last executing test programs: 4.394666219s ago: executing program 4 (id=23661): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffa, @broadcast}, 0x10) 4.292818979s ago: executing program 4 (id=23664): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 4.133694965s ago: executing program 4 (id=23667): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) 4.037752245s ago: executing program 4 (id=23668): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x40, 0x9, 0x5ed, 0x9, 0x0, 0x9, "7a5ecc71725efb27943e9b70f7755a19c55e7d4858d9a14ab5923b722fc2ba1be20c89c4a5de65c87e102b2a6a5a60def3266139769c8cc48729df40f3360fe8"}}, 0x158) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.87975341s ago: executing program 4 (id=23671): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) 2.661567313s ago: executing program 0 (id=23699): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c2f4cac6000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") 2.263197873s ago: executing program 0 (id=23705): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="200034007d5a4a8d8ef44673d81d682cfc5c196225c4029866d3c5afad0d689b050018011a000000"], 0x44}}, 0x0) fsmount(r4, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 2.071979192s ago: executing program 3 (id=23709): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.003876499s ago: executing program 0 (id=23710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 1.99722442s ago: executing program 3 (id=23711): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.590096011s ago: executing program 0 (id=23713): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@ll={0x11, 0x11, 0x0, 0x1, 0x7, 0x6, @local}, 0x80) 1.578427551s ago: executing program 2 (id=23714): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200004c0, 0x0, 0xfffffff8, 0x200000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002200000000000000020000008001900ac1414bb05001a"], 0x2c}}, 0x0) 1.478326401s ago: executing program 0 (id=23715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) 1.365276913s ago: executing program 2 (id=23716): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c2f4cac6000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") 1.356241704s ago: executing program 0 (id=23717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x40, 0x9, 0x5ed, 0x9, 0x0, 0x9, "7a5ecc71725efb27943e9b70f7755a19c55e7d4858d9a14ab5923b722fc2ba1be20c89c4a5de65c87e102b2a6a5a60def3266139769c8cc48729df40f3360fe8"}}, 0x158) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.246467965s ago: executing program 3 (id=23718): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1.00043767s ago: executing program 3 (id=23720): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5512, &(0x7f0000005a00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x3226034, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)) 960.890204ms ago: executing program 2 (id=23721): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="200034007d5a4a8d8ef44673d81d682cfc5c196225c4029866d3c5afad0d689b050018011a000000"], 0x44}}, 0x0) fsmount(r4, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 655.112534ms ago: executing program 4 (id=23723): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="be87b128", 0x4, r0}, 0x68) 582.201592ms ago: executing program 1 (id=23724): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f00000003c0)=""/232, &(0x7f0000000040)=0x6d) 502.88093ms ago: executing program 3 (id=23725): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8000000007, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) 422.007938ms ago: executing program 2 (id=23726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0xe523, 0x8, 0x205, 0x5, 0x6, 0x5, 0xfffffff9, 0x1}, &(0x7f0000000640)=0x20) 362.008414ms ago: executing program 1 (id=23727): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) 338.504286ms ago: executing program 3 (id=23728): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 320.150098ms ago: executing program 2 (id=23729): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="b6975ac97f8efc590374e1fd313f50682f76921adfdc731a09363285219b1a68001fa82a0041c8e33007c6a928270325b65fcdbd89b377437bd896eeab154b9056cb5c7eb7c928", 0x47}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x6, 0x2, 0x6, 0x6}}, @init={0x18, 0x84, 0x0, {0x0, 0x4, 0x3ff, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x50}, 0x4000) 239.089576ms ago: executing program 1 (id=23730): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) connect$can_bcm(r1, &(0x7f00000001c0), 0x10) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001840)=""/4096) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 142.679315ms ago: executing program 1 (id=23731): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 86.481221ms ago: executing program 2 (id=23732): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") r4 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r4, 0x0, 0x0) 18.725308ms ago: executing program 1 (id=23733): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000500)=@ethtool_sfeatures={0x3b, 0x2, [{0x2f16, 0x3}, {0x244558f5, 0x8}]}}) 0s ago: executing program 1 (id=23734): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000200)=0x7, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x700, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) kernel console output (not intermixed with test programs): xecutor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc57f6c9 code=0x7ffc0000 [ 2101.111475][ T26] audit: type=1326 audit(2048479182.015:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18455 comm="syz.4.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcecc57f6c9 code=0x7ffc0000 [ 2101.183774][ T26] audit: type=1326 audit(2048479182.015:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18455 comm="syz.4.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecc57f6c9 code=0x7ffc0000 [ 2101.713206][T17814] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.946677][T18496] loop2: detected capacity change from 0 to 32768 [ 2101.992791][T17814] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.019675][T18496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.21305 (18496) [ 2102.042610][T18496] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2102.051623][T18496] BTRFS info (device loop2): turning off barriers [ 2102.058054][T18496] BTRFS info (device loop2): turning on flush-on-commit [ 2102.065490][T18496] BTRFS error (device loop2): unrecognized commit_interval value 0x0000000080000000 [ 2102.080364][T18496] BTRFS error (device loop2): open_ctree failed: -22 [ 2102.148642][T17814] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.192662][ T5391] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5391) [ 2102.225064][T18492] chnl_net:caif_netlink_parms(): no params data found [ 2102.293638][T17814] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.608711][T18492] bridge0: port 1(bridge_slave_0) entered blocking state [ 2102.627906][T18492] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.659157][T18492] device bridge_slave_0 entered promiscuous mode [ 2102.730383][T18492] bridge0: port 2(bridge_slave_1) entered blocking state [ 2102.760269][T18492] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.777820][T18492] device bridge_slave_1 entered promiscuous mode [ 2102.961970][T18492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.010145][T18492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.189829][T18492] team0: Port device team_slave_0 added [ 2103.220070][T18492] team0: Port device team_slave_1 added [ 2103.342837][T18492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2103.349815][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2103.457461][T18492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2103.521789][T18492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2103.528765][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2103.561639][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 2103.666316][T18492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2103.796656][T18492] device hsr_slave_0 entered promiscuous mode [ 2103.852059][T18492] device hsr_slave_1 entered promiscuous mode [ 2103.877533][T18492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2103.891709][T18492] Cannot create hsr debugfs directory [ 2105.249216][T17814] device hsr_slave_0 left promiscuous mode [ 2105.341082][T17814] device hsr_slave_1 left promiscuous mode [ 2105.363397][T17814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2105.370844][T17814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2105.394704][T17814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2105.411694][T17814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2105.429715][T17814] device bridge_slave_1 left promiscuous mode [ 2105.439295][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.492976][T17814] device bridge_slave_0 left promiscuous mode [ 2105.499202][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.556557][T17814] device veth1_macvtap left promiscuous mode [ 2105.564823][T17814] device veth0_macvtap left promiscuous mode [ 2105.581090][T17814] device veth1_vlan left promiscuous mode [ 2105.601306][T17814] device veth0_vlan left promiscuous mode [ 2105.641744][T18385] Bluetooth: hci2: command 0x041b tx timeout [ 2105.989703][T17814] team0 (unregistering): Port device team_slave_1 removed [ 2106.023170][T17814] team0 (unregistering): Port device team_slave_0 removed [ 2106.054630][T17814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2106.115484][T17814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2106.301553][T17814] bond0 (unregistering): Released all slaves [ 2106.488327][T18594] netlink: 'syz.0.21336': attribute type 41 has an invalid length. [ 2106.569898][T18492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2106.594544][T18492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2106.664336][T18492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2106.687597][T18492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2106.815879][T18613] loop0: detected capacity change from 0 to 64 [ 2106.904319][T18492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2106.985264][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2107.013198][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2107.074588][T18492] 8021q: adding VLAN 0 to HW filter on device team0 [ 2107.120499][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2107.121059][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2107.121574][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.121628][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2107.121999][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2107.135909][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2107.137036][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2107.137396][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.137430][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2107.149689][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2107.179936][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2107.217115][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2107.218314][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2107.218913][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2107.219567][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2107.220121][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2107.224284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2107.224832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2107.228643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2107.229122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2107.280596][T18492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2107.533396][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21344'. [ 2107.683254][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2107.683376][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2107.709218][T18492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2107.721797][T18385] Bluetooth: hci2: command 0x040f tx timeout [ 2108.293726][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2108.323643][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2108.399030][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2108.418133][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2108.443176][T18492] device veth0_vlan entered promiscuous mode [ 2108.451584][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2108.490861][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2108.528470][T18492] device veth1_vlan entered promiscuous mode [ 2108.543647][T18668] overlayfs: unrecognized mount option "uuid=null" or missing value [ 2108.612718][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2108.650527][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2108.693271][T18492] device veth0_macvtap entered promiscuous mode [ 2108.725515][T18492] device veth1_macvtap entered promiscuous mode [ 2108.778419][T18492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2108.836143][T18492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.870137][T18492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2108.887692][T18676] loop3: detected capacity change from 0 to 2048 [ 2108.894749][T18492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.894773][T18492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2108.894786][T18492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.908530][T18492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2108.910096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2108.910692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2108.911191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2108.912647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2108.919332][T18492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2108.919350][T18492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.919362][T18492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2108.919374][T18492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.919385][T18492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2108.919397][T18492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.920471][T18492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2108.920561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2108.924440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2108.932759][T18492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.932792][T18492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.932818][T18492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.932843][T18492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.039960][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.040014][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2109.046881][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2109.058775][T18676] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2109.058900][T18676] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2109.165822][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.165877][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2109.168525][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2109.812253][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 2110.695008][T18720] loop2: detected capacity change from 0 to 128 [ 2110.867909][T18720] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2110.881633][T18720] ext4 filesystem being mounted at /450/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2111.852052][T18736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21381'. [ 2113.491617][T18376] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 2113.748442][T18759] loop3: detected capacity change from 0 to 2048 [ 2113.835153][T18759] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2113.851377][T18759] UDF-fs: Scanning with blocksize 512 failed [ 2113.885546][T18759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2113.933003][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 2113.933018][ T26] audit: type=1800 audit(2048479195.855:882): pid=18759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21391" name="file2" dev="loop3" ino=819 res=0 errno=0 [ 2113.978298][T18376] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2114.021573][ T4256] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2114.041858][T18376] usb 1-1: not running at top speed; connect to a high speed hub [ 2114.131785][T18376] usb 1-1: config 14 has an invalid interface number: 18 but max is 0 [ 2114.157499][T18376] usb 1-1: config 14 has no interface number 0 [ 2114.174670][T18376] usb 1-1: config 14 interface 18 has no altsetting 0 [ 2114.476659][ T8139] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 2114.524445][T18777] loop1: detected capacity change from 0 to 32768 [ 2114.581771][T18376] usb 1-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 2114.593089][T18777] (syz.1.21402,18777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2114.608356][T18777] (syz.1.21402,18777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2114.622683][ T4256] usb 5-1: config 7 has an invalid interface number: 227 but max is 0 [ 2114.631090][ T4256] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.641684][T18376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.649901][ T4256] usb 5-1: config 7 has no interface number 0 [ 2114.656512][T18376] usb 1-1: Product: syz [ 2114.660885][T18376] usb 1-1: Manufacturer: syz [ 2114.665562][T18376] usb 1-1: SerialNumber: syz [ 2114.671754][ T4256] usb 5-1: config 7 interface 227 has no altsetting 0 [ 2114.698204][T18777] JBD2: Ignoring recovery information on journal [ 2114.756819][T18777] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2114.851611][ T8139] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2114.869979][ T8139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2114.881709][ T8139] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2114.902480][T17520] ocfs2: Unmounting device (7,1) on (node local) [ 2114.913210][ T4256] usb 5-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44 [ 2114.937828][T18789] loop2: detected capacity change from 0 to 4096 [ 2114.944272][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.953459][T18376] rtl8150 1-1:14.18: couldn't find required endpoints [ 2114.962043][ T4256] usb 5-1: Product: syz [ 2114.966193][ T4256] usb 5-1: Manufacturer: syz [ 2114.970761][ T4256] usb 5-1: SerialNumber: syz [ 2114.971795][ T8139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2114.975432][T18376] rtl8150: probe of 1-1:14.18 failed with error -5 [ 2114.991901][ T8139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2115.016621][ T8139] usb 4-1: SerialNumber: syz [ 2115.063410][T18376] usb 1-1: USB disconnect, device number 24 [ 2115.285083][ T8139] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 2115.287049][T13151] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 2115.305466][T18795] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2115.312063][ T8139] usb 4-1: USB disconnect, device number 19 [ 2115.317042][T18795] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2115.330287][T13151] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 2115.382789][ T4256] cdc_wdm: probe of 5-1:7.227 failed with error -22 [ 2115.408431][ T4256] usb 5-1: USB disconnect, device number 13 [ 2116.209972][T18831] tipc: Started in network mode [ 2116.229905][T18831] tipc: Node identity 4, cluster identity 4711 [ 2116.257826][T18831] tipc: Node number set to 4 [ 2116.399977][T18840] loop1: detected capacity change from 0 to 128 [ 2117.316963][T18860] loop3: detected capacity change from 0 to 4096 [ 2117.493355][T18869] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2117.861052][T18880] netlink: 'syz.1.21448': attribute type 1 has an invalid length. [ 2117.932605][T18880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2117.990058][T18882] bond1: (slave ip6gretap1): making interface the new active one [ 2118.007869][T18882] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2118.029100][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 2118.187041][T18888] netlink: 156 bytes leftover after parsing attributes in process `syz.1.21451'. [ 2118.214170][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21451'. [ 2118.595875][T18908] tipc: Started in network mode [ 2118.608614][T18908] tipc: Node identity 4, cluster identity 4711 [ 2118.655307][T18908] tipc: Node number set to 4 [ 2118.743118][T18916] loop3: detected capacity change from 0 to 256 [ 2118.805040][T18916] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2118.893911][ T26] audit: type=1400 audit(2048479200.815:883): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0F [ 2119.473385][T18936] loop0: detected capacity change from 0 to 128 [ 2120.818870][T18961] overlayfs: failed to resolve './bus': -2 [ 2121.093699][T18972] binder: Unknown parameter 'st' [ 2121.438748][T18984] loop3: detected capacity change from 0 to 128 [ 2122.639462][T19022] loop2: detected capacity change from 0 to 32768 [ 2122.700358][T19022] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.21514 (19022) [ 2122.713056][T19027] binder: Unknown parameter 'stat' [ 2122.725772][T19022] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 2122.735490][T19022] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2122.744953][T19022] BTRFS info (device loop2): use zstd compression, level 3 [ 2122.752241][T19022] BTRFS info (device loop2): using free space tree [ 2122.758746][T19022] BTRFS info (device loop2): has skinny extents [ 2122.915011][T19034] loop0: detected capacity change from 0 to 512 [ 2122.980160][T19034] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2123.014617][T19034] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2123.128103][T19022] BTRFS info (device loop2): enabling ssd optimizations [ 2123.142409][T19034] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2123.197182][ T26] audit: type=1326 audit(2048479205.115:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.0.21517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2a3246c9 code=0x7ffc0000 [ 2124.277732][T19093] binder: Unknown parameter 'stat' [ 2124.457648][T19102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.21537'. [ 2124.529114][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21537'. [ 2125.554902][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21552'. [ 2125.984708][T19146] loop3: detected capacity change from 0 to 128 [ 2126.391927][T19160] binder: Bad value for 'stats' [ 2127.092363][T19180] loop0: detected capacity change from 0 to 32768 [ 2127.119053][T19186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21577'. [ 2127.191966][T19180] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks" [ 2127.201128][T19180] gfs2: fsid=localflocks: Now mounting FS (format 1801)... [ 2127.216534][T19188] loop3: detected capacity change from 0 to 64 [ 2127.240336][T19180] gfs2: fsid=localflocks.s: journal 0 mapped with 5 extents in 0ms [ 2127.282760][T19188] hfs: unable to locate alternate MDB [ 2127.331978][T19188] hfs: continuing without an alternate MDB [ 2127.370103][T19180] gfs2: fsid=localflocks.s: first mount done, others may mount [ 2127.411158][T19188] hfs: get root inode failed [ 2128.172065][T19219] loop4: detected capacity change from 0 to 512 [ 2128.202543][T19219] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2128.240027][T19219] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2128.280224][T19219] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 2128.326807][T19219] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 2128.509275][T19225] loop1: detected capacity change from 0 to 40427 [ 2128.567134][T19225] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 2128.703853][T19219] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 2129.263362][T19257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2130.225726][T19298] netlink: 'syz.1.21626': attribute type 10 has an invalid length. [ 2130.287505][T19298] team0: Port device veth0_virt_wifi added [ 2130.304393][T19300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21627'. [ 2130.428847][T19304] loop3: detected capacity change from 0 to 512 [ 2130.475897][T19304] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2130.523975][T19304] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.21630: iget: bogus i_mode (5) [ 2130.556924][T19304] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.21630: couldn't read orphan inode 15 (err -117) [ 2130.589701][T19304] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 2130.629464][T19304] ext2 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2130.698681][T19304] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.21630: Directory hole found for htree leaf block 0 [ 2131.465497][T19329] loop0: detected capacity change from 0 to 512 [ 2131.597153][T19329] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2131.643668][T19329] ext4 filesystem being mounted at /310/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2132.733574][T19351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2133.547165][T19372] loop0: detected capacity change from 0 to 1024 [ 2133.629785][T19372] EXT4-fs (loop0): Ignoring removed orlov option [ 2133.650545][T19372] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2133.685779][T19378] program syz.4.21660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2133.755245][T19372] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,auto_da_alloc,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2134.204329][T19400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21672'. [ 2134.214665][T19400] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2134.729892][T19421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2135.070894][T19434] loop2: detected capacity change from 0 to 512 [ 2135.121294][T19437] loop1: detected capacity change from 0 to 512 [ 2135.132005][T19434] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2135.174513][T19434] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 2135.200893][T19434] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 2135.216511][T19434] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 2135.430763][T19434] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 2135.973918][T19450] loop4: detected capacity change from 0 to 4096 [ 2136.251873][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21698'. [ 2136.547309][T19471] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2136.797317][T19488] loop3: detected capacity change from 0 to 512 [ 2136.843996][T19488] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2136.937030][T19488] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2136.960584][T19488] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2137.403273][ T8139] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2137.421878][ T8139] Bluetooth: hci0: Injecting HCI hardware error event [ 2137.443943][ T146] Bluetooth: hci0: hardware error 0x00 [ 2137.913663][T19509] loop3: detected capacity change from 0 to 32768 [ 2138.137556][T19509] XFS (loop3): Mounting V5 Filesystem [ 2138.218781][T19509] XFS (loop3): Ending clean mount [ 2138.233673][T19509] XFS (loop3): Quotacheck needed: Please wait. [ 2138.329699][T19509] XFS (loop3): Quotacheck: Done. [ 2138.454851][T17704] XFS (loop3): Unmounting Filesystem [ 2138.696954][T19525] loop1: detected capacity change from 0 to 32768 [ 2138.766829][T19525] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.21724 (19525) [ 2138.801235][T19525] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 2138.810928][T19525] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2138.820406][T19525] BTRFS info (device loop1): use zstd compression, level 3 [ 2138.827720][T19525] BTRFS info (device loop1): using free space tree [ 2138.834266][T19525] BTRFS info (device loop1): has skinny extents [ 2139.123325][T19525] BTRFS info (device loop1): enabling ssd optimizations [ 2139.177725][T19550] loop2: detected capacity change from 0 to 512 [ 2139.528880][T18790] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (18790) [ 2139.881905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2140.017877][T19581] loop4: detected capacity change from 0 to 1024 [ 2140.465622][T19591] loop4: detected capacity change from 0 to 32768 [ 2140.547246][T19591] (syz.4.21741,19591,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2140.564998][T19591] (syz.4.21741,19591,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2140.606788][T19591] JBD2: Ignoring recovery information on journal [ 2140.679757][T19591] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 2140.703531][T19591] (syz.4.21741,19591,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 2140.792150][T19591] (syz.4.21741,19591,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 2140.805283][T19601] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 2140.806782][T19591] (syz.4.21741,19591,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 2140.829105][T19591] (syz.4.21741,19591,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 2140.829504][T19601] device bridge1 entered promiscuous mode [ 2140.838399][T19591] (syz.4.21741,19591,0):ocfs2_quota_read:201 ERROR: status = -5 [ 2140.851720][T19591] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 3 [ 2140.861037][T19591] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 2140.870492][T19591] (syz.4.21741,19591,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 2140.880546][T19591] (syz.4.21741,19591,0):ocfs2_symlink:1879 ERROR: status = -5 [ 2140.888484][T19591] (syz.4.21741,19591,0):ocfs2_symlink:2065 ERROR: status = -5 [ 2141.047047][T18492] ocfs2: Unmounting device (7,4) on (node local) [ 2141.069853][T19611] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2142.478506][T19641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2145.552592][T17635] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2145.791457][T17635] usb 4-1: Using ep0 maxpacket: 16 [ 2145.994690][T17635] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2146.014461][T17635] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2146.043508][T17635] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2146.246764][T17635] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2146.266497][T17635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.291387][T17635] usb 4-1: Product: syz [ 2146.295574][T17635] usb 4-1: Manufacturer: syz [ 2146.320556][T17635] usb 4-1: SerialNumber: syz [ 2146.660289][T19704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2146.714273][T17635] usb 4-1: 0:2 : does not exist [ 2146.795879][T17635] usb 4-1: USB disconnect, device number 20 [ 2147.193997][T19708] loop1: detected capacity change from 0 to 40427 [ 2147.306546][T19710] loop4: detected capacity change from 0 to 512 [ 2147.329431][T19708] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 2147.397144][T19714] loop3: detected capacity change from 0 to 128 [ 2147.477596][T19710] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2147.494561][T19710] ext4 filesystem being mounted at /99/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2147.668555][T19725] loop4: detected capacity change from 0 to 512 [ 2147.756680][T19725] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2147.762217][T19729] loop3: detected capacity change from 0 to 64 [ 2147.792214][T19725] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2147.851861][T19725] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2147.892810][T19729] hfs: get root inode failed [ 2148.129374][T19735] loop3: detected capacity change from 0 to 16 [ 2148.212253][T19735] erofs: (device loop3): mounted with root inode @ nid 36. [ 2148.451128][T19743] cgroup: Name too long [ 2148.465812][T19738] loop1: detected capacity change from 0 to 8192 [ 2148.537083][T18790] loop1: p1 < > p2 p3 p4 < > [ 2148.542077][T18790] loop1: partition table partially beyond EOD, truncated [ 2148.549677][T18790] loop1: p1 start 134217728 is beyond EOD, truncated [ 2148.583941][T18790] loop1: p2 size 591360 extends beyond EOD, truncated [ 2148.629731][T18790] loop1: p3 start 655105 is beyond EOD, truncated [ 2148.678232][T19755] loop4: detected capacity change from 0 to 512 [ 2148.688525][T19738] loop1: p1 < > p2 p3 p4 < > [ 2148.729334][T19738] loop1: partition table partially beyond EOD, truncated [ 2148.751154][T19755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2148.771617][T19738] loop1: p1 start 134217728 is beyond EOD, truncated [ 2148.778484][T19738] loop1: p2 size 591360 extends beyond EOD, truncated [ 2148.802298][T19755] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2148.835915][T19755] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 2148.854521][T19755] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 2148.876746][T19738] loop1: p3 start 655105 is beyond EOD, [ 2148.909181][T19765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2148.935256][T19738] truncated [ 2148.952031][T19755] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 2149.269689][T19782] loop3: detected capacity change from 0 to 64 [ 2149.338053][T19787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2149.369054][T19789] loop4: detected capacity change from 0 to 256 [ 2149.390271][T18790] udevd[18790]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 2149.404938][ T5391] udevd[5391]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 2149.480096][T19795] loop2: detected capacity change from 0 to 512 [ 2149.508561][T19789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 2149.536046][T19795] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2149.557460][T19795] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2149.574101][T18790] udevd[18790]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 2149.584074][T18385] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 2149.604780][T16372] udevd[16372]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 2149.652682][T19795] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2149.958207][T19811] loop2: detected capacity change from 0 to 512 [ 2149.987566][T19811] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2150.018980][T19811] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 2150.051658][T18385] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2150.065329][T19811] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 2150.077262][T18385] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2150.117152][T19811] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 2150.193504][T18385] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2150.224609][T18385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.235817][T19811] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 2150.450840][ T26] audit: type=1326 audit(2048479232.365:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.502236][T18385] usb 1-1: GET_CAPABILITIES returned 0 [ 2150.507666][ T26] audit: type=1326 audit(2048479232.405:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.508669][T18385] usbtmc 1-1:16.0: can't read capabilities [ 2150.551409][T18376] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2150.557022][ T26] audit: type=1326 audit(2048479232.405:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.632767][T19830] netlink: 'syz.1.21849': attribute type 1 has an invalid length. [ 2150.640771][ T26] audit: type=1326 audit(2048479232.405:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.675879][T19830] device bond2 entered promiscuous mode [ 2150.687844][ T26] audit: type=1326 audit(2048479232.405:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.720784][T19830] bond2: (slave ip6gretap2): making interface the new active one [ 2150.753079][T18385] usb 1-1: USB disconnect, device number 25 [ 2150.779324][T19830] device ip6gretap2 entered promiscuous mode [ 2150.806429][ T26] audit: type=1326 audit(2048479232.405:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.826451][T19830] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 2150.830020][ T26] audit: type=1326 audit(2048479232.405:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.1.21846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65a7c56c9 code=0x7ffc0000 [ 2150.858209][T19833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21849'. [ 2150.876262][T18376] usb 5-1: Using ep0 maxpacket: 8 [ 2150.918184][T19833] device bond2 left promiscuous mode [ 2150.930270][T19833] device ip6gretap2 left promiscuous mode [ 2150.937517][T19833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2151.021725][T18376] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 2151.049036][T18376] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2151.078956][T18376] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2151.091663][T18376] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 2151.118157][T18376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.128007][T18376] usb 5-1: config 0 descriptor?? [ 2151.602143][T18376] hid (null): bogus close delimiter [ 2151.624231][T18376] glorious 0003:258A:0033.0001: unknown main item tag 0x1 [ 2151.649530][T18376] glorious 0003:258A:0033.0001: bogus close delimiter [ 2151.670913][T18376] glorious 0003:258A:0033.0001: item 0 0 2 10 parsing failed [ 2151.696123][T18376] glorious: probe of 0003:258A:0033.0001 failed with error -22 [ 2151.723646][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 2151.805390][T18385] usb 5-1: USB disconnect, device number 14 [ 2151.881568][T18376] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2152.152029][T18376] usb 1-1: Using ep0 maxpacket: 16 [ 2152.293588][T18376] usb 1-1: config 0 has an invalid interface number: 202 but max is 1 [ 2152.311631][T18376] usb 1-1: config 0 has no interface number 1 [ 2152.331436][T18376] usb 1-1: config 0 interface 202 has no altsetting 0 [ 2152.338229][T18376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2152.566549][T18376] usb 1-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=cd.6b [ 2152.582073][T18376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.590084][T18376] usb 1-1: Product: syz [ 2152.591552][ T4295] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 2152.616475][T18376] usb 1-1: Manufacturer: syz [ 2152.621099][T18376] usb 1-1: SerialNumber: syz [ 2152.650675][T18376] usb 1-1: config 0 descriptor?? [ 2152.778289][T19871] loop3: detected capacity change from 0 to 16 [ 2152.897648][T19871] erofs: (device loop3): mounted with root inode @ nid 36. [ 2152.954753][T18376] imon 1-1:0.202: inconsistent driver matching [ 2152.962621][T18376] imon 1-1:0.202: unable to register, err -22 [ 2152.969164][T18376] imon: probe of 1-1:0.202 failed with error -22 [ 2152.983538][ T4295] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 2153.004753][ T4295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2153.028363][ T4295] usb 3-1: config 0 has no interface number 0 [ 2153.043334][T18376] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2153.049202][ T4295] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2153.090008][ T4295] usb 3-1: config 0 interface 52 has no altsetting 0 [ 2153.091484][T18376] imon 1-1:0.0: unable to initialize intf0, err -19 [ 2153.122997][T18376] imon:imon_probe: failed to initialize context! [ 2153.129417][T18376] imon 1-1:0.0: unable to register, err -19 [ 2153.162960][T18376] usb 1-1: USB disconnect, device number 26 [ 2153.256019][T19875] loop3: detected capacity change from 0 to 512 [ 2153.266458][ T4295] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2153.282596][ T4295] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2153.301243][ T4295] usb 3-1: Product: syz [ 2153.304559][T19875] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2153.311438][ T4295] usb 3-1: Manufacturer: syz [ 2153.321766][ T4295] usb 3-1: SerialNumber: syz [ 2153.333001][T19875] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2153.341573][ T4295] usb 3-1: config 0 descriptor?? [ 2153.373647][T19875] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2153.621527][ T4295] usb 3-1: Can not set alternate setting to 1, error: -71 [ 2153.637197][ T4295] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 2153.665004][ T4295] usb 3-1: USB disconnect, device number 15 [ 2154.451631][T18379] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2154.466446][T18379] Bluetooth: hci5: Injecting HCI hardware error event [ 2154.490520][ T4194] Bluetooth: hci5: hardware error 0x00 [ 2155.877512][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21893'. [ 2156.398151][T19946] loop3: detected capacity change from 0 to 512 [ 2156.491827][T19946] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2156.543798][T19946] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 2156.555913][T19946] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 2156.563620][T19946] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 2160.365935][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.372297][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.822923][T20024] 9pnet: Insufficient options for proto=fd [ 2165.004641][T20091] loop3: detected capacity change from 0 to 47 [ 2165.315825][T20100] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2165.470908][T20106] loop2: detected capacity change from 0 to 16 [ 2165.546081][T20106] erofs: (device loop2): mounted with root inode @ nid 36. [ 2165.791713][T20120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2166.252977][T20136] loop3: detected capacity change from 0 to 16 [ 2166.386619][T20136] erofs: (device loop3): mounted with root inode @ nid 36. [ 2167.486524][T20159] loop2: detected capacity change from 0 to 32768 [ 2167.593567][T20159] JBD2: Ignoring recovery information on journal [ 2167.601175][T20159] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 2167.609856][T20159] JBD2: bad block at offset 32 [ 2167.640025][T20159] (syz.2.22000,20159,0):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 2167.649843][T20159] (syz.2.22000,20159,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 2167.658185][T20159] (syz.2.22000,20159,0):ocfs2_check_volume:2465 ERROR: status = -22 [ 2167.666234][T20159] (syz.2.22000,20159,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 2167.674245][T20159] (syz.2.22000,20159,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 2167.701141][T20159] (syz.2.22000,20159,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 2167.720346][T20157] syz.1.21999 sent an empty control message without MSG_MORE. [ 2168.627940][T20176] loop1: detected capacity change from 0 to 32768 [ 2168.779804][T20176] [ 2168.779804][T20176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2168.779804][T20176] [ 2168.807060][T20176] read_mapping_page failed! [ 2168.812496][T20176] ERROR: (device loop1): txCommit: [ 2168.812496][T20176] [ 2168.830880][T20176] ERROR: (device loop1): remounting filesystem as read-only [ 2169.101376][T20186] loop1: detected capacity change from 0 to 128 [ 2169.388015][T20188] loop1: detected capacity change from 0 to 512 [ 2169.436558][T20188] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 2169.470556][T20188] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: comm syz.1.22015: inode #1792: comm syz.1.22015: iget: illegal inode # [ 2169.577796][T20188] EXT4-fs (loop1): Remounting filesystem read-only [ 2169.627379][T20188] EXT4-fs (loop1): no journal found [ 2169.644351][T20188] EXT4-fs (loop1): can't get journal size [ 2169.675560][T20188] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 2169.735549][T20188] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 2169.768450][T20188] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 2170.827474][T20208] loop3: detected capacity change from 0 to 16 [ 2170.938658][T20208] erofs: (device loop3): mounted with root inode @ nid 36. [ 2172.728199][T20225] loop4: detected capacity change from 0 to 512 [ 2172.806630][T20225] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2172.840886][T20225] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2172.873169][T20225] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2173.276938][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22037'. [ 2173.564331][ T263] block nbd0: Attempted send on invalid socket [ 2173.571972][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.561972][T20287] loop4: detected capacity change from 0 to 40427 [ 2174.688116][T20287] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 2174.701528][T20287] F2FS-fs (loop4): invalid crc value [ 2174.713600][T20287] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2174.755790][T20287] F2FS-fs (loop4): recover fsync data on readonly fs [ 2174.774634][T20287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2175.169671][ T26] audit: type=1326 audit(2048479257.085:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.3.22068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ede84e6c9 code=0x0 [ 2175.718570][T20314] loop2: detected capacity change from 0 to 2048 [ 2175.755678][T20314] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 2175.834645][T20314] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 2178.156425][T20357] loop0: detected capacity change from 0 to 512 [ 2178.417705][T20357] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 2178.447108][T20357] ext4 filesystem being mounted at /385/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2179.066538][T20378] 9pnet: Insufficient options for proto=fd [ 2179.693450][T20404] 9pnet: Insufficient options for proto=fd [ 2179.818907][T20409] loop2: detected capacity change from 0 to 16 [ 2179.869957][T20409] erofs: (device loop2): mounted with root inode @ nid 36. [ 2180.477539][T20424] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22121'. [ 2180.521483][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22121'. [ 2180.743868][T20428] 9pnet: Insufficient options for proto=fd [ 2182.018929][T20451] loop3: detected capacity change from 0 to 16 [ 2182.132075][T20451] erofs: (device loop3): mounted with root inode @ nid 36. [ 2183.628401][T20461] loop4: detected capacity change from 0 to 128 [ 2183.931056][T20470] 9pnet: Insufficient options for proto=fd [ 2184.824912][T20492] 9pnet: Insufficient options for proto=fd [ 2185.265301][T20502] loop3: detected capacity change from 0 to 128 [ 2186.560714][T20525] loop2: detected capacity change from 0 to 16 [ 2186.694047][T20525] erofs: (device loop2): mounted with root inode @ nid 36. [ 2187.019395][T20529] loop2: detected capacity change from 0 to 128 [ 2187.322702][T20533] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 2187.659733][T20543] loop4: detected capacity change from 0 to 512 [ 2187.853538][T20543] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2187.946630][T20543] ext4 filesystem being mounted at /176/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2188.051487][ T4295] Bluetooth: hci1: command 0x0406 tx timeout [ 2188.592278][T20565] 9pnet: Insufficient options for proto=fd [ 2188.857506][T20573] loop4: detected capacity change from 0 to 512 [ 2188.918297][T20573] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2188.928099][T20575] loop0: detected capacity change from 0 to 512 [ 2188.961738][T20573] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2189.006545][T20573] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2189.078290][T20575] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2189.143950][T20575] ext4 filesystem being mounted at /400/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2189.379311][T11895] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.543137][T11895] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.728688][T11895] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.806870][T11895] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.892521][T20577] chnl_net:caif_netlink_parms(): no params data found [ 2189.921021][T20600] 9pnet: Insufficient options for proto=fd [ 2190.238011][T20577] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.251799][T20577] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.259820][T20577] device bridge_slave_0 entered promiscuous mode [ 2190.313277][T11895] tipc: Left network mode [ 2190.330074][T20577] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.347611][T20577] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.372421][T20577] device bridge_slave_1 entered promiscuous mode [ 2190.480619][T20577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2190.515209][T20577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2190.636184][T20577] team0: Port device team_slave_0 added [ 2190.668753][T20577] team0: Port device team_slave_1 added [ 2190.678069][T20617] loop4: detected capacity change from 0 to 16 [ 2190.741004][T20617] erofs: (device loop4): mounted with root inode @ nid 36. [ 2190.833601][T20577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2190.840586][T20577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2190.956822][T20577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2191.023490][T20577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2191.040862][T20577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2191.096306][T20627] loop4: detected capacity change from 0 to 512 [ 2191.138947][T20577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2191.163062][T30861] Bluetooth: hci4: command 0x0409 tx timeout [ 2191.163247][T20627] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2191.221633][T20627] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2191.320691][T20577] device hsr_slave_0 entered promiscuous mode [ 2191.329277][T20627] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2191.409620][T20577] device hsr_slave_1 entered promiscuous mode [ 2191.939662][T11895] device hsr_slave_0 left promiscuous mode [ 2191.987424][T11895] device hsr_slave_1 left promiscuous mode [ 2192.016717][T11895] device veth1_macvtap left promiscuous mode [ 2192.034535][T11895] device veth0_macvtap left promiscuous mode [ 2192.040640][T11895] device veth1_vlan left promiscuous mode [ 2192.061462][T11895] device veth0_vlan left promiscuous mode [ 2192.758154][T11895] bond0 (unregistering): Released all slaves [ 2193.105199][T20667] loop0: detected capacity change from 0 to 512 [ 2193.241803][T17635] Bluetooth: hci4: command 0x041b tx timeout [ 2193.252143][T20667] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2193.301697][T20667] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2193.361742][T20667] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2193.613167][T20679] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22218'. [ 2193.637510][T20577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2193.661393][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22218'. [ 2193.684267][T20577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2193.803558][T20577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2193.857976][T20577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2194.189665][T20577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2194.238163][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2194.277155][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2194.308362][T20577] 8021q: adding VLAN 0 to HW filter on device team0 [ 2194.339587][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2194.362040][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2194.387299][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.394403][T10273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.432538][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2194.468090][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2194.492529][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2194.535765][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.542879][T10273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.589543][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2194.625429][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2194.655786][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2194.737946][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2194.765110][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2194.813575][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2194.851018][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2194.890826][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2194.932131][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2194.982152][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2195.023005][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2195.049989][T20577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2195.103363][T20721] loop4: detected capacity change from 0 to 16 [ 2195.177099][T20721] erofs: (device loop4): mounted with root inode @ nid 36. [ 2195.380520][T30861] Bluetooth: hci4: command 0x040f tx timeout [ 2195.560809][T20577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2195.589056][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2195.604277][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2195.663405][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2195.722178][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2195.782476][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2195.812649][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2195.845367][T20577] device veth0_vlan entered promiscuous mode [ 2195.865244][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2195.897259][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2195.939496][T20577] device veth1_vlan entered promiscuous mode [ 2195.962585][T20751] 9pnet: Insufficient options for proto=fd [ 2196.009958][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2196.035006][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2196.078660][T20754] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22236'. [ 2196.092881][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2196.111465][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22236'. [ 2196.137791][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2196.172689][T20577] device veth0_macvtap entered promiscuous mode [ 2196.197232][T20577] device veth1_macvtap entered promiscuous mode [ 2196.261643][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2196.282488][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2196.312032][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.341323][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.375191][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.413468][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.443667][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.476489][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.519044][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.530462][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.542393][T20577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2196.561504][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2196.610145][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2196.641096][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.671341][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.681266][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.738156][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.769866][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.781709][T20766] loop3: detected capacity change from 0 to 16 [ 2196.822530][T20766] erofs: (device loop3): mounted with root inode @ nid 36. [ 2196.843997][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.876325][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.907250][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.932869][T20577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2196.950420][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2196.989004][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2197.074328][T20577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.103880][T20577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.155610][T20577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.208648][T20577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.267184][T20778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22248'. [ 2197.315493][T20778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22248'. [ 2197.401572][T19064] Bluetooth: hci4: command 0x0419 tx timeout [ 2197.407859][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2197.437328][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2197.465652][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2197.493805][T20784] loop4: detected capacity change from 0 to 16 [ 2197.541471][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2197.556979][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2197.580470][T20784] erofs: (device loop4): mounted with root inode @ nid 36. [ 2197.604079][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2198.164198][T20802] 9pnet: Insufficient options for proto=fd [ 2198.510236][T20813] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22263'. [ 2198.550011][T20813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22263'. [ 2198.674741][T20819] loop0: detected capacity change from 0 to 16 [ 2198.795164][T20819] erofs: (device loop0): mounted with root inode @ nid 36. [ 2199.390812][T20841] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22277'. [ 2199.430566][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22277'. [ 2199.561194][T20843] loop4: detected capacity change from 0 to 128 [ 2200.030670][T20850] loop4: detected capacity change from 0 to 16 [ 2200.162532][T20850] erofs: (device loop4): mounted with root inode @ nid 36. [ 2200.519968][T20862] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22289'. [ 2200.596552][T20862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22289'. [ 2200.676065][T20866] loop4: detected capacity change from 0 to 128 [ 2201.474842][T20886] loop2: detected capacity change from 0 to 16 [ 2201.521456][T20886] erofs: (device loop2): mounted with root inode @ nid 36. [ 2202.002082][T20904] 9pnet: Insufficient options for proto=fd [ 2202.370883][T20917] loop0: detected capacity change from 0 to 16 [ 2202.464907][T20917] erofs: (device loop0): mounted with root inode @ nid 36. [ 2204.646440][T20957] loop4: detected capacity change from 0 to 128 [ 2205.141380][T20976] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22340'. [ 2205.170898][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22340'. [ 2205.597898][T20992] loop2: detected capacity change from 0 to 128 [ 2206.381823][T21019] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2207.764469][T21052] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2208.788531][T21065] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22379'. [ 2208.821393][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22379'. [ 2209.213863][T21075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2210.768050][T21103] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2210.962866][T21107] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22393'. [ 2210.998674][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22393'. [ 2212.527887][T21135] loop3: detected capacity change from 0 to 128 [ 2214.039587][T21165] loop3: detected capacity change from 0 to 128 [ 2215.425434][T21198] 9pnet: Could not find request transport: fd0x0000000000000007 [ 2215.659135][T21204] loop4: detected capacity change from 0 to 16 [ 2215.789128][T21204] erofs: (device loop4): mounted with root inode @ nid 36. [ 2215.897104][T21212] loop2: detected capacity change from 0 to 128 [ 2216.875350][T21242] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2217.012453][T21249] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22460'. [ 2217.037127][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22460'. [ 2217.318886][T21261] loop4: detected capacity change from 0 to 16 [ 2217.406132][T21261] erofs: (device loop4): mounted with root inode @ nid 36. [ 2217.507408][T21267] loop2: detected capacity change from 0 to 128 [ 2217.520471][T21269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2217.715065][T21276] 9pnet: Insufficient options for proto=fd [ 2218.104653][T21292] loop2: detected capacity change from 0 to 16 [ 2218.136383][T21292] erofs: (device loop2): mounted with root inode @ nid 36. [ 2218.284369][T21299] loop1: detected capacity change from 0 to 128 [ 2218.312862][T21301] 9pnet: Insufficient options for proto=fd [ 2218.666263][T21315] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22494'. [ 2218.727086][T21315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22494'. [ 2218.858616][T21325] loop1: detected capacity change from 0 to 512 [ 2218.901636][T21329] 9pnet: Insufficient options for proto=fd [ 2218.918682][T21325] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2218.938521][T21325] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2219.032159][T21325] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2219.397038][T21351] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22511'. [ 2219.441511][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22511'. [ 2219.642426][T21365] 9pnet: Insufficient options for proto=fd [ 2219.765268][T21373] loop4: detected capacity change from 0 to 512 [ 2219.840103][T21377] loop1: detected capacity change from 0 to 16 [ 2219.860697][T21373] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2219.895424][T21373] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2219.907239][T21377] erofs: (device loop1): mounted with root inode @ nid 36. [ 2219.936206][T21373] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2220.124526][T21393] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22528'. [ 2220.140529][T21390] loop3: detected capacity change from 0 to 128 [ 2220.186792][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22528'. [ 2220.403295][T21410] loop0: detected capacity change from 0 to 512 [ 2220.465706][T21410] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2220.486057][T21410] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2220.579132][T21410] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2220.592502][T21416] loop3: detected capacity change from 0 to 512 [ 2220.839610][T21416] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2220.861754][T21416] ext4 filesystem being mounted at /319/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2221.807416][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.816500][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.833783][T21451] loop0: detected capacity change from 0 to 512 [ 2221.969446][T21451] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2222.081967][T21451] ext4 filesystem being mounted at /462/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2222.333145][T21457] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22557'. [ 2222.363169][T21457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22557'. [ 2222.509907][T21462] loop0: detected capacity change from 0 to 128 [ 2223.881560][T19064] Bluetooth: hci2: command 0x0406 tx timeout [ 2224.455084][T21501] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22578'. [ 2224.490244][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22578'. [ 2224.805615][T21508] loop3: detected capacity change from 0 to 512 [ 2224.971456][T21508] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2224.990811][T21508] ext4 filesystem being mounted at /324/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2225.619854][T21525] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2225.760377][T21531] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22590'. [ 2225.810410][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22590'. [ 2225.956309][T21537] loop2: detected capacity change from 0 to 128 [ 2226.386300][T21551] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2226.690357][T21560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22604'. [ 2226.720211][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22604'. [ 2228.678235][T21604] loop4: detected capacity change from 0 to 512 [ 2228.773476][T21604] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2228.815159][T21604] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2228.880786][T21604] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2229.876384][T21622] loop3: detected capacity change from 0 to 512 [ 2229.995161][T21622] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2230.115559][T21622] ext4 filesystem being mounted at /336/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2231.637890][T21651] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2234.770031][T21695] loop1: detected capacity change from 0 to 512 [ 2234.856973][T21695] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2234.896749][T21695] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2234.940183][T21695] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2235.039653][T21701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2237.323889][T21728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2237.369940][T21730] loop2: detected capacity change from 0 to 512 [ 2237.446128][T21730] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2237.494587][T21730] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2237.531697][T21730] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2238.511623][T21748] loop1: detected capacity change from 0 to 128 [ 2241.210263][T21794] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2241.534191][T21804] loop3: detected capacity change from 0 to 128 [ 2241.704557][T21808] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22721'. [ 2241.754753][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22721'. [ 2242.048167][T21822] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2242.225110][T21832] loop3: detected capacity change from 0 to 128 [ 2242.286895][T21835] loop4: detected capacity change from 0 to 512 [ 2242.376329][T21835] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2242.416029][T21835] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2242.442935][T21840] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22736'. [ 2242.460321][T21835] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2242.472576][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22736'. [ 2242.849444][T21853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2243.013089][T21861] loop3: detected capacity change from 0 to 128 [ 2243.548603][T21878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2243.999635][T21891] loop4: detected capacity change from 0 to 128 [ 2244.112850][T21894] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22749'. [ 2244.152432][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22749'. [ 2244.814785][T21928] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22777'. [ 2244.861455][T21928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22777'. [ 2245.006574][T21932] loop2: detected capacity change from 0 to 512 [ 2245.112096][T21932] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2245.139534][T21932] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2245.230813][T21932] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2246.147412][T21983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22804'. [ 2246.177267][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22804'. [ 2246.749900][T22012] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22819'. [ 2246.783055][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22819'. [ 2247.493929][T22046] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22834'. [ 2247.516845][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22834'. [ 2247.739381][T22054] loop1: detected capacity change from 0 to 512 [ 2247.816880][T22054] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2247.846049][T22054] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2247.892217][T22054] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2248.555777][T22096] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22859'. [ 2248.605062][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22859'. [ 2249.128965][T22126] loop1: detected capacity change from 0 to 512 [ 2249.152982][T22128] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22876'. [ 2249.179372][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22876'. [ 2249.236930][T22126] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2249.288491][T22126] ext4 filesystem being mounted at /350/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2249.480889][T22145] loop3: detected capacity change from 0 to 512 [ 2249.492745][T30861] Bluetooth: hci3: command 0x0406 tx timeout [ 2249.627581][T22145] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2249.641679][T22145] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2249.682764][T22145] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2249.889882][T22162] loop1: detected capacity change from 0 to 512 [ 2249.911782][T22163] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22891'. [ 2249.953041][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22891'. [ 2250.068024][T22162] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2250.179934][T22162] ext4 filesystem being mounted at /355/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2251.386215][T22205] loop4: detected capacity change from 0 to 512 [ 2251.521051][T22205] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2251.556565][T22205] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2251.617587][T22205] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2252.721777][T22225] loop4: detected capacity change from 0 to 512 [ 2252.838743][T22225] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2252.981442][T22225] ext4 filesystem being mounted at /375/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2253.596868][T22242] loop4: detected capacity change from 0 to 512 [ 2253.645133][T22242] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2253.684523][T22242] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2253.728736][T22242] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2254.153236][T22266] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22927'. [ 2254.187889][T22268] loop2: detected capacity change from 0 to 512 [ 2254.201441][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22927'. [ 2254.266738][T22268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2254.326229][T22268] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.22940: invalid indirect mapped block 458752 (level 0) [ 2254.356536][T22268] EXT4-fs (loop2): 1 truncate cleaned up [ 2254.396472][T22268] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2254.659959][T22280] loop0: detected capacity change from 0 to 512 [ 2254.764555][T22280] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2254.775482][T22280] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2254.829005][T22280] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2255.257171][T22298] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22954'. [ 2255.275019][T22300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2255.297330][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22954'. [ 2255.670865][T22316] loop0: detected capacity change from 0 to 512 [ 2255.736123][T22316] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2255.761766][T22316] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2255.819866][T22316] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2256.181865][T22329] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22969'. [ 2256.208402][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22969'. [ 2256.626329][T22349] loop0: detected capacity change from 0 to 512 [ 2256.719776][T22349] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2256.760764][T22349] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2256.785000][T22349] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2257.132126][T22370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2257.310180][T22376] loop0: detected capacity change from 0 to 128 [ 2257.348349][T22376] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2257.385774][T22376] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2257.522533][T10273] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2259.713477][T22445] netlink: 156 bytes leftover after parsing attributes in process `syz.0.23026'. [ 2259.733136][T22445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23026'. [ 2260.393672][T22457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2262.058289][T22489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2262.761757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2262.888462][T22515] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2263.846876][T22539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2263.931463][T22541] loop2: detected capacity change from 0 to 512 [ 2264.051427][T22541] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2264.151032][T22541] ext4 filesystem being mounted at /172/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2265.127847][T22571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2266.344607][T22601] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2267.323066][T22622] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2268.302006][ T1431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.413601][T22655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2268.480323][ T1431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.568101][ T1431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.635724][ T1431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.684370][T22645] chnl_net:caif_netlink_parms(): no params data found [ 2268.818876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 2269.047609][T22645] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.088832][T22645] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.123759][T22645] device bridge_slave_0 entered promiscuous mode [ 2269.175115][T22645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.191744][T22645] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.210004][T22645] device bridge_slave_1 entered promiscuous mode [ 2269.313335][T22688] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2269.324184][T22645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2269.365463][T22645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2269.484412][T22645] team0: Port device team_slave_0 added [ 2269.527511][T22645] team0: Port device team_slave_1 added [ 2269.528682][T22698] loop3: detected capacity change from 0 to 512 [ 2269.552301][ T4256] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2269.599229][T22645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2269.624070][T22698] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2269.641880][T22645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2269.668310][T22698] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2269.711351][T22698] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2269.740415][T22645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2269.827381][T22645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2269.850470][T22645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2269.921421][ T4256] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2269.930497][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.932161][T22645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2269.988442][ T4256] usb 5-1: config 0 descriptor?? [ 2270.023481][T22715] tmpfs: Unknown parameter 'noswap' [ 2270.104564][T22645] device hsr_slave_0 entered promiscuous mode [ 2270.121662][T17635] Bluetooth: hci0: command 0x0409 tx timeout [ 2270.137304][T22645] device hsr_slave_1 entered promiscuous mode [ 2270.148767][T22645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2270.177991][T22645] Cannot create hsr debugfs directory [ 2270.437550][T22725] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2270.485424][ T4256] usb 5-1: Cannot set MAC address [ 2270.490610][ T4256] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 2270.540289][ T4256] usb 5-1: USB disconnect, device number 15 [ 2270.574328][T22730] loop2: detected capacity change from 0 to 512 [ 2270.654821][ T1431] device hsr_slave_0 left promiscuous mode [ 2270.677079][ T1431] device hsr_slave_1 left promiscuous mode [ 2270.695886][T22730] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2270.712582][ T1431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2270.720140][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.729304][T22730] ext4 filesystem being mounted at /188/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2270.741050][ T1431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2270.750606][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2270.812018][ T1431] device bridge_slave_1 left promiscuous mode [ 2270.818247][ T1431] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.834489][ T1431] device bridge_slave_0 left promiscuous mode [ 2270.850891][ T1431] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.895889][ T1431] device veth1_macvtap left promiscuous mode [ 2270.908506][ T1431] device veth0_macvtap left promiscuous mode [ 2270.919259][ T1431] device veth1_vlan left promiscuous mode [ 2270.931567][ T1431] device veth0_vlan left promiscuous mode [ 2271.371191][ T1431] team0 (unregistering): Port device team_slave_1 removed [ 2271.387303][ T1431] team0 (unregistering): Port device team_slave_0 removed [ 2271.401031][ T1431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2271.424084][ T1431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2271.513734][ T1431] bond0 (unregistering): Released all slaves [ 2272.029654][T22645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2272.059714][T22770] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2272.080898][T22645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2272.108673][T22645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2272.145123][T22645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2272.201606][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 2272.499856][T22792] loop2: detected capacity change from 0 to 512 [ 2272.518645][T22645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2272.560522][T22792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2272.568023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2272.621899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2272.626062][T22792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2272.641525][T22645] 8021q: adding VLAN 0 to HW filter on device team0 [ 2272.670353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2272.690854][T22792] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2272.709364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2272.884646][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.891776][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2272.919270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2272.964394][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2272.992653][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2273.041751][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.048832][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.075762][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2273.120532][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2273.149301][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2273.209975][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2273.250241][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2273.280030][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2273.310498][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2273.332853][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2273.361743][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2273.381934][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2273.402000][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2273.412914][T22645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2273.670612][T22835] loop1: detected capacity change from 0 to 512 [ 2273.784304][T22835] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2273.831069][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2273.841697][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2273.844795][T22835] ext4 filesystem being mounted at /417/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2273.854641][T22645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2274.006129][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2274.059429][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2274.156744][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2274.194167][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2274.260339][T22645] device veth0_vlan entered promiscuous mode [ 2274.292551][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 2274.292594][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2274.348214][T10273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2274.392111][T22645] device veth1_vlan entered promiscuous mode [ 2274.453347][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2274.504372][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2274.542120][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2274.561215][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2274.613146][T22645] device veth0_macvtap entered promiscuous mode [ 2274.672065][T22645] device veth1_macvtap entered promiscuous mode [ 2274.691042][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2274.709678][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2274.750801][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.791283][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.823837][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.841499][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.861292][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.880597][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.910767][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.931745][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.957928][T22645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2274.976669][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2274.992775][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2275.012343][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2275.034704][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2275.057976][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2275.089807][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2275.112517][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2275.134052][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2275.154887][T22645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2275.177596][T22645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2275.203176][T22645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2275.223684][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2275.235452][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2275.262204][T22645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.276531][T22645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.300318][T22645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.327801][T22645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.458364][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.482852][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.510047][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2275.524389][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.543208][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.561975][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2276.268672][T22896] loop1: detected capacity change from 0 to 512 [ 2276.372256][T19064] Bluetooth: hci0: command 0x0419 tx timeout [ 2276.386819][T22896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2276.411650][T22896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2276.440262][T22896] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2276.526098][T22900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2277.173250][T22916] loop3: detected capacity change from 0 to 512 [ 2277.258792][T22916] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2277.291478][T22916] ext4 filesystem being mounted at /438/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2277.508858][T22926] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2277.994237][T22953] loop3: detected capacity change from 0 to 512 [ 2278.054093][T22955] loop4: detected capacity change from 0 to 512 [ 2278.079603][T22955] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2278.090570][T22955] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2278.106514][T22955] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2278.141828][T22953] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2278.158146][T22953] ext4 filesystem being mounted at /442/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2278.287589][T22962] netlink: 192 bytes leftover after parsing attributes in process `syz.0.23228'. [ 2278.360397][T22966] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2278.493924][T22972] loop3: detected capacity change from 0 to 256 [ 2278.535725][T22972] exfat: Deprecated parameter 'utf8' [ 2278.549150][T22972] exfat: Deprecated parameter 'utf8' [ 2278.560396][T22972] exfat: Deprecated parameter 'utf8' [ 2278.589933][T22972] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 2278.679108][T22982] exfat: Deprecated parameter 'utf8' [ 2278.697189][T22982] exfat: Deprecated parameter 'utf8' [ 2278.709718][T22982] exfat: Deprecated parameter 'utf8' [ 2278.784943][T22985] loop4: detected capacity change from 0 to 512 [ 2278.799655][T22987] loop0: detected capacity change from 0 to 512 [ 2278.858626][T22985] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2278.917369][T22985] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2278.931010][T22987] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2278.947449][T22987] ext4 filesystem being mounted at /6/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2278.949742][T22994] netlink: 192 bytes leftover after parsing attributes in process `syz.3.23241'. [ 2279.004746][T22985] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2279.656796][T23026] loop2: detected capacity change from 0 to 512 [ 2279.742730][T23026] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2279.751587][T23026] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2279.774060][T23026] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2280.037146][T23045] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2280.288296][T23059] loop2: detected capacity change from 0 to 512 [ 2280.344371][T23059] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2280.359402][T23059] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2280.370884][T23063] netlink: 156 bytes leftover after parsing attributes in process `syz.0.23273'. [ 2280.397120][T23063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23273'. [ 2280.414602][T23059] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2280.471480][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23273'. [ 2280.512448][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23273'. [ 2280.755094][T23072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2280.824369][T23077] loop2: detected capacity change from 0 to 16 [ 2280.911492][T23077] erofs: (device loop2): mounted with root inode @ nid 36. [ 2280.937314][ T26] audit: type=1800 audit(2048479362.855:893): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23279" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 2280.965122][T23083] loop4: detected capacity change from 0 to 512 [ 2281.089553][T23083] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2281.106533][T23083] ext4 filesystem being mounted at /460/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2281.193364][T23094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.23286'. [ 2281.219646][ T4256] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2281.246709][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23286'. [ 2281.267657][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23286'. [ 2281.286167][T23096] loop4: detected capacity change from 0 to 512 [ 2281.300966][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23286'. [ 2281.345773][T23096] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2281.354954][T23096] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2281.383156][T23096] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2281.491650][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 2281.553015][T23103] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2281.651817][ T4256] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2281.751836][ T4256] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.787606][ T4256] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 2281.819749][ T4256] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2281.834262][ T4256] usb 1-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 2281.847437][ T4256] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2282.032683][ T4256] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2282.057708][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.073680][ T4256] usb 1-1: Product: syz [ 2282.077908][ T4256] usb 1-1: Manufacturer: syz [ 2282.087154][ T4256] usb 1-1: SerialNumber: syz [ 2282.407612][T23146] loop4: detected capacity change from 0 to 512 [ 2282.463973][T23148] loop2: detected capacity change from 0 to 512 [ 2282.498433][T23148] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2282.516674][T23148] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2282.544434][T23148] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2282.551982][T23146] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2282.633651][T23146] ext4 filesystem being mounted at /468/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2283.243909][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.250257][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.258697][T23179] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2284.091595][ T4256] usb 1-1: 0:5 : does not exist [ 2284.161012][ T4256] usb 1-1: USB disconnect, device number 27 [ 2284.456308][T18790] udevd[18790]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2284.509530][T23202] __nla_validate_parse: 12 callbacks suppressed [ 2284.509546][T23202] netlink: 156 bytes leftover after parsing attributes in process `syz.2.23337'. [ 2284.588299][T23202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23337'. [ 2284.621393][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23337'. [ 2284.647839][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23337'. [ 2284.764772][T23208] loop2: detected capacity change from 0 to 512 [ 2284.816100][T23208] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2284.829822][T23208] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2284.901681][T23208] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2285.459858][T23218] loop2: detected capacity change from 0 to 512 [ 2285.523516][T23218] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2285.631649][T23218] ext4 filesystem being mounted at /242/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2285.656896][T23227] netlink: 156 bytes leftover after parsing attributes in process `syz.1.23343'. [ 2285.877125][T23235] netlink: 156 bytes leftover after parsing attributes in process `syz.3.23352'. [ 2285.921037][T23235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23352'. [ 2286.389547][T23254] loop2: detected capacity change from 0 to 512 [ 2286.520208][T23254] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2286.656807][T23254] ext4 filesystem being mounted at /248/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2286.824695][T23262] netlink: 156 bytes leftover after parsing attributes in process `syz.3.23366'. [ 2286.851637][T23262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23366'. [ 2286.951990][T23264] netlink: 'syz.2.23365': attribute type 1 has an invalid length. [ 2286.994046][T23264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2287.076930][T23264] device macvlan2 entered promiscuous mode [ 2287.157038][T23264] device bond1 entered promiscuous mode [ 2287.177585][T23264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2287.217017][T23264] team0: Port device macvlan2 added [ 2287.680717][T23286] loop0: detected capacity change from 0 to 512 [ 2287.753423][T23286] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2287.760462][T23286] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2287.828014][T23286] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2288.299330][T23289] loop0: detected capacity change from 0 to 512 [ 2288.401156][T23289] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2288.461415][T23289] ext4 filesystem being mounted at /20/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2289.351397][ T4256] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2289.711536][ T4256] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2289.720224][ T4256] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2289.747422][ T4256] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2289.772373][ T4256] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2289.806532][ T4256] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2289.818316][T23324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2289.861072][T23327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.23394'. [ 2289.901088][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23394'. [ 2289.971509][ T4256] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2289.980589][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2290.021311][ T4256] usb 1-1: Product: syz [ 2290.025510][ T4256] usb 1-1: Manufacturer: syz [ 2290.031381][T23333] loop1: detected capacity change from 0 to 64 [ 2290.082247][ T4256] cdc_wdm 1-1:1.0: skipping garbage [ 2290.087493][ T4256] cdc_wdm 1-1:1.0: skipping garbage [ 2290.093749][T23333] Bad inode number on dev loop1: 6 is out of range [ 2290.122835][ T4256] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2290.128768][ T4256] cdc_wdm 1-1:1.0: Unknown control protocol [ 2290.909444][T23353] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2290.985937][T18379] usb 1-1: USB disconnect, device number 28 [ 2291.167932][T23357] netlink: 156 bytes leftover after parsing attributes in process `syz.4.23408'. [ 2291.201348][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23408'. [ 2291.916985][T23384] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 16 [ 2293.610731][T23394] loop4: detected capacity change from 0 to 32768 [ 2293.661412][T23394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.23425 (23394) [ 2293.692129][T23402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2293.708076][T23394] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 2293.718225][T23394] BTRFS info (device loop4): using free space tree [ 2293.724836][T23394] BTRFS info (device loop4): has skinny extents [ 2294.028325][T23394] BTRFS info (device loop4): enabling ssd optimizations [ 2295.273677][T23477] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2295.824450][T23509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2296.050143][T23521] netlink: 'syz.2.23477': attribute type 2 has an invalid length. [ 2296.126259][T23521] netlink: 'syz.2.23477': attribute type 1 has an invalid length. [ 2296.190693][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23477'. [ 2296.335094][T23530] xt_CT: No such helper "snmp" [ 2297.183687][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23501'. [ 2297.630707][T23593] loop2: detected capacity change from 0 to 1024 [ 2297.817280][T23597] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2298.047618][T23603] loop1: detected capacity change from 0 to 128 [ 2298.131554][T23603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2298.161603][T23603] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2299.467602][T23627] loop4: detected capacity change from 0 to 256 [ 2299.595743][T23627] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 2299.735967][T23633] loop1: detected capacity change from 0 to 512 [ 2299.947860][T23633] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2300.081390][T23633] ext4 filesystem being mounted at /503/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2300.965132][T23675] loop0: detected capacity change from 0 to 512 [ 2301.138941][T23675] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2301.170173][T23675] ext4 filesystem being mounted at /49/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2301.276957][T23685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2303.738924][T23693] loop1: detected capacity change from 0 to 128 [ 2303.808559][T23693] FAT-fs (loop1): Directory bread(block 414) failed [ 2303.823396][T23693] FAT-fs (loop1): Directory bread(block 415) failed [ 2303.857496][T23693] FAT-fs (loop1): Directory bread(block 416) failed [ 2303.879607][T23693] FAT-fs (loop1): Directory bread(block 417) failed [ 2303.936259][T23693] FAT-fs (loop1): Directory bread(block 418) failed [ 2303.961872][T23693] FAT-fs (loop1): Directory bread(block 419) failed [ 2303.968521][T23693] FAT-fs (loop1): Directory bread(block 420) failed [ 2304.012967][T23693] FAT-fs (loop1): Directory bread(block 421) failed [ 2304.258902][T23717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2304.395799][T23727] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 2304.594225][T23735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2304.600425][T23733] loop4: detected capacity change from 0 to 512 [ 2304.765820][T23733] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2304.801561][T23733] ext4 filesystem being mounted at /524/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2305.208975][T23756] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2305.678605][T23772] loop2: detected capacity change from 0 to 512 [ 2305.700556][T23774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23598'. [ 2305.829168][T23772] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2305.869981][T23772] ext4 filesystem being mounted at /285/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2306.008371][T23789] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2306.038707][T23791] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2306.498081][T23805] loop1: detected capacity change from 0 to 64 [ 2306.509865][T23805] hfs: unable to parse mount options [ 2306.716192][T23813] loop1: detected capacity change from 0 to 512 [ 2306.809006][T23823] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2306.851063][T23813] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2306.891441][T23813] ext4 filesystem being mounted at /519/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2306.918035][T23830] loop4: detected capacity change from 0 to 64 [ 2306.973973][T23827] overlayfs: failed to resolve './bus': -2 [ 2307.640373][T23854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2307.794291][T23864] overlayfs: failed to resolve './bus': -2 [ 2307.816859][T23863] loop3: detected capacity change from 0 to 512 [ 2307.938132][T23863] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2307.971400][T23863] ext4 filesystem being mounted at /527/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2308.366679][T23889] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2308.461302][T18385] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 2308.503212][T23895] overlayfs: failed to resolve './bus': -2 [ 2308.991480][T18385] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2309.000617][T18385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.008684][T18385] usb 5-1: Product: syz [ 2309.012902][T18385] usb 5-1: Manufacturer: syz [ 2309.017502][T18385] usb 5-1: SerialNumber: syz [ 2309.029369][T18385] usb 5-1: config 0 descriptor?? [ 2309.330629][T18385] usb_8dev 5-1:0.0 can0: sending command message failed [ 2309.338090][T18385] usb_8dev 5-1:0.0 can0: can't get firmware version [ 2309.391849][T18385] usb_8dev: probe of 5-1:0.0 failed with error -22 [ 2309.407183][T18385] usb 5-1: USB disconnect, device number 16 [ 2310.717280][T23912] loop0: detected capacity change from 0 to 4096 [ 2310.727881][T23917] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2310.828129][T23925] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2310.897654][T23924] loop3: detected capacity change from 0 to 512 [ 2311.032768][T23924] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2311.060893][T23924] ext4 filesystem being mounted at /533/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2311.374065][T23947] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2311.648832][T23961] loop1: detected capacity change from 0 to 512 [ 2311.781829][T23961] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2311.784378][T23972] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.23686'. [ 2311.805928][T23961] ext4 filesystem being mounted at /532/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2311.970700][T23980] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2312.082652][T23987] loop0: detected capacity change from 0 to 64 [ 2312.442711][T24002] loop0: detected capacity change from 0 to 512 [ 2312.547558][T24002] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2312.612314][T24002] ext4 filesystem being mounted at /70/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2312.933836][T24017] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2312.937979][T24020] loop1: detected capacity change from 0 to 2048 [ 2313.052556][T24020] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2313.201674][T24032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23710'. [ 2313.558581][T24018] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 2313.601578][T24018] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1536 with max blocks 10 with error 28 [ 2313.691406][T24018] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2313.691406][T24018] [ 2313.714696][T24046] loop2: detected capacity change from 0 to 512 [ 2313.731283][T24018] EXT4-fs (loop1): Total free blocks count 0 [ 2313.748709][T24018] EXT4-fs (loop1): Free/Dirty block details [ 2313.766370][T24018] EXT4-fs (loop1): free_blocks=2415919504 [ 2313.823050][T24018] EXT4-fs (loop1): dirty_blocks=16 [ 2313.828243][T24018] EXT4-fs (loop1): Block reservation details [ 2313.836800][T24046] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 2313.873489][T24018] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 2313.885973][T24046] ext4 filesystem being mounted at /314/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2314.349044][T24054] loop3: detected capacity change from 0 to 40427 [ 2314.464455][T24054] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 2314.557027][T24060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2314.783704][T24070] loop3: detected capacity change from 0 to 512 [ 2314.984612][T24070] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2315.012390][T24078] loop2: detected capacity change from 0 to 256 [ 2315.020905][T24070] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2315.080730][T24070] [ 2315.083096][T24070] ====================================================== [ 2315.090105][T24070] WARNING: possible circular locking dependency detected [ 2315.097112][T24070] syzkaller #0 Not tainted [ 2315.101505][T24070] ------------------------------------------------------ [ 2315.108499][T24070] syz.3.23728/24070 is trying to acquire lock: [ 2315.114623][T24070] ffff888067b820a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 2315.123550][T24070] [ 2315.123550][T24070] but task is already holding lock: [ 2315.130889][T24070] ffff888067bd2060 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 2315.140212][T24070] [ 2315.140212][T24070] which lock already depends on the new lock. [ 2315.140212][T24070] [ 2315.150590][T24070] [ 2315.150590][T24070] the existing dependency chain (in reverse order) is: [ 2315.159583][T24070] [ 2315.159583][T24070] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 2315.167203][T24070] down_write+0x38/0x60 [ 2315.171945][T24070] ext4_truncate+0x96d/0x10d0 [ 2315.177123][T24070] ext4_setattr+0xffe/0x19e0 [ 2315.182212][T24070] notify_change+0xbcd/0xee0 [ 2315.187355][T24070] do_truncate+0x197/0x220 [ 2315.192317][T24070] do_sys_ftruncate+0x31b/0x3d0 [ 2315.197668][T24070] do_syscall_64+0x4c/0xa0 [ 2315.202592][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2315.208983][T24070] [ 2315.208983][T24070] -> #4 (jbd2_handle){++++}-{0:0}: [ 2315.216254][T24070] start_this_handle+0x1338/0x15a0 [ 2315.221903][T24070] jbd2__journal_start+0x2b7/0x5a0 [ 2315.227513][T24070] jbd2_journal_start+0x26/0x30 [ 2315.232860][T24070] ocfs2_start_trans+0x374/0x6c0 [ 2315.238366][T24070] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 2315.244583][T24070] ocfs2_dismount_volume+0x1de/0x880 [ 2315.250419][T24070] generic_shutdown_super+0x130/0x300 [ 2315.256294][T24070] kill_block_super+0x7c/0xe0 [ 2315.261472][T24070] deactivate_locked_super+0x93/0xf0 [ 2315.267255][T24070] cleanup_mnt+0x418/0x4d0 [ 2315.272217][T24070] task_work_run+0x125/0x1a0 [ 2315.277362][T24070] exit_to_user_mode_loop+0x10f/0x130 [ 2315.283291][T24070] exit_to_user_mode_prepare+0xee/0x180 [ 2315.289338][T24070] syscall_exit_to_user_mode+0x16/0x40 [ 2315.295297][T24070] do_syscall_64+0x58/0xa0 [ 2315.300210][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2315.306602][T24070] [ 2315.306602][T24070] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 2315.315089][T24070] down_read+0x44/0x2e0 [ 2315.319747][T24070] ocfs2_start_trans+0x368/0x6c0 [ 2315.325192][T24070] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 2315.331423][T24070] ocfs2_dismount_volume+0x1de/0x880 [ 2315.337219][T24070] generic_shutdown_super+0x130/0x300 [ 2315.343103][T24070] kill_block_super+0x7c/0xe0 [ 2315.348288][T24070] deactivate_locked_super+0x93/0xf0 [ 2315.354074][T24070] cleanup_mnt+0x418/0x4d0 [ 2315.358995][T24070] task_work_run+0x125/0x1a0 [ 2315.364093][T24070] exit_to_user_mode_loop+0x10f/0x130 [ 2315.369974][T24070] exit_to_user_mode_prepare+0xee/0x180 [ 2315.376024][T24070] syscall_exit_to_user_mode+0x16/0x40 [ 2315.381988][T24070] do_syscall_64+0x58/0xa0 [ 2315.386930][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2315.393334][T24070] [ 2315.393334][T24070] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 2315.400789][T24070] ocfs2_start_trans+0x269/0x6c0 [ 2315.406232][T24070] ocfs2_acquire_dquot+0x677/0xaf0 [ 2315.411842][T24070] dqget+0x778/0xeb0 [ 2315.416240][T24070] __dquot_initialize+0x3b6/0xcb0 [ 2315.421768][T24070] ocfs2_get_init_inode+0x138/0x1b0 [ 2315.427471][T24070] ocfs2_mknod+0x8aa/0x22b0 [ 2315.432476][T24070] ocfs2_create+0x192/0x410 [ 2315.437483][T24070] path_openat+0x11e1/0x2f30 [ 2315.442573][T24070] do_filp_open+0x1b3/0x3e0 [ 2315.447576][T24070] do_sys_openat2+0x142/0x4a0 [ 2315.452754][T24070] __x64_sys_openat+0x135/0x160 [ 2315.458107][T24070] do_syscall_64+0x4c/0xa0 [ 2315.463022][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2315.469415][T24070] [ 2315.469415][T24070] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 2315.478247][T24070] down_write+0x38/0x60 [ 2315.482906][T24070] ocfs2_create_local_dquot+0x194/0x1750 [ 2315.489038][T24070] ocfs2_acquire_dquot+0x7cb/0xaf0 [ 2315.494646][T24070] dqget+0x778/0xeb0 [ 2315.499042][T24070] __dquot_initialize+0x3b6/0xcb0 [ 2315.504563][T24070] ocfs2_get_init_inode+0x138/0x1b0 [ 2315.510259][T24070] ocfs2_mknod+0x8aa/0x22b0 [ 2315.515263][T24070] ocfs2_create+0x192/0x410 [ 2315.520268][T24070] path_openat+0x11e1/0x2f30 [ 2315.525359][T24070] do_filp_open+0x1b3/0x3e0 [ 2315.530363][T24070] do_sys_openat2+0x142/0x4a0 [ 2315.535540][T24070] __x64_sys_openat+0x135/0x160 [ 2315.540893][T24070] do_syscall_64+0x4c/0xa0 [ 2315.545804][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2315.552198][T24070] [ 2315.552198][T24070] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 2315.559816][T24070] __lock_acquire+0x2c33/0x7c60 [ 2315.565258][T24070] lock_acquire+0x197/0x3f0 [ 2315.570266][T24070] __mutex_lock_common+0x1eb/0x2390 [ 2315.575970][T24070] mutex_lock_nested+0x17/0x20 [ 2315.581239][T24070] dquot_commit+0x5a/0x410 [ 2315.586160][T24070] ext4_write_dquot+0x1f0/0x360 [ 2315.591551][T24070] mark_all_dquot_dirty+0xf9/0x400 [ 2315.597161][T24070] __dquot_alloc_space+0x5d0/0xe20 [ 2315.602770][T24070] ext4_mb_new_blocks+0xf68/0x4940 [ 2315.608380][T24070] ext4_ext_map_blocks+0x191a/0x6650 [ 2315.614193][T24070] ext4_map_blocks+0x981/0x1b30 [ 2315.619542][T24070] _ext4_get_block+0x1d7/0x4e0 [ 2315.624801][T24070] ext4_block_write_begin+0x60f/0x1210 [ 2315.630758][T24070] ext4_write_begin+0x6c2/0x15c0 [ 2315.636194][T24070] ext4_da_write_begin+0x435/0xb30 [ 2315.641803][T24070] __page_symlink+0xf6/0x1f0 [ 2315.646893][T24070] ext4_symlink+0x880/0xcc0 [ 2315.651931][T24070] vfs_symlink+0x247/0x3d0 [ 2315.656844][T24070] do_symlinkat+0x1be/0x6c0 [ 2315.661847][T24070] __x64_sys_symlink+0x7a/0x90 [ 2315.667107][T24070] do_syscall_64+0x4c/0xa0 [ 2315.672023][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2315.678416][T24070] [ 2315.678416][T24070] other info that might help us debug this: [ 2315.678416][T24070] [ 2315.688621][T24070] Chain exists of: [ 2315.688621][T24070] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 2315.688621][T24070] [ 2315.701282][T24070] Possible unsafe locking scenario: [ 2315.701282][T24070] [ 2315.708705][T24070] CPU0 CPU1 [ 2315.714043][T24070] ---- ---- [ 2315.719380][T24070] lock(&ei->i_data_sem); [ 2315.723775][T24070] lock(jbd2_handle); [ 2315.730337][T24070] lock(&ei->i_data_sem); [ 2315.737244][T24070] lock(&dquot->dq_lock); [ 2315.741639][T24070] [ 2315.741639][T24070] *** DEADLOCK *** [ 2315.741639][T24070] [ 2315.749754][T24070] 4 locks held by syz.3.23728/24070: [ 2315.755014][T24070] #0: ffff8880614da460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 2315.764131][T24070] #1: ffff8880459e0de8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 2315.774723][T24070] #2: ffff888067bd2060 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 2315.784440][T24070] #3: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 2315.793461][T24070] [ 2315.793461][T24070] stack backtrace: [ 2315.799321][T24070] CPU: 1 PID: 24070 Comm: syz.3.23728 Not tainted syzkaller #0 [ 2315.806837][T24070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2315.816879][T24070] Call Trace: [ 2315.820139][T24070] [ 2315.823053][T24070] dump_stack_lvl+0x168/0x230 [ 2315.827735][T24070] ? load_image+0x3b0/0x3b0 [ 2315.832224][T24070] ? show_regs_print_info+0x20/0x20 [ 2315.837413][T24070] ? print_circular_bug+0x12b/0x1a0 [ 2315.842588][T24070] check_noncircular+0x274/0x310 [ 2315.847504][T24070] ? add_chain_block+0x940/0x940 [ 2315.852418][T24070] ? lockdep_lock+0xdc/0x1e0 [ 2315.856989][T24070] ? mark_lock+0x94/0x320 [ 2315.861303][T24070] __lock_acquire+0x2c33/0x7c60 [ 2315.866133][T24070] ? hlock_conflict+0x59/0x1f0 [ 2315.870878][T24070] ? check_noncircular+0x16f/0x310 [ 2315.875966][T24070] ? add_chain_block+0x940/0x940 [ 2315.880878][T24070] ? lockdep_lock+0xdc/0x1e0 [ 2315.885448][T24070] ? verify_lock_unused+0x140/0x140 [ 2315.890627][T24070] ? lockdep_unlock+0x134/0x2d0 [ 2315.895458][T24070] ? lockdep_lock+0x1e0/0x1e0 [ 2315.900113][T24070] ? check_noncircular+0x16f/0x310 [ 2315.905203][T24070] ? mark_lock+0x94/0x320 [ 2315.909512][T24070] ? __lock_acquire+0x13ad/0x7c60 [ 2315.914519][T24070] lock_acquire+0x197/0x3f0 [ 2315.919004][T24070] ? dquot_commit+0x5a/0x410 [ 2315.923575][T24070] ? __might_sleep+0xf0/0xf0 [ 2315.928205][T24070] ? read_lock_is_recursive+0x10/0x10 [ 2315.933563][T24070] ? rcu_lock_release+0x5/0x20 [ 2315.938331][T24070] ? dquot_commit+0x5a/0x410 [ 2315.942900][T24070] __mutex_lock_common+0x1eb/0x2390 [ 2315.948083][T24070] ? dquot_commit+0x5a/0x410 [ 2315.952657][T24070] ? __might_sleep+0xf0/0xf0 [ 2315.957229][T24070] ? mutex_lock_io_nested+0x60/0x60 [ 2315.962417][T24070] mutex_lock_nested+0x17/0x20 [ 2315.967164][T24070] dquot_commit+0x5a/0x410 [ 2315.971560][T24070] ? __ext4_journal_start_sb+0x1bd/0x360 [ 2315.977172][T24070] ext4_write_dquot+0x1f0/0x360 [ 2315.982005][T24070] mark_all_dquot_dirty+0xf9/0x400 [ 2315.987096][T24070] __dquot_alloc_space+0x5d0/0xe20 [ 2315.992190][T24070] ext4_mb_new_blocks+0xf68/0x4940 [ 2315.997293][T24070] ? ext4_mb_pa_callback+0xd0/0xd0 [ 2316.002383][T24070] ? ext4_ext_check_overlap+0x15f/0x560 [ 2316.007906][T24070] ? ext4_inode_to_goal_block+0x313/0x450 [ 2316.013605][T24070] ext4_ext_map_blocks+0x191a/0x6650 [ 2316.018868][T24070] ? rcu_lock_release+0x5/0x20 [ 2316.023619][T24070] ? ext4_ext_release+0x10/0x10 [ 2316.028450][T24070] ? rwsem_write_trylock+0x12f/0x1b0 [ 2316.033719][T24070] ext4_map_blocks+0x981/0x1b30 [ 2316.038549][T24070] ? ext4_issue_zeroout+0x250/0x250 [ 2316.043727][T24070] _ext4_get_block+0x1d7/0x4e0 [ 2316.048470][T24070] ? ext4_get_block+0x40/0x40 [ 2316.053126][T24070] ext4_block_write_begin+0x60f/0x1210 [ 2316.058566][T24070] ? ext4_es_is_delayed+0x40/0x40 [ 2316.063569][T24070] ? ext4_print_free_blocks+0x390/0x390 [ 2316.069094][T24070] ? __ext4_journal_start_sb+0x1bd/0x360 [ 2316.074705][T24070] ext4_write_begin+0x6c2/0x15c0 [ 2316.079626][T24070] ? ext4_readahead+0x110/0x110 [ 2316.084462][T24070] ? __ext4_mark_inode_dirty+0x4d5/0x700 [ 2316.090073][T24070] ext4_da_write_begin+0x435/0xb30 [ 2316.095162][T24070] ? trace_ext4_allocate_inode+0x84/0x1d0 [ 2316.100864][T24070] ? ext4_set_page_dirty+0x320/0x320 [ 2316.106126][T24070] ? ext4_orphan_add+0x124/0x11e0 [ 2316.111127][T24070] ? pagecache_write_begin+0x33/0xa0 [ 2316.116462][T24070] __page_symlink+0xf6/0x1f0 [ 2316.121033][T24070] ? page_readlink+0x1a0/0x1a0 [ 2316.125777][T24070] ? __ext4_journal_stop+0x30/0x190 [ 2316.130954][T24070] ? ext4_symlink+0x74b/0xcc0 [ 2316.135612][T24070] ext4_symlink+0x880/0xcc0 [ 2316.140092][T24070] ? lookup_one_qstr_excl+0x11c/0x240 [ 2316.145442][T24070] ? ext4_unlink+0x500/0x500 [ 2316.150011][T24070] ? inode_permission+0xef/0x480 [ 2316.154926][T24070] ? bpf_lsm_inode_symlink+0x5/0x10 [ 2316.160151][T24070] ? security_inode_symlink+0xb2/0x100 [ 2316.165624][T24070] vfs_symlink+0x247/0x3d0 [ 2316.170025][T24070] do_symlinkat+0x1be/0x6c0 [ 2316.174509][T24070] ? __check_object_size+0x30c/0x410 [ 2316.179778][T24070] ? vfs_symlink+0x3d0/0x3d0 [ 2316.184357][T24070] ? getname_flags+0x1fe/0x500 [ 2316.189099][T24070] __x64_sys_symlink+0x7a/0x90 [ 2316.193844][T24070] do_syscall_64+0x4c/0xa0 [ 2316.198238][T24070] ? clear_bhb_loop+0x30/0x80 [ 2316.202893][T24070] ? clear_bhb_loop+0x30/0x80 [ 2316.207549][T24070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2316.213429][T24070] RIP: 0033:0x7f4ede84e6c9 [ 2316.217826][T24070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2316.237413][T24070] RSP: 002b:00007f4edcab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 2316.245811][T24070] RAX: ffffffffffffffda RBX: 00007f4edeaa4fa0 RCX: 00007f4ede84e6c9 [ 2316.253762][T24070] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000200000001640 [ 2316.261710][T24070] RBP: 00007f4ede8d0f91 R08: 0000000000000000 R09: 0000000000000000 [ 2316.269659][T24070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2316.277607][T24070] R13: 00007f4edeaa5038 R14: 00007f4edeaa4fa0 R15: 00007fff94068288 [ 2316.285564][T24070] [ 2316.288668][ C1] vkms_vblank_simulate: vblank timer overrun [ 2316.308124][T23447] Bluetooth: hci4: command 0x0406 tx timeout [ 2316.359152][T24078] FAT-fs (loop2): Directory bread(block 64) failed [ 2316.388184][T24078] FAT-fs (loop2): Directory bread(block 65) failed [ 2316.414101][T24078] FAT-fs (loop2): Directory bread(block 66) failed [ 2316.438128][T24078] FAT-fs (loop2): Directory bread(block 67) failed [ 2316.462546][T24078] FAT-fs (loop2): Directory bread(block 68) failed [ 2316.484823][T24078] FAT-fs (loop2): Directory bread(block 69) failed [ 2316.496157][T24078] FAT-fs (loop2): Directory bread(block 70) failed [ 2316.510001][T24078] FAT-fs (loop2): Directory bread(block 71) failed [ 2316.527122][T24078] FAT-fs (loop2): Directory bread(block 72) failed [ 2316.540756][T24078] FAT-fs (loop2): Directory bread(block 73) failed [ 2316.635871][ T26] audit: type=1800 audit(2048479398.555:894): pid=24078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23732" name="bus" dev="loop2" ino=1048975 res=0 errno=0 [ 2316.673994][T24078] attempt to access beyond end of device [ 2316.673994][T24078] loop2: rw=2049, want=1876, limit=256