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1545.138103][T21800] usb 5-1: Using ep0 maxpacket: 8 [ 1545.145409][T21800] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1545.156230][T21800] usb 5-1: config 179 has no interface number 0 [ 1545.163563][T21800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1545.195594][T21800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1545.209592][T21800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1545.221127][T21800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1545.233195][T21800] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1545.246789][T21800] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1545.287975][T21800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.301233][T22828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1545.630746][T21800] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input66 [ 1545.772868][T17671] team0 (unregistering): Port device team_slave_1 removed [ 1545.939656][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.946213][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.508448][ T23] usb 5-1: USB disconnect, device number 3 [ 1546.508471][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1546.522720][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1546.543224][ T23] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1546.621591][T17671] team0 (unregistering): Port device team_slave_0 removed [ 1546.730787][T17671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.849121][T17671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.958093][T22050] Bluetooth: hci0: command tx timeout [ 1547.408180][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1547.591189][T17671] bond0 (unregistering): Released all slaves [ 1547.600557][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.631848][ T23] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1547.648158][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.667595][ T23] usb 5-1: config 0 descriptor?? [ 1547.679672][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 1547.686753][T22841] loop0: detected capacity change from 0 to 32768 [ 1547.697007][T22841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4189 (22841) [ 1547.779459][T22841] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1547.798128][T22841] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1547.806894][T22841] BTRFS info (device loop0): setting nodatasum [ 1547.835927][T22841] BTRFS info (device loop0): force zlib compression, level 3 [ 1547.918493][T22841] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1547.972318][T22841] BTRFS info (device loop0): use lzo compression, level 0 [ 1548.025295][T22841] BTRFS info (device loop0): turning on flush-on-commit [ 1548.049842][T22750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.057023][T22750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.087754][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1548.094624][T22841] BTRFS info (device loop0): enabling auto defrag [ 1548.102316][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 1548.112212][T22750] bridge_slave_0: entered allmulticast mode [ 1548.119427][T22841] BTRFS info (device loop0): max_inline at 4096 [ 1548.125810][T22841] BTRFS info (device loop0): using free space tree [ 1548.133766][T22750] bridge_slave_0: entered promiscuous mode [ 1548.183751][T22750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.215219][T22750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.232924][T22750] bridge_slave_1: entered allmulticast mode [ 1548.261407][T22750] bridge_slave_1: entered promiscuous mode [ 1548.349397][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 1548.359837][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 1548.367196][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 1548.381380][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 1548.419172][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 1548.466165][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 1548.516994][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 1548.544787][T22750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.554489][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 1548.561898][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 1548.570177][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 1548.581275][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 1548.613948][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 1548.648320][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 1548.667936][T22750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.734437][ T23] pwc: Registered as video103. [ 1548.775730][T22841] BTRFS info (device loop0): enabling ssd optimizations [ 1548.811688][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 1548.905789][ T23] usb 5-1: USB disconnect, device number 4 [ 1549.033022][T22750] team0: Port device team_slave_0 added [ 1549.255265][T22750] team0: Port device team_slave_1 added [ 1549.287005][T14449] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1549.456883][T22750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.489846][T22750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.521028][T22750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.600984][T22750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.617999][T22750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.691709][T22750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.862212][T22882] loop4: detected capacity change from 0 to 136 [ 1549.867059][T22750] hsr_slave_0: entered promiscuous mode [ 1549.899019][T22750] hsr_slave_1: entered promiscuous mode [ 1549.919690][T22750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1549.943058][T22750] Cannot create hsr debugfs directory [ 1553.911803][T22750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1553.945251][T22750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1553.968264][T22750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1553.999522][T22750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1554.008581][ T5783] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1554.098595][T12263] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1554.202859][T22750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.222210][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 1554.234129][ T5783] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1554.253820][ T5783] usb 3-1: config 179 has no interface number 0 [ 1554.266701][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1554.284811][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1554.291079][T22750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.297665][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1554.317262][T12263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1554.323761][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1554.345577][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.348917][T12263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.352993][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.380629][T12263] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1554.390295][T12263] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1554.401506][ T5783] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1554.408363][T12263] usb 5-1: Manufacturer: syz [ 1554.425832][ T5783] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1554.433579][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.442105][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.459400][T12263] usb 5-1: config 0 descriptor?? [ 1554.470357][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.511686][T22899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1554.675356][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.708938][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.767675][ T5783] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input68 [ 1554.845196][T22904] loop0: detected capacity change from 0 to 32768 [ 1554.903164][T22904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4199 (22904) [ 1554.944708][T12263] cougar 0003:060B:700A.001A: unknown main item tag 0x0 [ 1554.979084][T12263] cougar 0003:060B:700A.001A: unknown main item tag 0x0 [ 1555.004950][T12263] cougar 0003:060B:700A.001A: unknown main item tag 0x0 [ 1555.012632][T22904] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1555.028761][T21800] usb 3-1: USB disconnect, device number 31 [ 1555.034776][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1555.034827][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1555.065025][T12263] cougar 0003:060B:700A.001A: unknown main item tag 0x0 [ 1555.081607][T22904] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1555.098600][T12263] cougar 0003:060B:700A.001A: unknown main item tag 0x0 [ 1555.107394][T22904] BTRFS info (device loop0): setting nodatasum [ 1555.119960][T12263] cougar 0003:060B:700A.001A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1555.137446][T22904] BTRFS info (device loop0): force zlib compression, level 3 [ 1555.146006][T22904] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1555.153755][T21800] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1555.178401][T12263] usb 5-1: USB disconnect, device number 5 [ 1555.185736][T22904] BTRFS info (device loop0): use lzo compression, level 0 [ 1555.223520][T22897] udevd[22897]: setting mode of /dev/bus/usb/005/005 to 020664 failed: No such file or directory [ 1555.240571][T22904] BTRFS info (device loop0): turning on flush-on-commit [ 1555.247580][T22904] BTRFS info (device loop0): enabling auto defrag [ 1555.286702][T22897] udevd[22897]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 1555.308258][T22904] BTRFS info (device loop0): max_inline at 4096 [ 1555.324816][T22904] BTRFS info (device loop0): using free space tree [ 1555.451094][T22938] fido_id[22938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1555.467766][T22904] BTRFS info (device loop0): enabling ssd optimizations [ 1555.494245][T22750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.737871][T14449] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1556.079008][ T5783] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1556.305149][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.336368][ T5783] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1556.375497][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.412085][ T5783] usb 3-1: config 0 descriptor?? [ 1556.438778][ T5783] pwc: Askey VC010 type 2 USB webcam detected. [ 1556.461902][T22750] veth0_vlan: entered promiscuous mode [ 1556.510102][T22750] veth1_vlan: entered promiscuous mode [ 1556.642885][T22750] veth0_macvtap: entered promiscuous mode [ 1556.697938][T22750] veth1_macvtap: entered promiscuous mode [ 1556.755380][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.775245][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.785681][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.802351][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.816488][T22750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.834417][ T5783] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1556.846815][ T5783] pwc: recv_control_msg error -32 req 02 val 2700 [ 1556.862714][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.883891][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.908069][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.938885][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.959985][T22750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.004859][T22750] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.044642][T22750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.062313][ T5783] pwc: recv_control_msg error -71 req 04 val 1000 [ 1557.080703][ T5783] pwc: recv_control_msg error -71 req 04 val 1300 [ 1557.087274][T22750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.096781][T22750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.105940][ T5783] pwc: recv_control_msg error -71 req 04 val 1400 [ 1557.124730][T22950] loop4: detected capacity change from 0 to 32768 [ 1557.131728][ T5783] pwc: recv_control_msg error -71 req 02 val 2000 [ 1557.159970][ T5783] pwc: recv_control_msg error -71 req 02 val 2100 [ 1557.172986][T22950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.4202 (22950) [ 1557.190716][ T5783] pwc: recv_control_msg error -71 req 04 val 1500 [ 1557.201388][T22969] loop0: detected capacity change from 0 to 256 [ 1557.228147][ T5783] pwc: recv_control_msg error -71 req 02 val 2500 [ 1557.233090][T22969] exfat: Deprecated parameter 'utf8' [ 1557.284415][ T5783] pwc: recv_control_msg error -71 req 02 val 2400 [ 1557.301753][T22969] exfat: Deprecated parameter 'namecase' [ 1557.311346][ T5783] pwc: recv_control_msg error -71 req 02 val 2600 [ 1557.332655][T22950] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1557.349981][T22969] exfat: Deprecated parameter 'namecase' [ 1557.363972][ T5783] pwc: recv_control_msg error -71 req 02 val 2900 [ 1557.371640][T22950] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1557.399489][ T5783] pwc: recv_control_msg error -71 req 02 val 2800 [ 1557.405358][T22969] exfat: Deprecated parameter 'utf8' [ 1557.408973][T22950] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1557.429010][ T5783] pwc: recv_control_msg error -71 req 04 val 1100 [ 1557.439215][T22950] BTRFS info (device loop4): setting datasum, datacow enabled [ 1557.449620][ T5783] pwc: recv_control_msg error -71 req 04 val 1200 [ 1557.463413][T20348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.476734][T22950] BTRFS info (device loop4): force clearing of disk cache [ 1557.495035][ T5783] pwc: Registered as video103. [ 1557.509555][T20348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.517069][T22950] BTRFS info (device loop4): enabling ssd optimizations [ 1557.527940][ T5783] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1557.547848][T22969] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1557.588220][T22950] BTRFS info (device loop4): using spread ssd allocation scheme [ 1557.595926][T22950] BTRFS info (device loop4): turning on sync discard [ 1557.635727][ T5783] usb 3-1: USB disconnect, device number 32 [ 1557.682739][T22950] BTRFS info (device loop4): turning off barriers [ 1557.691155][T21763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.709997][T22950] BTRFS info (device loop4): enabling auto defrag [ 1557.741625][T21763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.775412][T22950] BTRFS info (device loop4): not using ssd optimizations [ 1557.838270][T22950] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1557.846358][T22950] BTRFS info (device loop4): using free space tree [ 1558.074525][T22994] loop0: detected capacity change from 0 to 136 [ 1558.150061][T22950] BTRFS info (device loop4): rebuilding free space tree [ 1558.222040][T22998] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4171'. [ 1558.315949][ T28] audit: type=1800 audit(1779268518.745:1351): pid=22950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4202" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1558.385770][T22950] BTRFS info (device loop4): balance: start -sconvert=raid0,soft [ 1558.432540][T22950] BTRFS info (device loop4): relocating block group 1048576 flags system [ 1558.503203][T22950] BTRFS info (device loop4): balance: canceled [ 1558.711699][T22046] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1559.222375][T22979] loop2: detected capacity change from 0 to 32768 [ 1559.377808][T22979] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1559.726808][T22979] JBD2: Ignoring recovery information on journal [ 1560.166134][T22994] loop0: detected capacity change from 0 to 32768 [ 1560.278356][T22994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4205 (22994) [ 1560.377768][T22979] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1560.940400][T12276] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1561.178627][T12276] usb 6-1: Using ep0 maxpacket: 8 [ 1561.216753][ T28] audit: type=1804 audit(1779268521.585:1352): pid=23018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4204" name="/newroot/427/file0/bus" dev="loop2" ino=17058 res=1 errno=0 [ 1561.241522][T12276] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1561.295706][T12276] usb 6-1: config 179 has no interface number 0 [ 1561.325837][T12276] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1561.412484][T12276] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1561.528164][T12276] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1561.577878][T12276] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1561.603980][T12276] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1561.650015][T12276] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1561.670912][T12276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.733985][T23015] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1561.757208][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4209'. [ 1562.468460][T12266] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input70 [ 1562.642759][T15106] ocfs2: Unmounting device (7,2) on (node local) [ 1562.736823][T12418] usb 6-1: USB disconnect, device number 2 [ 1562.736827][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1562.736906][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1562.901036][T12418] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1563.140902][T22908] udevd[22908]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1563.178520][T12276] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1563.186540][T22908] udevd[22908]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1563.443390][T12276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.464019][T12276] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1563.498755][T12276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.526130][T12276] usb 1-1: config 0 descriptor?? [ 1563.549102][T12276] pwc: Askey VC010 type 2 USB webcam detected. [ 1563.798104][T12266] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1563.994338][T12276] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1564.028106][T12266] usb 6-1: Using ep0 maxpacket: 16 [ 1564.054263][T12276] pwc: recv_control_msg error -32 req 02 val 2700 [ 1564.073015][T12266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.179172][T12266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.225285][T12266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1564.282309][T12266] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1564.303060][T12266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.316367][T12276] pwc: recv_control_msg error -71 req 04 val 1000 [ 1564.333288][T12276] pwc: recv_control_msg error -71 req 04 val 1300 [ 1564.343121][T12266] usb 6-1: config 0 descriptor?? [ 1564.358557][T12276] pwc: recv_control_msg error -71 req 04 val 1400 [ 1564.374360][T12276] pwc: recv_control_msg error -71 req 02 val 2000 [ 1564.461635][T12276] pwc: recv_control_msg error -71 req 02 val 2100 [ 1564.469084][T12276] pwc: recv_control_msg error -71 req 04 val 1500 [ 1564.487008][T12276] pwc: recv_control_msg error -71 req 02 val 2500 [ 1564.507119][T12276] pwc: recv_control_msg error -71 req 02 val 2400 [ 1564.520004][T12276] pwc: recv_control_msg error -71 req 02 val 2600 [ 1564.527086][T12276] pwc: recv_control_msg error -71 req 02 val 2900 [ 1564.546542][T12276] pwc: recv_control_msg error -71 req 02 val 2800 [ 1564.567419][T12276] pwc: recv_control_msg error -71 req 04 val 1100 [ 1564.589734][T12276] pwc: recv_control_msg error -71 req 04 val 1200 [ 1564.616884][T12276] pwc: Registered as video103. [ 1564.645207][T12276] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input71 [ 1564.704909][T12276] usb 1-1: USB disconnect, device number 52 [ 1565.021616][T12266] usbhid 6-1:0.0: can't add hid device: -71 [ 1565.061144][T12266] usbhid: probe of 6-1:0.0 failed with error -71 [ 1565.106298][T12266] usb 6-1: USB disconnect, device number 3 [ 1565.185148][T23069] loop0: detected capacity change from 0 to 256 [ 1565.569849][T23074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4215'. [ 1569.898353][ T5783] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1570.156296][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.312403][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.538064][ T5783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1570.598082][ T5783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1570.638352][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.678514][ T5783] usb 1-1: config 0 descriptor?? [ 1570.849984][T12418] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1571.068122][T12418] usb 6-1: Using ep0 maxpacket: 8 [ 1571.211837][T12418] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1571.320514][T12418] usb 6-1: config 179 has no interface number 0 [ 1571.409679][T12418] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1571.462488][T23094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.594618][T12418] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1571.610372][T23094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.788012][T12418] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1571.917246][ T5783] usbhid 1-1:0.0: can't add hid device: -71 [ 1571.933107][T12418] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1572.009625][ T5783] usbhid: probe of 1-1:0.0 failed with error -71 [ 1572.086057][T12418] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1572.172059][ T5783] usb 1-1: USB disconnect, device number 53 [ 1572.322268][T12418] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1572.417314][T12418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.434828][T23112] syzkaller0: entered promiscuous mode [ 1572.440547][T23112] syzkaller0: entered allmulticast mode [ 1572.467043][T23104] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1572.793610][ T5783] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input72 [ 1573.047723][ T5783] usb 6-1: USB disconnect, device number 4 [ 1573.047819][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1573.047873][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1573.101350][ T5783] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1573.142681][T12418] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1573.341074][T12418] usb 3-1: Using ep0 maxpacket: 16 [ 1573.368276][T12418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.400371][T12418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.439572][T12418] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1573.463971][T12418] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1573.473703][T12418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.494974][T12418] usb 3-1: config 0 descriptor?? [ 1573.601033][T23118] loop0: detected capacity change from 0 to 32768 [ 1573.802718][T23118] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1573.829749][T23118] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1573.901173][T23137] UBIFS error (pid: 23137): cannot open "ubifs", error -22 [ 1574.569263][T12418] usbhid 3-1:0.0: can't add hid device: -71 [ 1574.588652][T12418] usbhid: probe of 3-1:0.0 failed with error -71 [ 1574.597678][T12418] usb 3-1: USB disconnect, device number 33 [ 1575.095150][T23118] XFS (loop0): Ending clean mount [ 1575.394156][T23118] XFS (loop0): Quotacheck needed: Please wait. [ 1576.790313][ T5783] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1576.853453][ T5783] XFS (loop0): Unmount and run xfs_repair [ 1576.906934][ T5783] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1577.072609][ T5783] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 1577.220934][ T5783] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 1577.232141][ T5783] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1577.488593][ T5783] 00000030: 00 00 00 00 ac 5e af 00 01 00 00 00 00 00 00 13 .....^.......... [ 1577.497588][ T5783] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 1577.510864][ T5783] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1578.768017][ T5783] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1578.791115][ T5783] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1579.178702][ T1324] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1579.209369][T23118] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1579.623937][T14449] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1580.826518][T12418] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1581.030222][T12418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.058649][T12418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.095031][T12418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1581.095098][T12418] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1581.095124][T12418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.103783][T12418] usb 5-1: config 0 descriptor?? [ 1581.236252][T23198] syzkaller0: entered promiscuous mode [ 1581.242365][T23198] syzkaller0: entered allmulticast mode [ 1581.249270][ T5783] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1581.448500][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 1581.456092][ T5783] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1581.465074][ T5783] usb 3-1: config 179 has no interface number 0 [ 1581.472258][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1581.483807][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1581.495527][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1581.507202][ T5783] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1581.528753][ T5783] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1581.543582][ T5783] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1581.560255][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.575523][T23193] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1581.745700][T23186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.755245][T23186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.778358][T12263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1581.958200][T12263] usb 6-1: Using ep0 maxpacket: 16 [ 1581.972965][T12263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.001810][T12263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.031437][T12263] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1582.056684][T12263] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1582.076982][T12263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.096582][T12263] usb 6-1: config 0 descriptor?? [ 1582.184711][T12264] usb 3-1: USB disconnect, device number 34 [ 1582.184714][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1582.184815][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1583.006386][T12263] usbhid 6-1:0.0: can't add hid device: -71 [ 1583.039844][T12263] usbhid: probe of 6-1:0.0 failed with error -71 [ 1583.045660][ T5783] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1583.236023][T12418] usbhid 5-1:0.0: can't add hid device: -71 [ 1583.248225][T12418] usbhid: probe of 5-1:0.0 failed with error -71 [ 1583.808453][T12263] usb 6-1: USB disconnect, device number 5 [ 1584.235957][ T5783] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input73 [ 1584.246734][T12418] usb 5-1: USB disconnect, device number 6 [ 1584.876164][T12264] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1585.428043][T12418] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1585.658058][T12418] usb 5-1: Using ep0 maxpacket: 8 [ 1585.670095][T12418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1585.692938][T12418] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1585.727244][T12418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.760451][T12418] usb 5-1: config 0 descriptor?? [ 1586.028935][T12418] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1586.162148][T23242] syzkaller0: entered promiscuous mode [ 1586.167691][T23242] syzkaller0: entered allmulticast mode [ 1586.191841][T23215] loop2: detected capacity change from 0 to 32768 [ 1586.251193][T23215] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1586.261208][T23215] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1586.437505][T23215] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1586.489750][T12418] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1586.508319][T12418] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1586.628440][ T5828] usb 5-1: USB disconnect, device number 7 [ 1586.762332][T12418] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 254ms [ 1586.796136][T12418] gfs2: fsid=syz:syz.0: jid=0: Done [ 1586.810989][T23215] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1587.481790][T23251] loop5: detected capacity change from 0 to 32768 [ 1587.548550][T23251] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1587.578483][T23251] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1587.623283][T23251] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1587.648441][T23251] BTRFS info (device loop5): enabling auto defrag [ 1587.655509][T23251] BTRFS info (device loop5): max_inline at 0 [ 1587.712246][T23251] BTRFS info (device loop5): using free space tree [ 1588.573609][T23251] BTRFS info (device loop5): auto enabling async discard [ 1589.278439][T22750] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1589.834558][T23290] loop4: detected capacity change from 0 to 32768 [ 1589.879044][T23290] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.4251 (23290) [ 1590.898030][T12263] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1590.918310][T23290] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1590.958245][T23290] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1590.994907][T23290] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1591.048283][T23290] BTRFS info (device loop4): setting datasum, datacow enabled [ 1591.082301][T23290] BTRFS info (device loop4): force clearing of disk cache [ 1591.125220][T23290] BTRFS info (device loop4): enabling ssd optimizations [ 1591.177129][T23290] BTRFS info (device loop4): using spread ssd allocation scheme [ 1591.247833][T23290] BTRFS info (device loop4): turning on sync discard [ 1591.300327][T23290] BTRFS info (device loop4): turning off barriers [ 1591.306846][T23290] BTRFS info (device loop4): enabling auto defrag [ 1591.378868][T23290] BTRFS info (device loop4): not using ssd optimizations [ 1591.447737][T23290] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1591.497115][T23290] BTRFS info (device loop4): using free space tree [ 1591.737762][T23290] BTRFS info (device loop4): rebuilding free space tree [ 1591.943175][T12263] usb 6-1: Using ep0 maxpacket: 16 [ 1591.993711][T22046] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1592.090208][T12263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.108004][T12263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.117781][T12263] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1592.185396][T12263] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1592.226553][T23336] loop2: detected capacity change from 0 to 512 [ 1592.233343][T12263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.279532][T12263] usb 6-1: config 0 descriptor?? [ 1592.461723][T23336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.538221][T23336] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.127555][T12263] usbhid 6-1:0.0: can't add hid device: -71 [ 1593.223825][T12263] usbhid: probe of 6-1:0.0 failed with error -71 [ 1593.669270][T23342] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1593.679554][T12263] usb 6-1: USB disconnect, device number 6 [ 1593.693389][T23348] xt_CT: No such helper "syz0" [ 1594.019446][T15106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.074053][T23377] loop4: detected capacity change from 0 to 32768 [ 1596.172667][T23377] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4260 (23377) [ 1596.205454][T23377] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1596.215758][T23377] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1596.224441][T23377] BTRFS info (device loop4): turning on async discard [ 1596.231297][T23377] BTRFS info (device loop4): metadata ratio 0 [ 1596.237403][T23377] BTRFS info (device loop4): setting nodatasum [ 1596.243632][T23377] BTRFS info (device loop4): using free space tree [ 1597.114624][T23377] BTRFS info (device loop4): enabling ssd optimizations [ 1598.936624][T22046] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1599.219556][T12687] Bluetooth: hci2: command 0x0406 tx timeout [ 1599.972663][ T28] audit: type=1326 audit(1779268560.385:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.089181][ T28] audit: type=1326 audit(1779268560.405:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.181286][ T28] audit: type=1326 audit(1779268560.405:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.278171][T12418] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1600.292201][ T28] audit: type=1326 audit(1779268560.405:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.400661][ T28] audit: type=1326 audit(1779268560.455:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.504620][T23232] net_ratelimit: 10 callbacks suppressed [ 1600.504635][T23232] Set syz1 is full, maxelem 65536 reached [ 1600.527650][T12418] usb 6-1: config 0 has no interfaces? [ 1600.533709][ T28] audit: type=1326 audit(1779268560.455:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.538457][T12418] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1600.630319][ T28] audit: type=1326 audit(1779268560.455:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.688091][T12418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.748122][ T28] audit: type=1326 audit(1779268560.455:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1600.789648][T12418] usb 6-1: config 0 descriptor?? [ 1600.921409][ T28] audit: type=1326 audit(1779268560.455:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1601.019451][T23420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.104686][ T28] audit: type=1326 audit(1779268560.455:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23417 comm="syz.2.4266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b959ce59 code=0x7ffc0000 [ 1601.149642][T23420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.476883][T12276] usb 6-1: USB disconnect, device number 7 [ 1602.644364][T12276] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1602.774233][T23448] hub 8-0:1.0: USB hub found [ 1602.784649][T23448] hub 8-0:1.0: 1 port detected [ 1602.964045][T12418] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1603.287297][T12418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.591977][T12418] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1603.608038][T12418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.628663][T12418] usb 3-1: config 0 descriptor?? [ 1603.687895][T12418] pwc: Askey VC010 type 2 USB webcam detected. [ 1603.907919][T12687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1603.919610][T12687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1603.930350][T12687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1603.940865][T12687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1603.952374][T12687] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1603.959958][T12687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1604.044595][T12418] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1604.346914][T23458] lo speed is unknown, defaulting to 1000 [ 1604.398600][T12276] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1604.454654][T12418] pwc: recv_control_msg error -71 req 04 val 1000 [ 1604.472437][T12418] pwc: recv_control_msg error -71 req 04 val 1300 [ 1604.492356][T12418] pwc: recv_control_msg error -71 req 04 val 1400 [ 1604.512455][T12418] pwc: recv_control_msg error -71 req 02 val 2000 [ 1604.528670][T12418] pwc: recv_control_msg error -71 req 02 val 2100 [ 1604.545983][T12418] pwc: recv_control_msg error -71 req 04 val 1500 [ 1604.556140][T12418] pwc: recv_control_msg error -71 req 02 val 2500 [ 1604.569362][T12418] pwc: recv_control_msg error -71 req 02 val 2400 [ 1604.576521][T12418] pwc: recv_control_msg error -71 req 02 val 2600 [ 1604.586263][T12418] pwc: recv_control_msg error -71 req 02 val 2900 [ 1604.598431][T12418] pwc: recv_control_msg error -71 req 02 val 2800 [ 1604.609831][T12418] pwc: recv_control_msg error -71 req 04 val 1100 [ 1604.617022][T12418] pwc: recv_control_msg error -71 req 04 val 1200 [ 1604.624859][T12276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1604.631091][T12418] pwc: Registered as video103. [ 1604.648532][T12418] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74 [ 1604.694682][T12276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.747877][T12276] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1604.757585][T12418] usb 3-1: USB disconnect, device number 35 [ 1604.778400][T12276] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1604.814784][T12276] usb 6-1: Manufacturer: syz [ 1604.830880][T12276] usb 6-1: config 0 descriptor?? [ 1605.046819][T23453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.082545][T23458] chnl_net:caif_netlink_parms(): no params data found [ 1605.098432][T23453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.507592][T12276] cougar 0003:060B:700A.001B: unknown main item tag 0x0 [ 1605.532871][T12276] cougar 0003:060B:700A.001B: unknown main item tag 0x0 [ 1605.833614][T12276] cougar 0003:060B:700A.001B: unknown main item tag 0x0 [ 1606.040431][T12687] Bluetooth: hci3: command tx timeout [ 1606.221905][T12276] cougar 0003:060B:700A.001B: unknown main item tag 0x0 [ 1606.268247][T12276] cougar 0003:060B:700A.001B: unknown main item tag 0x0 [ 1606.408476][T12276] cougar 0003:060B:700A.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1606.509596][T12276] usb 6-1: USB disconnect, device number 9 [ 1606.517035][T20348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.657053][T23458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.718744][T23458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.768283][T23458] bridge_slave_0: entered allmulticast mode [ 1606.812398][T23458] bridge_slave_0: entered promiscuous mode [ 1606.875652][T23458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.938107][T23458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.981229][T23458] bridge_slave_1: entered allmulticast mode [ 1607.035030][T23458] bridge_slave_1: entered promiscuous mode [ 1607.111747][T23494] fido_id[23494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1607.262784][T20348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.410408][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.416871][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.457024][T23458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.613695][T23502] loop5: detected capacity change from 0 to 256 [ 1607.951146][T20348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.079254][T12687] Bluetooth: hci3: command tx timeout [ 1608.807779][T23458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.345538][T23516] loop2: detected capacity change from 0 to 2048 [ 1609.383015][T20348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.508323][T12418] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1609.527352][T23458] team0: Port device team_slave_0 added [ 1609.551147][T23458] team0: Port device team_slave_1 added [ 1609.669349][T23458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.677438][T23458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.705885][T23458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.711774][T12266] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1609.726067][T23458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.737460][T12418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.749105][T23458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.775830][T12418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.797288][T12418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1609.810845][T12418] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1609.820089][T23458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.831183][T12418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.864133][T12418] usb 6-1: config 0 descriptor?? [ 1609.938172][ T5783] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1609.949403][T12266] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1609.973441][T12266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.003995][T12266] usb 5-1: Product: syz [ 1610.036109][T12266] usb 5-1: Manufacturer: syz [ 1610.042951][T12266] usb 5-1: SerialNumber: syz [ 1610.095334][T23458] hsr_slave_0: entered promiscuous mode [ 1610.102061][T23458] hsr_slave_1: entered promiscuous mode [ 1610.109665][T23458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.117292][T23458] Cannot create hsr debugfs directory [ 1610.141120][ T5783] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1610.157069][ T5783] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1610.167483][ T5783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1610.168822][T12687] Bluetooth: hci3: command tx timeout [ 1610.193852][ T5783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1610.215559][ T5783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1610.230264][ T5783] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1610.241747][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1610.252657][ T5783] usb 3-1: Product: syz [ 1610.256914][ T5783] usb 3-1: Manufacturer: syz [ 1610.311303][ T5783] cdc_wdm 3-1:1.0: skipping garbage [ 1610.316575][ T5783] cdc_wdm 3-1:1.0: skipping garbage [ 1610.343009][ T5783] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1610.352625][ T5783] cdc_wdm 3-1:1.0: Unknown control protocol [ 1610.398757][T20348] tipc: Left network mode [ 1610.491227][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1610.511090][T23514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.542032][T23514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.564379][T12418] usbhid 6-1:0.0: can't add hid device: -71 [ 1610.583157][T12418] usbhid: probe of 6-1:0.0 failed with error -71 [ 1610.611503][T12418] usb 6-1: USB disconnect, device number 10 [ 1610.706113][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1610.708608][ T5783] usb 3-1: USB disconnect, device number 36 [ 1610.713399][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1610.724758][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1611.107443][T23458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1611.125211][T23458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1611.137122][T23458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1611.177816][T23458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1611.526278][T23458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1611.547130][T23458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1611.642760][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.650051][T17670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1611.703246][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.710534][T17670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.240227][T12687] Bluetooth: hci3: command tx timeout [ 1612.590153][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 1612.614694][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1612.655026][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1612.688690][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1612.718437][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1612.732209][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1612.764818][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1612.801511][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1612.824294][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1612.858092][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1612.879074][T12266] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1612.944587][T12266] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1613.580593][T12266] usb 5-1: USB disconnect, device number 8 [ 1614.163948][T23548] loop5: detected capacity change from 0 to 32768 [ 1614.295700][T20348] hsr_slave_0: left promiscuous mode [ 1614.400229][T20348] hsr_slave_1: left promiscuous mode [ 1614.433648][T20348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.484026][T20348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.502682][T20348] bridge_slave_1: left allmulticast mode [ 1614.508724][T20348] bridge_slave_1: left promiscuous mode [ 1614.528398][T12266] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1614.592071][T20348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.695046][T20348] bridge_slave_0: left allmulticast mode [ 1614.733419][T20348] bridge_slave_0: left promiscuous mode [ 1614.758570][T12266] usb 5-1: Using ep0 maxpacket: 16 [ 1614.769449][T20348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.817819][T12266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.863246][T12266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.922854][T12266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1615.011158][T12266] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1615.078142][T12266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.159192][T12266] usb 5-1: config 0 descriptor?? [ 1615.837858][T12266] usbhid 5-1:0.0: can't add hid device: -71 [ 1615.844094][T12266] usbhid: probe of 5-1:0.0 failed with error -71 [ 1615.869071][T12266] usb 5-1: USB disconnect, device number 9 [ 1616.003882][T20348] bond3 (unregistering): Released all slaves [ 1616.087498][T23573] loop5: detected capacity change from 0 to 32768 [ 1616.108577][T23573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.4287 (23573) [ 1616.186846][T23573] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1616.216365][T23573] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1616.229703][T23573] BTRFS info (device loop5): setting nodatasum [ 1616.235928][T23573] BTRFS info (device loop5): force zlib compression, level 3 [ 1616.244988][T23573] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1616.272314][T23573] BTRFS info (device loop5): use lzo compression, level 0 [ 1616.291521][T23573] BTRFS info (device loop5): turning on flush-on-commit [ 1616.308797][T23573] BTRFS info (device loop5): enabling auto defrag [ 1616.318941][T23573] BTRFS info (device loop5): max_inline at 4096 [ 1616.325333][T23573] BTRFS info (device loop5): using free space tree [ 1616.558372][T23573] BTRFS info (device loop5): enabling ssd optimizations [ 1616.607868][T20348] bond2 (unregistering): Released all slaves [ 1616.716909][T23603] loop4: detected capacity change from 0 to 2048 [ 1616.732103][T23603] ext4: Unknown parameter 'fowner' [ 1616.738683][T20348] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1616.832425][T22750] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1619.405540][T20348] bond1 (unregistering): Released all slaves [ 1619.439630][T23611] loop5: detected capacity change from 0 to 2048 [ 1619.543667][T23611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.485382][T12295] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1620.522194][T12295] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 146 with error 28 [ 1620.537373][T12295] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1620.537373][T12295] [ 1620.552133][T12295] EXT4-fs (loop5): Total free blocks count 0 [ 1620.565607][T12295] EXT4-fs (loop5): Free/Dirty block details [ 1620.591092][T12295] EXT4-fs (loop5): free_blocks=4096 [ 1620.596475][T12295] EXT4-fs (loop5): dirty_blocks=160 [ 1620.601940][T12295] EXT4-fs (loop5): Block reservation details [ 1620.608067][T12295] EXT4-fs (loop5): i_reserved_data_blocks=10 [ 1620.634643][T12295] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 1621.080041][ T5828] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1621.218490][T20348] team0 (unregistering): Port device team_slave_1 removed [ 1621.275846][T20348] team0 (unregistering): Port device C removed [ 1621.275842][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1621.275875][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.306294][ T5828] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1621.327242][ T5828] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1621.335448][ T5828] usb 6-1: Manufacturer: syz [ 1621.350678][ T5828] usb 6-1: config 0 descriptor?? [ 1621.387336][T20348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.462464][T20348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.586078][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.608430][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.826462][ T5828] cougar 0003:060B:700A.001C: unknown main item tag 0x0 [ 1621.846248][ T5828] cougar 0003:060B:700A.001C: unknown main item tag 0x0 [ 1621.853476][ T5828] cougar 0003:060B:700A.001C: unknown main item tag 0x0 [ 1621.870592][ T5828] cougar 0003:060B:700A.001C: unknown main item tag 0x0 [ 1621.877706][ T5828] cougar 0003:060B:700A.001C: unknown main item tag 0x0 [ 1621.919173][ T5828] cougar 0003:060B:700A.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1622.041670][ T5828] usb 6-1: USB disconnect, device number 11 [ 1622.126673][T20348] bond0 (unregistering): Released all slaves [ 1622.597911][T23458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1623.000456][T23641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4297'. [ 1623.203525][ T5828] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1623.374956][T23645] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1623.441206][T23645] overlayfs: failed to look up (tracing) for ino (-66) [ 1623.459276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.501276][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 1623.513128][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.544879][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.571542][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1623.617324][ T5828] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1623.646882][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.679697][ T5828] usb 3-1: config 0 descriptor?? [ 1624.046773][T23458] veth0_vlan: entered promiscuous mode [ 1624.104260][T23458] veth1_vlan: entered promiscuous mode [ 1624.151329][ T5828] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input75 [ 1624.610461][T23458] veth0_macvtap: entered promiscuous mode [ 1625.106303][T23458] veth1_macvtap: entered promiscuous mode [ 1625.230893][T23458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.291021][T23458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.350261][T23458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.374421][ T5828] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1625.390663][ T5828] usb 3-1: USB disconnect, device number 37 [ 1625.398265][T23458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.409171][T23458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.438211][T23458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.469786][T23458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.493610][T23458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.526859][T23458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.626400][T23458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.666883][T23458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.792606][T23458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.803554][T23458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.119440][T23458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.614934][T23458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.655676][T23666] fido_id[23666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1626.700529][T23458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.716789][T23458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.725892][T23458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.936058][T20348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.957761][T20348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.998902][T12266] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1627.012315][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.035561][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.218045][T12266] usb 5-1: Using ep0 maxpacket: 16 [ 1627.227126][T12266] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1627.247098][T12266] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1627.265507][T12266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.328551][T12266] usb 5-1: Product: syz [ 1627.383013][T12266] usb 5-1: Manufacturer: syz [ 1627.443146][T12266] usb 5-1: SerialNumber: syz [ 1627.610479][T12266] usb 5-1: config 0 descriptor?? [ 1628.889012][ T5724] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1629.090330][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1629.118757][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.179696][ T5724] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1629.203988][ T5724] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1629.218302][ T5724] usb 7-1: Manufacturer: syz [ 1629.980593][T12264] usb 5-1: USB disconnect, device number 10 [ 1630.249233][ T5724] usb 7-1: config 0 descriptor?? [ 1630.512861][T23697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.564726][T23697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.140113][ T5724] cougar 0003:060B:700A.001E: unknown main item tag 0x0 [ 1631.147109][ T5724] cougar 0003:060B:700A.001E: unknown main item tag 0x0 [ 1631.155360][ T5724] cougar 0003:060B:700A.001E: unknown main item tag 0x0 [ 1631.162893][ T5724] cougar 0003:060B:700A.001E: unknown main item tag 0x0 [ 1631.170653][ T5724] cougar 0003:060B:700A.001E: unknown main item tag 0x0 [ 1631.210559][ T5724] cougar 0003:060B:700A.001E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1631.370097][T12263] usb 7-1: USB disconnect, device number 2 [ 1631.608137][T23732] fido_id[23732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1631.731536][T12264] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1631.938058][T12264] usb 6-1: Using ep0 maxpacket: 16 [ 1631.965224][T12264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.987542][T12264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.025671][T12264] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1632.058025][T12264] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1632.089574][T12264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.138314][T12264] usb 6-1: config 0 descriptor?? [ 1632.418042][ T5724] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1632.645557][T12264] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001F/input/input76 [ 1632.667662][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.706699][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.735376][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1632.803046][ T5724] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1632.820282][T12264] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1632.828311][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.891449][T12264] usb 6-1: USB disconnect, device number 12 [ 1632.902111][ T5724] usb 7-1: config 0 descriptor?? [ 1633.176551][T23746] fido_id[23746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1633.378065][T12266] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1633.527450][T23738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.567484][T23738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.625794][ T5724] usbhid 7-1:0.0: can't add hid device: -71 [ 1633.648079][ T5724] usbhid: probe of 7-1:0.0 failed with error -71 [ 1633.715709][ T5724] usb 7-1: USB disconnect, device number 3 [ 1633.788169][T12266] usb 5-1: config 0 has no interfaces? [ 1633.794299][T12266] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1634.103260][T12266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.779519][T12266] usb 5-1: config 0 descriptor?? [ 1635.037670][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.096836][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.194669][T12266] usb 5-1: USB disconnect, device number 11 [ 1635.417536][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4312'. [ 1635.767123][T12266] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1635.931517][T23772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4313'. [ 1636.012685][T12266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024 [ 1636.062499][T12266] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1636.087637][T12266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.120622][T12266] usb 5-1: config 0 descriptor?? [ 1636.299906][T23780] fuse: Bad value for 'fd' [ 1636.562798][T12266] usbhid 5-1:0.0: can't add hid device: -71 [ 1636.572708][T12266] usbhid: probe of 5-1:0.0 failed with error -71 [ 1636.582260][T12266] usb 5-1: USB disconnect, device number 12 [ 1638.498056][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1638.720525][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1638.729999][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.754666][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.781965][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1638.805971][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1638.817090][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.830152][ T23] usb 6-1: config 0 descriptor?? [ 1638.836010][T23806] syzkaller0: entered promiscuous mode [ 1638.856302][T23806] syzkaller0: entered allmulticast mode [ 1638.998828][T23793] loop4: detected capacity change from 0 to 32768 [ 1639.012330][T23793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4318 (23793) [ 1639.055296][T23793] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1639.100377][T23793] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1639.136650][T23793] BTRFS info (device loop4): using free space tree [ 1639.286984][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0020/input/input77 [ 1639.325377][T23793] BTRFS info (device loop4): enabling ssd optimizations [ 1639.355724][T23793] BTRFS info (device loop4): auto enabling async discard [ 1639.389629][ T23] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1639.511557][T12264] usb 6-1: USB disconnect, device number 13 [ 1639.661377][T23830] fido_id[23830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1639.676033][T22046] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1640.400735][T12264] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1640.721373][T12264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.991679][T12264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.071523][T12264] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1641.159361][T12264] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1641.228193][T12264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.289714][T12264] usb 7-1: config 0 descriptor?? [ 1641.910463][T23835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.128612][T23835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.205569][T12264] usbhid 7-1:0.0: can't add hid device: -71 [ 1643.051494][T12264] usbhid: probe of 7-1:0.0 failed with error -71 [ 1645.513856][T12264] usb 7-1: USB disconnect, device number 4 [ 1649.725106][T23878] fuse: Bad value for 'fd' [ 1649.752361][T23880] loop6: detected capacity change from 0 to 8 [ 1649.786959][T23874] syzkaller0: entered promiscuous mode [ 1649.800477][T23874] syzkaller0: entered allmulticast mode [ 1651.248091][T10320] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1651.378131][T12264] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1651.458579][T10320] usb 3-1: Using ep0 maxpacket: 16 [ 1651.476815][T10320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.496444][T10320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.507208][T10320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1651.527071][T10320] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1651.546883][T10320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.675144][T10320] usb 3-1: config 0 descriptor?? [ 1652.246400][T10320] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0021/input/input78 [ 1652.340439][T12264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.355287][T12264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.365228][T12264] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1652.380070][T12264] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1652.391902][T12264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.409871][T10320] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1652.422581][T12264] usb 5-1: config 0 descriptor?? [ 1652.511624][T10320] usb 3-1: USB disconnect, device number 38 [ 1652.624385][T23905] fido_id[23905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1652.808884][T12263] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1652.852019][T12264] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 1652.885531][T12264] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1653.009926][T12263] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.026309][T12263] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.057498][T12263] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1653.121880][T12263] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1653.287256][T12263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.320349][T12263] usb 7-1: config 0 descriptor?? [ 1653.444025][T12264] usb 5-1: USB disconnect, device number 13 [ 1654.447136][T23907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.776945][T23907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.100976][T12263] usbhid 7-1:0.0: can't add hid device: -71 [ 1655.236065][T12263] usbhid: probe of 7-1:0.0 failed with error -71 [ 1655.568586][T12263] usb 7-1: USB disconnect, device number 5 [ 1660.411071][T23943] syzkaller0: entered promiscuous mode [ 1660.416772][T23943] syzkaller0: entered allmulticast mode [ 1662.058093][ T5724] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1662.271122][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 1662.282653][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.314066][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.348009][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1662.386683][ T5724] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1662.413718][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.440732][ T5724] usb 5-1: config 0 descriptor?? [ 1662.915322][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0023/input/input79 [ 1663.038062][T12263] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1663.052409][ T5724] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1663.107846][ T5724] usb 5-1: USB disconnect, device number 14 [ 1663.239251][T23985] fido_id[23985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1663.269134][T12263] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.279975][ T23] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1663.300254][T12263] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1663.328009][T12263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.349910][T12263] usb 6-1: config 0 descriptor?? [ 1663.377569][T12263] pwc: Askey VC010 type 2 USB webcam detected. [ 1663.488696][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1663.496730][ T23] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1663.507193][ T23] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1663.537659][ T23] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1663.558102][ T23] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1663.583996][ T23] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1663.617431][ T23] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1663.647235][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.775706][T12263] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1663.894618][ T23] usb 7-1: GET_CAPABILITIES returned 0 [ 1663.905843][ T23] usbtmc 7-1:16.0: can't read capabilities [ 1664.115404][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1664.125079][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1664.134223][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1664.149231][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1664.158414][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1664.171554][T10320] usb 7-1: USB disconnect, device number 6 [ 1664.205223][T12263] pwc: recv_control_msg error -71 req 04 val 1000 [ 1664.228150][T12263] pwc: recv_control_msg error -71 req 04 val 1300 [ 1664.236578][T12263] pwc: recv_control_msg error -71 req 04 val 1400 [ 1664.239216][ T5724] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1664.252883][T12263] pwc: recv_control_msg error -71 req 02 val 2000 [ 1664.265421][T12263] pwc: recv_control_msg error -71 req 02 val 2100 [ 1664.273719][T12263] pwc: recv_control_msg error -71 req 04 val 1500 [ 1664.284155][T12263] pwc: recv_control_msg error -71 req 02 val 2500 [ 1664.294630][T12263] pwc: recv_control_msg error -71 req 02 val 2400 [ 1664.305253][T12263] pwc: recv_control_msg error -71 req 02 val 2600 [ 1664.313423][T12263] pwc: recv_control_msg error -71 req 02 val 2900 [ 1664.323758][T12263] pwc: recv_control_msg error -71 req 02 val 2800 [ 1664.335336][T12263] pwc: recv_control_msg error -71 req 04 val 1100 [ 1664.346428][T12263] pwc: recv_control_msg error -71 req 04 val 1200 [ 1664.354799][T12263] pwc: Registered as video103. [ 1664.366252][T12263] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 1664.385515][T12263] usb 6-1: USB disconnect, device number 14 [ 1664.440355][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 1664.457731][ T5724] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1664.478244][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.507043][ T5724] usb 5-1: config 0 descriptor?? [ 1664.724594][ T5724] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1664.744602][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1664.775242][ T5724] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1664.793490][ T5724] usb 5-1: media controller created [ 1664.840094][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1664.895426][T24003] loop2: detected capacity change from 0 to 512 [ 1664.928038][T24003] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1664.941104][T24005] syzkaller0: entered promiscuous mode [ 1664.946660][T24005] syzkaller0: entered allmulticast mode [ 1664.993480][T24003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1665.022647][T24003] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 1665.033123][T23997] loop4: detected capacity change from 0 to 1024 [ 1665.076934][T23997] hfsplus: invalid btree flag [ 1665.128335][T23997] hfsplus: failed to load catalog file [ 1665.193262][ T5724] az6027: usb out operation failed. (-71) [ 1665.239689][ T5724] az6027: usb out operation failed. (-71) [ 1665.245479][ T5724] stb0899_attach: Driver disabled by Kconfig [ 1665.273755][ T5724] az6027: no front-end attached [ 1665.273755][ T5724] [ 1665.305158][ T5724] az6027: usb out operation failed. (-71) [ 1665.331868][ T5724] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1665.373151][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input81 [ 1665.395462][ T5724] dvb-usb: schedule remote query interval to 400 msecs. [ 1665.402635][ T5724] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1665.432590][ T5724] usb 5-1: USB disconnect, device number 15 [ 1665.938950][ T5724] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1666.016126][T12263] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1666.234453][T12263] usb 7-1: config 0 has no interfaces? [ 1666.269724][T12263] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1666.360764][T12263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.586397][T12263] usb 7-1: config 0 descriptor?? [ 1666.948346][T24007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.018768][T24007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.070220][ T5828] usb 7-1: USB disconnect, device number 7 [ 1667.430833][T24021] loop4: detected capacity change from 0 to 8 [ 1667.448499][T24021] squashfs: Unknown parameter '#! [ 1667.448499][T24021] Ó ' [ 1667.494008][T22919] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1667.595385][T24021] kvm: kvm [24020]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1667.608126][T10320] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1667.628072][ T5828] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1667.823356][T10320] usb 6-1: Using ep0 maxpacket: 16 [ 1667.834373][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024 [ 1668.781356][ T5828] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1668.790692][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.813126][T10320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.814598][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.828201][T10320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.843256][T10320] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1668.856136][T10320] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1668.858695][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.868288][T10320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.880928][ T5828] usb 7-1: config 0 descriptor?? [ 1668.886431][ T5828] usb 7-1: can't set config #0, error -71 [ 1668.911307][T10320] usb 6-1: config 0 descriptor?? [ 1668.938826][ T5828] usb 7-1: USB disconnect, device number 8 [ 1669.052507][T24049] loop6: detected capacity change from 0 to 1024 [ 1669.305132][T24052] syzkaller0: entered promiscuous mode [ 1669.331280][T24052] syzkaller0: entered allmulticast mode [ 1669.399284][T10320] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0024/input/input82 [ 1669.508591][T10320] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1669.628601][T10320] usb 6-1: USB disconnect, device number 15 [ 1669.795069][T24060] fido_id[24060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1670.257151][T24056] loop4: detected capacity change from 0 to 32768 [ 1670.320048][T24056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4363 (24056) [ 1670.334315][T24075] loop5: detected capacity change from 0 to 512 [ 1670.391067][T24056] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1670.417423][T24075] EXT4-fs: Mount option(s) incompatible with ext3 [ 1670.436331][T24056] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1670.470893][T24056] BTRFS info (device loop4): force clearing of disk cache [ 1670.498047][T24056] BTRFS info (device loop4): metadata ratio 0 [ 1670.521653][T24056] BTRFS info (device loop4): enabling ssd optimizations [ 1670.553494][T24056] BTRFS info (device loop4): using spread ssd allocation scheme [ 1670.582980][T24056] BTRFS info (device loop4): using free space tree [ 1671.029910][ T1324] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.366554][T24056] BTRFS info (device loop4): auto enabling async discard [ 1671.390421][T24056] BTRFS info (device loop4): rebuilding free space tree [ 1671.512137][ T1324] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.744892][ T1324] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.957793][ T1324] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.605206][ T5081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1674.619363][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1674.627712][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1674.640862][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1674.649510][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1674.656883][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1675.558124][T24110] BTRFS info (device loop4): balance: start -d -m [ 1675.848718][T24110] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 1676.321478][T24110] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 1676.331291][T24124] syzkaller0: entered promiscuous mode [ 1676.351061][ T35] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1676.365561][T24124] syzkaller0: entered allmulticast mode [ 1676.489803][T24110] BTRFS info (device loop4): balance: canceled [ 1676.656886][ T5081] Bluetooth: hci0: command 0x0406 tx timeout [ 1676.786222][T22046] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1676.803981][T22050] Bluetooth: hci3: command tx timeout [ 1676.978468][ T5828] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1677.178746][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 1677.206020][ T5828] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1677.215013][ T5828] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.232878][ T5828] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1677.243618][ T5828] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.260561][ T5828] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.307535][ T5828] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1677.332875][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.008025][ T5828] usb 6-1: usb_control_msg returned -32 [ 1678.014076][ T5828] usbtmc 6-1:16.0: can't read capabilities [ 1678.122864][T24148] loop4: detected capacity change from 0 to 512 [ 1678.131569][T24148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1678.196138][T24148] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.4378: iget: bad i_size value: 38620345925642 [ 1678.225266][T24148] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.4378: couldn't read orphan inode 15 (err -117) [ 1678.241420][T24148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1678.276064][T24148] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.4378: bg 0: block 5: invalid block bitmap [ 1678.402408][T24148] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1678.416845][T24148] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1678.416845][T24148] [ 1678.434966][T24148] EXT4-fs (loop4): Total free blocks count 0 [ 1678.441852][T24148] EXT4-fs (loop4): Free/Dirty block details [ 1678.447851][T24148] EXT4-fs (loop4): free_blocks=0 [ 1678.462621][T24148] EXT4-fs (loop4): dirty_blocks=1 [ 1678.468387][T24148] EXT4-fs (loop4): Block reservation details [ 1678.477382][T24148] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1678.510591][T24148] EXT4-fs (loop4): shut down requested (0) [ 1678.888561][T22050] Bluetooth: hci3: command tx timeout [ 1679.774331][ T23] usb 6-1: USB disconnect, device number 16 [ 1679.875257][T24158] loop5: detected capacity change from 0 to 512 [ 1680.097486][T24158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1680.218303][T24158] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1680.958109][T22050] Bluetooth: hci3: command tx timeout [ 1681.065731][T22750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1681.504284][T24166] loop4: detected capacity change from 0 to 32768 [ 1681.584873][T24166] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1681.738025][T24166] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1681.788164][T24166] XFS (loop4): Starting recovery (logdev: internal) [ 1681.836994][T24166] XFS (loop4): Ending recovery (logdev: internal) [ 1681.918809][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1681.918826][ T28] audit: type=1800 audit(1779268642.345:1388): pid=24166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4383" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 1682.010485][T24177] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x44b/0x650, xfs_bnobt block 0x8 [ 1682.022933][T24177] XFS (loop4): Unmount and run xfs_repair [ 1682.241957][T24177] XFS (loop4): Internal error ltbno + ltlen > bno at line 1957 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_free_ag_extent+0xe6f/0x1390 [ 1682.290226][T24177] CPU: 1 PID: 24177 Comm: syz.4.4383 Not tainted syzkaller #0 [ 1682.297799][T24177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1682.307904][T24177] Call Trace: [ 1682.311230][T24177] [ 1682.314208][T24177] dump_stack_lvl+0x18c/0x250 [ 1682.318973][T24177] ? __xfs_printk+0x90/0x90 [ 1682.323530][T24177] ? show_regs_print_info+0x20/0x20 [ 1682.328776][T24177] ? xfs_alloc_check_irec+0x10b/0x1c0 [ 1682.334217][T24177] ? xfs_alloc_get_rec+0x299/0x3b0 [ 1682.339385][T24177] xfs_corruption_error+0x122/0x170 [ 1682.344632][T24177] ? xfs_free_ag_extent+0xe6f/0x1390 [ 1682.349963][T24177] xfs_free_ag_extent+0xead/0x1390 [ 1682.355120][T24177] ? xfs_free_ag_extent+0xe6f/0x1390 [ 1682.360460][T24177] ? xfs_free_agfl_block+0x350/0x350 [ 1682.365812][T24177] __xfs_free_extent+0x358/0x4d0 [ 1682.370787][T24177] ? kmem_cache_free+0xf8/0x270 [ 1682.375688][T24177] ? xfs_extent_free_finish_item+0x9e/0xb0 [ 1682.381565][T24177] ? xfs_free_extent_fix_freelist+0x280/0x280 [ 1682.387698][T24177] ? mark_lock+0x94/0x320 [ 1682.392083][T24177] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1682.398123][T24177] xfs_trans_free_extent+0x395/0x940 [ 1682.403473][T24177] ? xfs_efi_item_free+0xb0/0xb0 [ 1682.408461][T24177] ? xfs_extent_free_finish_item+0x9e/0xb0 [ 1682.414325][T24177] xfs_extent_free_finish_item+0x26/0xb0 [ 1682.420013][T24177] ? xfs_extent_free_create_done+0x150/0x150 [ 1682.426048][T24177] xfs_defer_finish_noroll+0xf65/0x1e00 [ 1682.431703][T24177] ? xfs_defer_finish+0x1c/0x180 [ 1682.436711][T24177] ? xfs_da3_node_add+0xaa0/0xaa0 [ 1682.441792][T24177] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 1682.447642][T24177] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1682.453930][T24177] ? ktime_get_real_ts64+0x440/0x440 [ 1682.459268][T24177] ? __might_sleep+0xe0/0xe0 [ 1682.463942][T24177] xfs_defer_finish+0x1c/0x180 [ 1682.468761][T24177] xfs_itruncate_extents_flags+0x2bc/0x8c0 [ 1682.474634][T24177] ? xfs_iunlink_remove+0x7e0/0x7e0 [ 1682.479884][T24177] ? inode_set_ctime_current+0x2e0/0x2e0 [ 1682.485576][T24177] ? xfs_trans_log_inode+0x11f/0x190 [ 1682.490928][T24177] xfs_setattr_size+0x6c2/0xb70 [ 1682.495842][T24177] ? trace_xfs_setattr+0x1c0/0x1c0 [ 1682.500997][T24177] ? rcu_is_watching+0x15/0xb0 [ 1682.505822][T24177] ? xfs_vn_setattr_size+0x157/0x180 [ 1682.511168][T24177] xfs_vn_setattr+0x262/0x310 [ 1682.515908][T24177] ? xfs_iflags_set+0x50/0x50 [ 1682.520631][T24177] ? evm_inode_setattr+0x94/0x6a0 [ 1682.525732][T24177] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1682.530971][T24177] ? try_break_deleg+0x79/0x120 [ 1682.535868][T24177] ? xfs_iflags_set+0x50/0x50 [ 1682.540594][T24177] notify_change+0xb0d/0xe10 [ 1682.545254][T24177] do_truncate+0x1b0/0x240 [ 1682.549730][T24177] ? put_page_bootmem+0x2c0/0x2c0 [ 1682.554904][T24177] ? bpf_lsm_path_truncate+0x9/0x10 [ 1682.560157][T24177] vfs_truncate+0x266/0x300 [ 1682.564717][T24177] do_sys_truncate+0xf6/0x1c0 [ 1682.569448][T24177] ? lock_chain_count+0x20/0x20 [ 1682.574344][T24177] ? break_lease+0xd0/0xd0 [ 1682.578813][T24177] ? lockdep_hardirqs_on+0x98/0x150 [ 1682.584160][T24177] do_syscall_64+0x55/0xb0 [ 1682.588623][T24177] ? clear_bhb_loop+0x40/0x90 [ 1682.593415][T24177] ? clear_bhb_loop+0x40/0x90 [ 1682.598153][T24177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.604089][T24177] RIP: 0033:0x7f063e19ce59 [ 1682.608555][T24177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.628220][T24177] RSP: 002b:00007f063f000028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1682.636693][T24177] RAX: ffffffffffffffda RBX: 00007f063e416090 RCX: 00007f063e19ce59 [ 1682.644710][T24177] RDX: 0000000000000000 RSI: 0000000000001bf8 RDI: 0000200000000280 [ 1682.652729][T24177] RBP: 00007f063e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1682.660750][T24177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.668774][T24177] R13: 00007f063e416128 R14: 00007f063e416090 R15: 00007ffef4ca8738 [ 1682.676833][T24177] [ 1682.827294][T24177] XFS (loop4): Corruption detected. Unmount and run xfs_repair [ 1682.900873][T24177] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 1682.966904][T24177] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 1683.028420][T22046] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1683.045034][T22050] Bluetooth: hci3: command tx timeout [ 1683.483214][T24183] loop5: detected capacity change from 0 to 32768 [ 1683.495705][T24183] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.4386 (24183) [ 1683.533269][T24183] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1683.547345][T24183] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1683.557499][T24183] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1683.568478][T24183] BTRFS info (device loop5): use zstd compression, level 3 [ 1683.575726][T24183] BTRFS info (device loop5): using free space tree [ 1683.625526][T24115] lo speed is unknown, defaulting to 1000 [ 1683.728855][T24183] BTRFS info (device loop5): enabling ssd optimizations [ 1683.778044][T24183] BTRFS info (device loop5): auto enabling async discard [ 1684.268369][T22750] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1684.664717][T24218] loop5: detected capacity change from 0 to 512 [ 1684.790693][T24218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1684.827688][T24218] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1685.820679][T24232] xt_CT: No such helper "syz0" [ 1686.047734][T22750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.164811][T24115] chnl_net:caif_netlink_parms(): no params data found [ 1688.119070][T24115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.131697][T24115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.143978][T24115] bridge_slave_0: entered allmulticast mode [ 1688.164800][T24115] bridge_slave_0: entered promiscuous mode [ 1688.288821][ T1324] hsr_slave_0: left promiscuous mode [ 1688.298339][ T1324] hsr_slave_1: left promiscuous mode [ 1688.331405][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.348670][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.371475][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.418971][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.446121][ T1324] bridge_slave_1: left allmulticast mode [ 1688.474321][ T1324] bridge_slave_1: left promiscuous mode [ 1688.490494][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.521178][ T1324] bridge_slave_0: left allmulticast mode [ 1688.527362][ T1324] bridge_slave_0: left promiscuous mode [ 1688.539449][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.633141][ T1324] veth1_macvtap: left promiscuous mode [ 1688.649635][ T1324] veth0_macvtap: left promiscuous mode [ 1688.663622][ T1324] veth1_vlan: left promiscuous mode [ 1688.686993][ T1324] veth0_vlan: left promiscuous mode [ 1689.604466][T24284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1690.948131][T12264] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1691.011995][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 1691.138994][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 1691.164826][T12264] usb 3-1: Using ep0 maxpacket: 32 [ 1691.186905][T12264] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1691.195194][T12264] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1691.223617][T12264] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1691.247529][T12264] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1691.262678][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.263696][T12264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1691.312365][T12264] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1691.321651][T12264] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1691.348438][T12264] usb 3-1: Product: syz [ 1691.352670][T12264] usb 3-1: Manufacturer: syz [ 1691.357296][T12264] usb 3-1: SerialNumber: syz [ 1691.376924][T12264] usb 3-1: config 0 descriptor?? [ 1691.388827][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.398603][T12264] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1691.437136][T12264] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1691.652130][ T5724] usb 3-1: USB disconnect, device number 39 [ 1691.690452][ T5724] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1691.964633][ T1324] bond0 (unregistering): Released all slaves [ 1692.071166][T24115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.078782][T24115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.086044][T24115] bridge_slave_1: entered allmulticast mode [ 1692.097055][T24115] bridge_slave_1: entered promiscuous mode [ 1692.147583][T24268] syzkaller0: entered promiscuous mode [ 1692.153281][T24268] syzkaller0: entered allmulticast mode [ 1696.357814][T24286] netlink: 'syz.4.4396': attribute type 21 has an invalid length. [ 1696.365906][T24286] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1696.379058][T24286] netlink: 'syz.4.4396': attribute type 4 has an invalid length. [ 1696.386940][T24286] netlink: 'syz.4.4396': attribute type 3 has an invalid length. [ 1696.400512][T24286] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1696.469460][T24115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.505695][T24307] vlan1: entered promiscuous mode [ 1696.512097][T24307] vlan1: entered allmulticast mode [ 1696.517271][T24307] veth0_vlan: entered allmulticast mode [ 1696.560579][T24115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.703393][T24115] team0: Port device team_slave_0 added [ 1697.111325][T24115] team0: Port device team_slave_1 added [ 1697.742192][T24115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.777269][T24115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.838171][T24326] afs: Unknown parameter 'd' [ 1697.877963][T24115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.912430][T24115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.944643][T24115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.037397][T24115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.179881][T24115] hsr_slave_0: entered promiscuous mode [ 1698.194417][T24115] hsr_slave_1: entered promiscuous mode [ 1698.626752][T24324] loop5: detected capacity change from 0 to 32768 [ 1699.026552][T24115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1699.065794][T24115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1699.133403][T24115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1699.169365][T24115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1699.393954][T24115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.419981][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.419981][T24355] [ 1699.468743][T24355] ERROR: (device loop5): remounting filesystem as read-only [ 1699.476102][T24355] xtLookup: xtSearch returned -5 [ 1699.476929][T24115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.493627][T24355] free_index: error reading directory table [ 1699.528286][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.528286][T24355] [ 1699.551703][T21763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.552637][T24355] xtLookup: xtSearch returned -5 [ 1699.558892][T21763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.583766][T21763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.591082][T21763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.600970][T24355] free_index: error reading directory table [ 1699.616272][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.616272][T24355] [ 1699.642319][T24355] xtLookup: xtSearch returned -5 [ 1699.657770][T24355] free_index: error reading directory table [ 1699.667309][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.667309][T24355] [ 1699.711158][T24355] xtLookup: xtSearch returned -5 [ 1699.724946][T24355] free_index: error reading directory table [ 1699.749393][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.749393][T24355] [ 1699.780626][T24355] xtLookup: xtSearch returned -5 [ 1699.801147][T24355] free_index: error reading directory table [ 1699.807113][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.807113][T24355] [ 1699.837837][T24355] xtLookup: xtSearch returned -5 [ 1699.858116][T24355] add_index: get/read_metapage failed! [ 1699.866819][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.866819][T24355] [ 1699.882998][T24355] xtLookup: xtSearch returned -5 [ 1699.896298][T24355] free_index: error reading directory table [ 1699.912782][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.912782][T24355] [ 1699.932138][T24355] xtLookup: xtSearch returned -5 [ 1699.944340][T24355] free_index: error reading directory table [ 1699.958162][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1699.958162][T24355] [ 1699.978260][T24355] xtLookup: xtSearch returned -5 [ 1699.993536][T24355] free_index: error reading directory table [ 1700.036182][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1700.036182][T24355] [ 1700.056993][T24355] xtLookup: xtSearch returned -5 [ 1700.075679][T24355] free_index: error reading directory table [ 1700.098837][T24355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1700.098837][T24355] [ 1700.116357][T24355] xtLookup: xtSearch returned -5 [ 1700.122218][T24355] free_index: error reading directory table [ 1700.333533][T24324] BUG: Bad page state in process syz.5.4407 pfn:78794 [ 1700.348259][T24324] page:ffffea0001e1e500 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x78794 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1700.377224][T24324] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 1700.406376][T24115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.420227][T24324] page_type: 0xffffffff() [ 1700.430946][T24324] raw: 00fff0000000800c ffffea0001a0dac8 ffffc90003367940 0000000000000000 [ 1700.465820][T24324] raw: 000000000000002f ffff88806a0d52e8 00000000ffffffff 0000000000000000 [ 1700.508697][T24324] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 1700.578261][T24324] page_owner tracks the page as allocated [ 1700.584725][T24324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 24355, tgid 24323 (syz.5.4407), ts 1699419772049, free_ts 1699109936579 [ 1700.678057][T24324] post_alloc_hook+0x1c1/0x200 [ 1700.682938][T24324] get_page_from_freelist+0x1951/0x19e0 [ 1700.720333][T24324] __alloc_pages+0x1f0/0x460 [ 1700.725050][T24324] folio_alloc+0x1e/0x30 [ 1700.756988][T24324] filemap_alloc_folio+0xdf/0x490 [ 1700.778135][T24324] __filemap_get_folio+0x3ea/0xbb0 [ 1700.783338][T24324] pagecache_get_page+0x2a/0x250 [ 1700.793409][T24324] __get_metapage+0x2a8/0xfa0 [ 1700.802218][T24324] diNewExt+0xa82/0x3120 [ 1700.806550][T24324] diAllocAG+0xea5/0x1da0 [ 1700.813148][T24324] diAlloc+0x1d5/0x1660 [ 1700.817421][T24324] ialloc+0x8c/0x950 [ 1700.821832][T24324] jfs_mkdir+0x1df/0xac0 [ 1700.826142][T24324] vfs_mkdir+0x296/0x440 [ 1700.830888][T24324] do_mkdirat+0x1dc/0x450 [ 1700.835281][T24324] __x64_sys_mkdirat+0x89/0xa0 [ 1700.843523][T24324] page last free stack trace: [ 1700.850001][T24324] free_unref_page_prepare+0x7b2/0x8c0 [ 1700.855534][T24324] free_unref_page_list+0xbe/0x860 [ 1700.863466][T24324] release_pages+0x1f7a/0x2200 [ 1700.873602][T24324] tlb_flush_mmu+0x379/0x510 [ 1700.882884][T24324] tlb_finish_mmu+0xf9/0x220 [ 1700.887549][T24324] exit_mmap+0x428/0xb90 [ 1700.895116][T24324] __mmput+0x118/0x3c0 [ 1700.902989][T24324] exit_mm+0x24a/0x350 [ 1700.907134][T24324] do_exit+0x8dd/0x2460 [ 1700.916555][T24324] do_group_exit+0x21b/0x2d0 [ 1700.925736][T24324] __x64_sys_exit_group+0x3f/0x40 [ 1700.931990][T24324] do_syscall_64+0x55/0xb0 [ 1700.936460][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1700.968687][T24324] Modules linked in: [ 1700.972683][T24324] CPU: 0 PID: 24324 Comm: syz.5.4407 Not tainted syzkaller #0 [ 1700.980185][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1700.990299][T24324] Call Trace: [ 1700.993622][T24324] [ 1700.996594][T24324] dump_stack_lvl+0x18c/0x250 [ 1701.001331][T24324] ? show_regs_print_info+0x20/0x20 [ 1701.006576][T24324] ? swiotlb_print_info+0x70/0x70 [ 1701.011695][T24324] ? dump_page+0xba3/0x14a0 [ 1701.016270][T24324] bad_page+0x14b/0x170 [ 1701.020487][T24324] free_unref_page_prepare+0x85f/0x8c0 [ 1701.026024][T24324] free_unref_page_list+0xbe/0x860 [ 1701.031196][T24324] ? __folio_memcg+0x63/0x160 [ 1701.035925][T24324] ? folio_memcg+0x127/0x480 [ 1701.040572][T24324] release_pages+0x1f7a/0x2200 [ 1701.045379][T24324] ? lru_cache_disable+0x30/0x30 [ 1701.050381][T24324] ? mlock_drain_local+0x79/0x490 [ 1701.055439][T24324] ? mlock_drain_local+0x79/0x490 [ 1701.060493][T24324] ? mlock_drain_local+0x28d/0x490 [ 1701.065625][T24324] __folio_batch_release+0x71/0xe0 [ 1701.070785][T24324] truncate_inode_pages_range+0x3b9/0xfb0 [ 1701.076543][T24324] ? mapping_evict_folio+0x510/0x510 [ 1701.081891][T24324] ? __static_call_return0+0x9/0x10 [ 1701.087137][T24324] ? shrink_dentry_list+0x685/0x6a0 [ 1701.094891][T24324] ? sync_filesystem+0x107/0x220 [ 1701.099853][T24324] jfs_remount+0x341/0x5b0 [ 1701.104308][T24324] ? jfs_statfs+0x550/0x550 [ 1701.108860][T24324] reconfigure_super+0x21e/0x8a0 [ 1701.113830][T24324] path_mount+0xd2f/0xff0 [ 1701.118203][T24324] __se_sys_mount+0x2e7/0x3d0 [ 1701.122928][T24324] ? __x64_sys_mount+0xc0/0xc0 [ 1701.127732][T24324] ? lockdep_hardirqs_on+0x98/0x150 [ 1701.132959][T24324] ? __x64_sys_mount+0x20/0xc0 [ 1701.137743][T24324] do_syscall_64+0x55/0xb0 [ 1701.142192][T24324] ? clear_bhb_loop+0x40/0x90 [ 1701.146895][T24324] ? clear_bhb_loop+0x40/0x90 [ 1701.151599][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.157525][T24324] RIP: 0033:0x7f1ca299e0ca [ 1701.161970][T24324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.181611][T24324] RSP: 002b:00007f1ca3796e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1701.190056][T24324] RAX: ffffffffffffffda RBX: 00007f1ca3796ee0 RCX: 00007f1ca299e0ca [ 1701.198061][T24324] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1701.206050][T24324] RBP: 0000200000000f40 R08: 00007f1ca3796ee0 R09: 0000000001a6a038 [ 1701.214048][T24324] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 1701.222049][T24324] R13: 00007f1ca3796ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 1701.230071][T24324] [ 1701.348049][T24324] Disabling lock debugging due to kernel taint [ 1701.354307][T24324] BUG: Bad page state in process syz.5.4407 pfn:6836b [ 1701.373243][T24324] page:ffffea0001a0dac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x6836b [ 1701.417999][T24324] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 1701.458052][T24324] page_type: 0xffffffff() [ 1701.462466][T24324] raw: 00fff0000000800c ffffea00017b9848 ffffc90003367940 0000000000000000 [ 1701.528747][T24324] raw: 000000000000002e ffff88806a0d5d90 00000000ffffffff 0000000000000000 [ 1701.537394][T24324] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 1701.588407][T24324] page_owner tracks the page as allocated [ 1701.594190][T24324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 24355, tgid 24323 (syz.5.4407), ts 1699419712422, free_ts 1699109948717 [ 1701.659611][T24324] post_alloc_hook+0x1c1/0x200 [ 1701.664475][T24324] get_page_from_freelist+0x1951/0x19e0 [ 1701.698155][T24324] __alloc_pages+0x1f0/0x460 [ 1701.702827][T24324] folio_alloc+0x1e/0x30 [ 1701.707117][T24324] filemap_alloc_folio+0xdf/0x490 [ 1701.728173][T24324] __filemap_get_folio+0x3ea/0xbb0 [ 1701.747321][T24324] pagecache_get_page+0x2a/0x250 [ 1701.752486][T24324] __get_metapage+0x2a8/0xfa0 [ 1701.757217][T24324] diNewExt+0xa82/0x3120 [ 1701.762573][T24324] diAllocAG+0xea5/0x1da0 [ 1701.766980][T24324] diAlloc+0x1d5/0x1660 [ 1701.771514][T24324] ialloc+0x8c/0x950 [ 1701.775469][T24324] jfs_mkdir+0x1df/0xac0 [ 1701.779967][T24324] vfs_mkdir+0x296/0x440 [ 1701.784264][T24324] do_mkdirat+0x1dc/0x450 [ 1701.789093][T24324] __x64_sys_mkdirat+0x89/0xa0 [ 1701.793906][T24324] page last free stack trace: [ 1701.799179][T24324] free_unref_page_prepare+0x7b2/0x8c0 [ 1701.804746][T24324] free_unref_page_list+0xbe/0x860 [ 1701.810564][T24324] release_pages+0x1f7a/0x2200 [ 1701.815398][T24324] tlb_flush_mmu+0x379/0x510 [ 1701.821140][T24324] tlb_finish_mmu+0xf9/0x220 [ 1701.825802][T24324] exit_mmap+0x428/0xb90 [ 1701.832528][T24324] __mmput+0x118/0x3c0 [ 1701.837730][T24324] exit_mm+0x24a/0x350 [ 1701.844052][T24324] do_exit+0x8dd/0x2460 [ 1701.848518][T24324] do_group_exit+0x21b/0x2d0 [ 1701.853178][T24324] __x64_sys_exit_group+0x3f/0x40 [ 1701.858576][T24324] do_syscall_64+0x55/0xb0 [ 1701.863052][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.869499][T24324] Modules linked in: [ 1701.873474][T24324] CPU: 0 PID: 24324 Comm: syz.5.4407 Tainted: G B syzkaller #0 [ 1701.882438][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1701.892522][T24324] Call Trace: [ 1701.895827][T24324] [ 1701.898785][T24324] dump_stack_lvl+0x18c/0x250 [ 1701.903510][T24324] ? show_regs_print_info+0x20/0x20 [ 1701.908739][T24324] ? swiotlb_print_info+0x70/0x70 [ 1701.913805][T24324] ? dump_page+0xba3/0x14a0 [ 1701.918343][T24324] bad_page+0x14b/0x170 [ 1701.922533][T24324] free_unref_page_prepare+0x85f/0x8c0 [ 1701.928039][T24324] free_unref_page_list+0xbe/0x860 [ 1701.933197][T24324] ? __folio_memcg+0x63/0x160 [ 1701.937916][T24324] ? folio_memcg+0x127/0x480 [ 1701.942549][T24324] release_pages+0x1f7a/0x2200 [ 1701.947343][T24324] ? lru_cache_disable+0x30/0x30 [ 1701.952319][T24324] ? mlock_drain_local+0x79/0x490 [ 1701.957387][T24324] ? mlock_drain_local+0x79/0x490 [ 1701.962435][T24324] ? mlock_drain_local+0x28d/0x490 [ 1701.967581][T24324] __folio_batch_release+0x71/0xe0 [ 1701.972738][T24324] truncate_inode_pages_range+0x3b9/0xfb0 [ 1701.978502][T24324] ? mapping_evict_folio+0x510/0x510 [ 1701.983847][T24324] ? __static_call_return0+0x9/0x10 [ 1701.989101][T24324] ? shrink_dentry_list+0x685/0x6a0 [ 1701.994358][T24324] ? sync_filesystem+0x107/0x220 [ 1701.999394][T24324] jfs_remount+0x341/0x5b0 [ 1702.003861][T24324] ? jfs_statfs+0x550/0x550 [ 1702.008412][T24324] reconfigure_super+0x21e/0x8a0 [ 1702.013387][T24324] path_mount+0xd2f/0xff0 [ 1702.017751][T24324] __se_sys_mount+0x2e7/0x3d0 [ 1702.022495][T24324] ? __x64_sys_mount+0xc0/0xc0 [ 1702.027290][T24324] ? lockdep_hardirqs_on+0x98/0x150 [ 1702.034348][T24324] ? __x64_sys_mount+0x20/0xc0 [ 1702.039148][T24324] do_syscall_64+0x55/0xb0 [ 1702.043611][T24324] ? clear_bhb_loop+0x40/0x90 [ 1702.048335][T24324] ? clear_bhb_loop+0x40/0x90 [ 1702.053062][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.059001][T24324] RIP: 0033:0x7f1ca299e0ca [ 1702.063451][T24324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.083088][T24324] RSP: 002b:00007f1ca3796e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1702.091534][T24324] RAX: ffffffffffffffda RBX: 00007f1ca3796ee0 RCX: 00007f1ca299e0ca [ 1702.099552][T24324] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1702.107558][T24324] RBP: 0000200000000f40 R08: 00007f1ca3796ee0 R09: 0000000001a6a038 [ 1702.115567][T24324] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 1702.123576][T24324] R13: 00007f1ca3796ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 1702.131575][T24324] [ 1702.184971][T21763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.224024][T24324] BUG: Bad page state in process syz.5.4407 pfn:5ee61 [ 1702.248145][T24324] page:ffffea00017b9840 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x5ee61 [ 1702.267946][T24324] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 1702.277548][T24324] page_type: 0xffffffff() [ 1702.326354][T24324] raw: 00fff0000000800c ffffea00016e8508 ffffc90003367940 0000000000000000 [ 1702.335693][T24324] raw: 000000000000002d ffff88806a0d5c98 00000000ffffffff 0000000000000000 [ 1702.355109][T24324] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 1702.365411][T24324] page_owner tracks the page as allocated [ 1702.372938][T24324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 24355, tgid 24323 (syz.5.4407), ts 1699419650228, free_ts 1699109961523 [ 1702.393808][T24324] post_alloc_hook+0x1c1/0x200 [ 1702.399740][T24324] get_page_from_freelist+0x1951/0x19e0 [ 1702.405354][T24324] __alloc_pages+0x1f0/0x460 [ 1702.410483][T24324] folio_alloc+0x1e/0x30 [ 1702.414781][T24324] filemap_alloc_folio+0xdf/0x490 [ 1702.420274][T24324] __filemap_get_folio+0x3ea/0xbb0 [ 1702.425442][T24324] pagecache_get_page+0x2a/0x250 [ 1702.430798][T24324] __get_metapage+0x2a8/0xfa0 [ 1702.435522][T24324] diNewExt+0xa82/0x3120 [ 1702.440140][T24324] diAllocAG+0xea5/0x1da0 [ 1702.444547][T24324] diAlloc+0x1d5/0x1660 [ 1702.449848][T24324] ialloc+0x8c/0x950 [ 1702.453822][T24324] jfs_mkdir+0x1df/0xac0 [ 1702.458428][T24324] vfs_mkdir+0x296/0x440 [ 1702.462721][T24324] do_mkdirat+0x1dc/0x450 [ 1702.467094][T24324] __x64_sys_mkdirat+0x89/0xa0 [ 1702.474872][T24324] page last free stack trace: [ 1702.479846][T24324] free_unref_page_prepare+0x7b2/0x8c0 [ 1702.485368][T24324] free_unref_page_list+0xbe/0x860 [ 1702.492276][T24324] release_pages+0x1f7a/0x2200 [ 1702.497101][T24324] tlb_flush_mmu+0x379/0x510 [ 1702.502072][T24324] tlb_finish_mmu+0xf9/0x220 [ 1702.506732][T24324] exit_mmap+0x428/0xb90 [ 1702.512744][T24324] __mmput+0x118/0x3c0 [ 1702.516871][T24324] exit_mm+0x24a/0x350 [ 1702.521344][T24324] do_exit+0x8dd/0x2460 [ 1702.525566][T24324] do_group_exit+0x21b/0x2d0 [ 1702.530684][T24324] __x64_sys_exit_group+0x3f/0x40 [ 1702.535761][T24324] do_syscall_64+0x55/0xb0 [ 1702.540620][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.546601][T24324] Modules linked in: [ 1702.552870][T24324] CPU: 0 PID: 24324 Comm: syz.5.4407 Tainted: G B syzkaller #0 [ 1702.555593][T21763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.561855][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1702.561870][T24324] Call Trace: [ 1702.561879][T24324] [ 1702.561887][T24324] dump_stack_lvl+0x18c/0x250 [ 1702.561913][T24324] ? show_regs_print_info+0x20/0x20 [ 1702.561932][T24324] ? swiotlb_print_info+0x70/0x70 [ 1702.561964][T24324] ? dump_page+0xba3/0x14a0 [ 1702.561995][T24324] bad_page+0x14b/0x170 [ 1702.562018][T24324] free_unref_page_prepare+0x85f/0x8c0 [ 1702.562054][T24324] free_unref_page_list+0xbe/0x860 [ 1702.562086][T24324] ? __folio_memcg+0x63/0x160 [ 1702.562110][T24324] ? folio_memcg+0x127/0x480 [ 1702.562134][T24324] release_pages+0x1f7a/0x2200 [ 1702.562170][T24324] ? lru_cache_disable+0x30/0x30 [ 1702.562194][T24324] ? mlock_drain_local+0x79/0x490 [ 1702.562217][T24324] ? mlock_drain_local+0x79/0x490 [ 1702.562238][T24324] ? mlock_drain_local+0x28d/0x490 [ 1702.562262][T24324] __folio_batch_release+0x71/0xe0 [ 1702.562287][T24324] truncate_inode_pages_range+0x3b9/0xfb0 [ 1702.562319][T24324] ? mapping_evict_folio+0x510/0x510 [ 1702.673339][T24324] ? __static_call_return0+0x9/0x10 [ 1702.678587][T24324] ? shrink_dentry_list+0x685/0x6a0 [ 1702.683822][T24324] ? sync_filesystem+0x107/0x220 [ 1702.688794][T24324] jfs_remount+0x341/0x5b0 [ 1702.693240][T24324] ? jfs_statfs+0x550/0x550 [ 1702.697767][T24324] reconfigure_super+0x21e/0x8a0 [ 1702.702730][T24324] path_mount+0xd2f/0xff0 [ 1702.707084][T24324] __se_sys_mount+0x2e7/0x3d0 [ 1702.711787][T24324] ? __x64_sys_mount+0xc0/0xc0 [ 1702.716589][T24324] ? lockdep_hardirqs_on+0x98/0x150 [ 1702.721836][T24324] ? __x64_sys_mount+0x20/0xc0 [ 1702.726625][T24324] do_syscall_64+0x55/0xb0 [ 1702.731081][T24324] ? clear_bhb_loop+0x40/0x90 [ 1702.735787][T24324] ? clear_bhb_loop+0x40/0x90 [ 1702.740493][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.746439][T24324] RIP: 0033:0x7f1ca299e0ca [ 1702.750901][T24324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.770540][T24324] RSP: 002b:00007f1ca3796e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1702.778978][T24324] RAX: ffffffffffffffda RBX: 00007f1ca3796ee0 RCX: 00007f1ca299e0ca [ 1702.786972][T24324] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1702.794961][T24324] RBP: 0000200000000f40 R08: 00007f1ca3796ee0 R09: 0000000001a6a038 [ 1702.802949][T24324] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 1702.810939][T24324] R13: 00007f1ca3796ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 1702.818947][T24324] [ 1702.889629][T21763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.983753][T21763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.214362][T21763] tipc: Left network mode [ 1703.680107][ T113] BUG: Bad page state in process jfsCommit pfn:69e9c [ 1703.686951][ T113] page:ffffea0001a7a700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x30 pfn:0x69e9c [ 1703.713342][ T113] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 1703.730579][ T113] page_type: 0xffffffff() [ 1703.735067][ T113] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000 [ 1703.745305][ T113] raw: 0000000000000030 ffff88806a0d51f0 00000000ffffffff 0000000000000000 [ 1703.754163][ T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 1703.762088][ T113] page_owner tracks the page as allocated [ 1703.767841][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 24355, tgid 24323 (syz.5.4407), ts 1699419938569, free_ts 1699109922466 [ 1703.793928][ T113] post_alloc_hook+0x1c1/0x200 [ 1703.799033][ T113] get_page_from_freelist+0x1951/0x19e0 [ 1703.804638][ T113] __alloc_pages+0x1f0/0x460 [ 1703.818219][ T113] folio_alloc+0x1e/0x30 [ 1703.822528][ T113] filemap_alloc_folio+0xdf/0x490 [ 1703.827587][ T113] __filemap_get_folio+0x3ea/0xbb0 [ 1703.847921][ T113] pagecache_get_page+0x2a/0x250 [ 1703.852951][ T113] __get_metapage+0x2a8/0xfa0 [ 1703.857662][ T113] dtSplitRoot+0x203/0x16b0 [ 1703.881002][ T113] dtInsert+0xed5/0x5de0 [ 1703.886641][ T113] jfs_mkdir+0x75c/0xac0 [ 1703.891026][ T113] vfs_mkdir+0x296/0x440 [ 1703.895314][ T113] do_mkdirat+0x1dc/0x450 [ 1703.900012][ T113] __x64_sys_mkdirat+0x89/0xa0 [ 1703.904836][ T113] do_syscall_64+0x55/0xb0 [ 1703.909665][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.915611][ T113] page last free stack trace: [ 1703.920888][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 1703.926412][ T113] free_unref_page_list+0xbe/0x860 [ 1703.947966][ T113] release_pages+0x1f7a/0x2200 [ 1703.952909][ T113] tlb_flush_mmu+0x379/0x510 [ 1703.957556][ T113] tlb_finish_mmu+0xf9/0x220 [ 1703.977942][ T113] exit_mmap+0x428/0xb90 [ 1703.982279][ T113] __mmput+0x118/0x3c0 [ 1703.989908][ T113] exit_mm+0x24a/0x350 [ 1703.994054][ T113] do_exit+0x8dd/0x2460 [ 1703.998386][ T113] do_group_exit+0x21b/0x2d0 [ 1704.003030][ T113] __x64_sys_exit_group+0x3f/0x40 [ 1704.008174][ T113] do_syscall_64+0x55/0xb0 [ 1704.012908][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.019641][ T113] Modules linked in: [ 1704.023580][ T113] CPU: 0 PID: 113 Comm: jfsCommit Tainted: G B syzkaller #0 [ 1704.032297][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1704.042395][ T113] Call Trace: [ 1704.045710][ T113] [ 1704.048681][ T113] dump_stack_lvl+0x18c/0x250 [ 1704.053404][ T113] ? show_regs_print_info+0x20/0x20 [ 1704.058649][ T113] ? swiotlb_print_info+0x70/0x70 [ 1704.063735][ T113] ? dump_page+0xba3/0x14a0 [ 1704.068313][ T113] bad_page+0x14b/0x170 [ 1704.072513][ T113] free_unref_page_prepare+0x85f/0x8c0 [ 1704.078035][ T113] free_unref_page+0x32/0x2e0 [ 1704.082759][ T113] ? __folio_put+0xef/0x210 [ 1704.087313][ T113] txUnlock+0x27e/0xcb0 [ 1704.091531][ T113] jfs_lazycommit+0x56e/0xa70 [ 1704.096264][ T113] ? txFreelock+0x5a0/0x5a0 [ 1704.100819][ T113] ? do_task_dead+0xd0/0xd0 [ 1704.105363][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 1704.110339][ T113] kthread+0x2fa/0x390 [ 1704.114436][ T113] ? txFreelock+0x5a0/0x5a0 [ 1704.118967][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1704.123585][ T113] ret_from_fork+0x48/0x80 [ 1704.128038][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1704.132661][ T113] ret_from_fork_asm+0x11/0x20 [ 1704.137463][ T113] [ 1704.172098][ T113] page:ffffea0001a7a700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x30 pfn:0x69e9c [ 1704.187719][ T113] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 1704.253961][ T113] page_type: 0xffffffff() [ 1704.259430][ T113] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000 [ 1704.269883][ T113] raw: 0000000000000030 ffff88806a0d51f0 00000000ffffffff 0000000000000000 [ 1704.281292][ T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 1704.296641][ T113] page_owner tracks the page as allocated [ 1704.302515][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 24355, tgid 24323 (syz.5.4407), ts 1699419938569, free_ts 1699109922466 [ 1704.321524][ T113] post_alloc_hook+0x1c1/0x200 [ 1704.326367][ T113] get_page_from_freelist+0x1951/0x19e0 [ 1704.332778][ T113] __alloc_pages+0x1f0/0x460 [ 1704.337427][ T113] folio_alloc+0x1e/0x30 [ 1704.342080][ T113] filemap_alloc_folio+0xdf/0x490 [ 1704.347131][ T113] __filemap_get_folio+0x3ea/0xbb0 [ 1704.352316][ T113] pagecache_get_page+0x2a/0x250 [ 1704.357274][ T113] __get_metapage+0x2a8/0xfa0 [ 1704.362218][ T113] dtSplitRoot+0x203/0x16b0 [ 1704.366750][ T113] dtInsert+0xed5/0x5de0 [ 1704.371057][ T113] jfs_mkdir+0x75c/0xac0 [ 1704.375328][ T113] vfs_mkdir+0x296/0x440 [ 1704.379614][ T113] do_mkdirat+0x1dc/0x450 [ 1704.384056][ T113] __x64_sys_mkdirat+0x89/0xa0 [ 1704.388936][ T113] do_syscall_64+0x55/0xb0 [ 1704.393387][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.402470][ T113] page last free stack trace: [ 1704.407174][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 1704.412702][ T113] free_unref_page_list+0xbe/0x860 [ 1704.417839][ T113] release_pages+0x1f7a/0x2200 [ 1704.422734][ T113] tlb_flush_mmu+0x379/0x510 [ 1704.427361][ T113] tlb_finish_mmu+0xf9/0x220 [ 1704.432051][ T113] exit_mmap+0x428/0xb90 [ 1704.436331][ T113] __mmput+0x118/0x3c0 [ 1704.440573][ T113] exit_mm+0x24a/0x350 [ 1704.444685][ T113] do_exit+0x8dd/0x2460 [ 1704.450894][ T113] do_group_exit+0x21b/0x2d0 [ 1704.455510][ T113] __x64_sys_exit_group+0x3f/0x40 [ 1704.460595][ T113] do_syscall_64+0x55/0xb0 [ 1704.465029][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.471489][ T113] ------------[ cut here ]------------ [ 1704.476981][ T113] kernel BUG at include/linux/mm.h:1458! [ 1704.482825][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1704.488920][ T113] CPU: 1 PID: 113 Comm: jfsCommit Tainted: G B syzkaller #0 [ 1704.497625][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1704.507698][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 1704.512991][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 f7 57 d9 fe e9 25 ff ff ff e8 bd 1c 81 fe 48 8b 3c 24 48 c7 c6 80 11 04 8b e8 7d 8a c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 d6 20 81 [ 1704.532610][ T113] RSP: 0018:ffffc9000251fcc0 EFLAGS: 00010246 [ 1704.538694][ T113] RAX: b0c5b9b35eaea400 RBX: ffff88806a0d51f0 RCX: b0c5b9b35eaea400 [ 1704.546693][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c9840 RDI: ffffffff8b1c9800 [ 1704.554694][ T113] RBP: 000000000000007f R08: ffffffff8e8b2fef R09: 1ffffffff1d165fd [ 1704.562680][ T113] R10: dffffc0000000000 R11: fffffbfff1d165fe R12: ffff88806a0d5218 [ 1704.570668][ T113] R13: ffffea0001a7a734 R14: 1ffff1100d41aa43 R15: 1ffff1100d41aa50 [ 1704.578663][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1704.587785][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1704.594474][ T113] CR2: 000055fa435ab000 CR3: 000000007ea37000 CR4: 00000000003506e0 [ 1704.602481][ T113] Call Trace: [ 1704.605784][ T113] [ 1704.608741][ T113] txUnlock+0x427/0xcb0 [ 1704.613021][ T113] jfs_lazycommit+0x56e/0xa70 [ 1704.617727][ T113] ? txFreelock+0x5a0/0x5a0 [ 1704.622248][ T113] ? do_task_dead+0xd0/0xd0 [ 1704.626768][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 1704.631885][ T113] kthread+0x2fa/0x390 [ 1704.635966][ T113] ? txFreelock+0x5a0/0x5a0 [ 1704.640574][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1704.645267][ T113] ret_from_fork+0x48/0x80 [ 1704.649698][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1704.654480][ T113] ret_from_fork_asm+0x11/0x20 [ 1704.659280][ T113] [ 1704.662333][ T113] Modules linked in: [ 1704.673559][ T113] ---[ end trace 0000000000000000 ]--- [ 1704.681476][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 1704.686822][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 f7 57 d9 fe e9 25 ff ff ff e8 bd 1c 81 fe 48 8b 3c 24 48 c7 c6 80 11 04 8b e8 7d 8a c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 d6 20 81 [ 1704.707401][ T113] RSP: 0018:ffffc9000251fcc0 EFLAGS: 00010246 [ 1704.718732][ T113] RAX: b0c5b9b35eaea400 RBX: ffff88806a0d51f0 RCX: b0c5b9b35eaea400 [ 1704.726747][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c9840 RDI: ffffffff8b1c9800 [ 1704.735008][ T113] RBP: 000000000000007f R08: ffffffff8e8b2fef R09: 1ffffffff1d165fd [ 1704.743452][ T113] R10: dffffc0000000000 R11: fffffbfff1d165fe R12: ffff88806a0d5218 [ 1704.753026][ T113] R13: ffffea0001a7a734 R14: 1ffff1100d41aa43 R15: 1ffff1100d41aa50 [ 1704.761120][ T113] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1704.771635][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1704.780744][ T113] CR2: 000055fa435ab000 CR3: 000000002f82e000 CR4: 00000000003506f0 [ 1704.789022][ T113] Kernel panic - not syncing: Fatal exception [ 1704.795267][ T113] Kernel Offset: disabled [ 1704.799599][ T113] Rebooting in 86400 seconds..