last executing test programs: 5.030293996s ago: executing program 3 (id=20143): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000480)) 4.685023981s ago: executing program 2 (id=20152): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0) 4.566434953s ago: executing program 2 (id=20154): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) 4.545776045s ago: executing program 0 (id=20155): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 4.135015166s ago: executing program 3 (id=20156): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 4.083964181s ago: executing program 3 (id=20157): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt(r1, 0x4, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2086dd0000000000ac141416e0885a049a179424", 0x0, 0x3000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.858931944s ago: executing program 0 (id=20158): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.735902506s ago: executing program 0 (id=20159): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x80020000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.658357244s ago: executing program 0 (id=20160): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 3.509356229s ago: executing program 0 (id=20162): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040884) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.888648331s ago: executing program 3 (id=20169): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.839610186s ago: executing program 1 (id=20170): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 2.762517294s ago: executing program 3 (id=20171): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x80020000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.761887114s ago: executing program 1 (id=20172): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) 2.709606478s ago: executing program 1 (id=20173): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d000000"], 0x0, 0x34}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socket$inet6(0xa, 0x1, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018c900002006000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000202070250000bfa100000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xf, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5df", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e00011400030077"], 0x4c}}, 0x0) 2.670407233s ago: executing program 3 (id=20174): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a00)="4481a4554f3f9f00000000000000001000", 0x11}, {&(0x7f0000000a40)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74c05d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0ea0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e3473322f1d9aabc947f5b815080b5214c94a06fe96450ea42f40300000000", 0x129}], 0x2}}], 0x1, 0x408e0) 1.547884835s ago: executing program 2 (id=20176): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) semop(0x0, 0x0, 0x0) 1.150840935s ago: executing program 4 (id=20177): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) writev(r4, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df271b1179", 0x25}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf8536da9e0b81bf7dd3e4c938677040c8cddf", 0x4b}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435faad973", 0x21}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd72254557dd7959f8627e2274301d346beb9887e01583a5ab92ef23b6fb80be5edc6324845b1bc2443ffc0ab163daaceb89", 0xb0}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd878349b4b9a5", 0x73}], 0x5) 1.009271579s ago: executing program 4 (id=20178): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, 0x0, 0x0, 0xd37) 855.843235ms ago: executing program 4 (id=20179): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 785.147961ms ago: executing program 4 (id=20180): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1) 651.118825ms ago: executing program 4 (id=20181): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x2, 0x5, 0xb4, 0xfffffffc}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 473.135813ms ago: executing program 4 (id=20182): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@test_dummy_encryption_v1}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181042, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0xc, r3, 0x0, 0x0, 0x4, 0xfffffffffdfff7ff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(r8, 0xffffffffffffffff, 0x0) 382.220522ms ago: executing program 1 (id=20183): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 350.464925ms ago: executing program 1 (id=20184): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 259.330594ms ago: executing program 1 (id=20185): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x68, r7, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 258.933114ms ago: executing program 0 (id=20186): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 127.114227ms ago: executing program 2 (id=20187): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 92.322161ms ago: executing program 2 (id=20188): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) writev(r4, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df271b1179", 0x25}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf8536da9e0b81bf7dd3e4c938677040c8cddf", 0x4b}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435faad973", 0x21}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd72254557dd7959f8627e2274301d346beb9887e01583a5ab92ef23b6fb80be5edc6324845b1bc2443ffc0ab163daaceb89", 0xb0}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd878349b4b9a5", 0x73}], 0x5) 0s ago: executing program 2 (id=20189): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) kernel console output (not intermixed with test programs): T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1965.717664][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1965.839796][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1965.875609][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1965.886168][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1965.896454][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1965.906980][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1965.918209][T13748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1965.928205][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1966.054191][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1966.398339][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1966.602854][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1966.640279][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1966.672745][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1966.710639][T13884] netlink: 592 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1966.725406][T13748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1966.746653][T13748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1966.772038][T13748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1966.846560][T13748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1966.908634][T13889] loop3: detected capacity change from 0 to 512 [ 1966.916750][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 1967.065900][T13889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1967.076008][T11208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1967.111337][T13889] System zones: 1-12 [ 1967.112116][T32020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1967.115758][T11208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1967.158977][T32020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1967.173118][T14013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1967.191380][T13889] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.18469: Directory hole found for htree index block 0 [ 1967.251702][T14013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1967.275090][T13889] EXT4-fs (loop3): Remounting filesystem read-only [ 1967.292186][T13889] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1967.334637][T13889] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.18469: Directory hole found for htree index block 0 [ 1967.388071][T13889] EXT4-fs (loop3): Remounting filesystem read-only [ 1967.409560][T13889] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1967.438862][T13889] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1967.564216][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18472'. [ 1967.885418][T13907] loop0: detected capacity change from 0 to 512 [ 1967.999013][T13907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1968.043562][T13907] System zones: 1-12 [ 1968.070267][T13907] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18475: Directory hole found for htree index block 0 [ 1968.102310][T13912] loop3: detected capacity change from 0 to 128 [ 1968.153532][T13912] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1968.167133][T13907] EXT4-fs (loop0): Remounting filesystem read-only [ 1968.183935][T13907] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 1968.200204][T13907] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18475: Directory hole found for htree index block 0 [ 1968.209945][T13912] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1968.248769][T13912] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 1968.280226][T13907] EXT4-fs (loop0): Remounting filesystem read-only [ 1968.286785][T13907] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1968.309810][T13907] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1968.328828][T13912] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1968.350233][T13907] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 1968.981849][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18484'. [ 1969.448255][T13937] loop3: detected capacity change from 0 to 128 [ 1969.509960][ T26] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1969.536284][T13937] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1969.650791][T13937] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1969.910224][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.949889][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1970.160190][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1970.188281][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.220922][ T26] usb 5-1: Product: syz [ 1970.254206][ T26] usb 5-1: Manufacturer: syz [ 1970.279195][ T26] usb 5-1: SerialNumber: syz [ 1970.640159][ T26] usb 5-1: cannot find UAC_HEADER [ 1970.684065][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1970.729921][T13939] netlink: 592 bytes leftover after parsing attributes in process `syz.1.18478'. [ 1970.732752][T11529] udevd[11529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1970.761373][ T26] usb 5-1: USB disconnect, device number 42 [ 1971.140079][T13955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18495'. [ 1971.687112][T13980] loop2: detected capacity change from 0 to 512 [ 1971.754020][T13980] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1971.768588][T13980] System zones: 1-12 [ 1971.804157][T13980] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.18491: Directory hole found for htree index block 0 [ 1971.854354][T13980] EXT4-fs (loop2): Remounting filesystem read-only [ 1971.861171][T13980] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1971.869395][T13980] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.18491: Directory hole found for htree index block 0 [ 1971.899785][T13980] EXT4-fs (loop2): Remounting filesystem read-only [ 1971.906349][T13980] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1971.929886][T13980] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1971.981115][T13980] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 1972.029866][T17640] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1972.257259][T13991] netlink: 592 bytes leftover after parsing attributes in process `syz.0.18508'. [ 1973.000062][T17640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.037755][T17640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1973.227860][T17640] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1973.247342][T17640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.277787][T17640] usb 2-1: Product: syz [ 1973.282190][T17640] usb 2-1: Manufacturer: syz [ 1973.286788][T17640] usb 2-1: SerialNumber: syz [ 1973.640027][T17640] usb 2-1: cannot find UAC_HEADER [ 1973.668444][T17640] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1973.698646][T17640] usb 2-1: USB disconnect, device number 56 [ 1973.762783][T11259] udevd[11259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1975.295575][ T25] kauditd_printk_skb: 57 callbacks suppressed [ 1975.295589][ T25] audit: type=1326 audit(1763319343.607:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1975.365082][ T25] audit: type=1326 audit(1763319343.607:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1975.478270][ T25] audit: type=1326 audit(1763319343.607:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1975.557603][ T25] audit: type=1326 audit(1763319343.607:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1975.598186][T14047] loop1: detected capacity change from 0 to 128 [ 1975.657207][T14047] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1975.669700][ T25] audit: type=1326 audit(1763319343.607:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1975.681910][T14047] EXT4-fs (loop1): Ignoring removed oldalloc option [ 1975.728559][T14047] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 1975.755214][T14047] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1975.782518][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.784693][ T25] audit: type=1326 audit(1763319343.607:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1975.788864][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.959865][ T25] audit: type=1326 audit(1763319343.607:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1976.122902][ T25] audit: type=1326 audit(1763319343.607:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1976.275436][ T25] audit: type=1326 audit(1763319343.607:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1976.388352][T14075] loop4: detected capacity change from 0 to 512 [ 1976.404076][ T25] audit: type=1326 audit(1763319343.607:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.18529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda18cf66c9 code=0x50000 [ 1976.447766][T14079] loop0: detected capacity change from 0 to 128 [ 1976.462534][T14075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1976.472550][T14075] System zones: 1-12 [ 1976.477465][T14075] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18546: Directory hole found for htree index block 0 [ 1976.600073][T14075] EXT4-fs (loop4): Remounting filesystem read-only [ 1976.637084][T14075] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1976.662918][T14079] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1976.683124][T14079] EXT4-fs (loop0): Ignoring removed oldalloc option [ 1976.711808][T14075] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18546: Directory hole found for htree index block 0 [ 1976.752588][T14079] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 1976.765553][T14075] EXT4-fs (loop4): Remounting filesystem read-only [ 1976.776347][T14075] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1976.784834][T14075] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1976.827430][T14079] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1976.879924][T17640] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1977.146571][T17640] usb 4-1: Using ep0 maxpacket: 16 [ 1977.270072][T17640] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1977.288434][T17640] usb 4-1: config 0 has no interface number 0 [ 1977.298596][T17640] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1977.336223][T14125] loop4: detected capacity change from 0 to 512 [ 1977.347070][T17640] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1977.362694][T17640] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1977.372258][T14125] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1977.393040][T14125] EXT4-fs (loop4): inline encryption not supported [ 1977.417243][T14125] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1977.435342][T14125] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1977.470019][T14125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1977.512772][T14125] EXT4-fs (loop4): 1 truncate cleaned up [ 1977.518450][T14125] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1977.536988][T17640] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1977.557101][T17640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.583034][T17640] usb 4-1: Product: syz [ 1977.592069][T17640] usb 4-1: Manufacturer: syz [ 1977.596690][T17640] usb 4-1: SerialNumber: syz [ 1977.681196][T17640] usb 4-1: config 0 descriptor?? [ 1977.700613][T14086] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1977.707702][T14086] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1978.020734][T17640] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1978.074949][T17640] usb 4-1: USB disconnect, device number 53 [ 1979.450038][ T26] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1979.570067][T18079] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1979.834967][T18079] usb 5-1: Using ep0 maxpacket: 16 [ 1979.867315][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.898031][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1979.985038][T18079] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1979.999785][T18079] usb 5-1: config 0 has no interface number 0 [ 1980.026923][T18079] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1980.105009][ T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1980.146252][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.175137][ T26] usb 4-1: Product: syz [ 1980.199792][ T26] usb 4-1: Manufacturer: syz [ 1980.209186][ T26] usb 4-1: SerialNumber: syz [ 1980.240240][T18079] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1980.249294][T18079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.298111][T18079] usb 5-1: Product: syz [ 1980.318379][T18079] usb 5-1: Manufacturer: syz [ 1980.332178][T18079] usb 5-1: SerialNumber: syz [ 1980.366588][T18079] usb 5-1: config 0 descriptor?? [ 1980.436039][T18079] CoreChips: probe of 5-1:0.41 failed with error -22 [ 1980.611385][ T26] usb 4-1: cannot find UAC_HEADER [ 1980.619778][ T25] kauditd_printk_skb: 266 callbacks suppressed [ 1980.619792][ T25] audit: type=1326 audit(1763319348.867:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1980.681895][ T26] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1980.719618][ T26] usb 4-1: USB disconnect, device number 54 [ 1980.738461][T11259] udevd[11259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1980.769508][ T25] audit: type=1326 audit(1763319348.867:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1980.801145][T18079] usb 5-1: USB disconnect, device number 43 [ 1980.868492][ T25] audit: type=1326 audit(1763319348.867:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1980.936804][ T25] audit: type=1326 audit(1763319348.867:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1980.995005][ T25] audit: type=1326 audit(1763319348.867:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1981.056076][ T25] audit: type=1326 audit(1763319348.867:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1981.173441][ T25] audit: type=1326 audit(1763319348.867:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1981.195984][ T25] audit: type=1326 audit(1763319348.867:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1981.477892][ T25] audit: type=1326 audit(1763319348.867:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1981.575730][ T25] audit: type=1326 audit(1763319348.867:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14200 comm="syz.0.18601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c20c9d6c9 code=0x50000 [ 1981.635491][T14231] loop4: detected capacity change from 0 to 512 [ 1981.768354][T14231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1981.786431][T14231] System zones: 1-12 [ 1981.832277][T14241] loop0: detected capacity change from 0 to 512 [ 1981.852486][T14231] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18615: Directory hole found for htree index block 0 [ 1981.906365][T14231] EXT4-fs (loop4): Remounting filesystem read-only [ 1981.920763][T14241] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1981.939329][T14241] EXT4-fs (loop0): inline encryption not supported [ 1981.956540][T14241] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1981.956791][T14231] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1981.978542][T14241] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1982.012528][T14231] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18615: Directory hole found for htree index block 0 [ 1982.040678][T14241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1982.056700][T14231] EXT4-fs (loop4): Remounting filesystem read-only [ 1982.079462][T14241] EXT4-fs (loop0): 1 truncate cleaned up [ 1982.087114][T14231] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1982.094112][T14241] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1982.122287][T14254] loop2: detected capacity change from 0 to 128 [ 1982.128842][T14231] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 1982.155133][T14231] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 1982.201646][T14254] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1982.209229][T14254] EXT4-fs (loop2): Ignoring removed oldalloc option [ 1982.227407][T14254] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 1982.276724][T14254] ext4 filesystem being mounted at /577/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1982.346121][T14259] netlink: 'syz.0.18625': attribute type 4 has an invalid length. [ 1982.349832][T28852] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1982.389673][T14259] netlink: 17 bytes leftover after parsing attributes in process `syz.0.18625'. [ 1982.609841][T28852] usb 4-1: Using ep0 maxpacket: 16 [ 1982.729995][T28852] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1982.743837][T28852] usb 4-1: config 0 has no interface number 0 [ 1982.792045][T28852] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1982.832771][T28852] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1982.893047][T28852] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1982.935963][T14284] loop4: detected capacity change from 0 to 512 [ 1982.985189][T14284] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1982.996098][T14284] EXT4-fs (loop4): inline encryption not supported [ 1983.010027][T14284] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1983.041865][T14284] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1983.064163][T14284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1983.074520][T28852] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1983.096184][T28852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.139372][T28852] usb 4-1: Product: syz [ 1983.146379][T14284] EXT4-fs (loop4): 1 truncate cleaned up [ 1983.162335][T28852] usb 4-1: Manufacturer: syz [ 1983.166923][T28852] usb 4-1: SerialNumber: syz [ 1983.171932][T14284] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1983.264439][T28852] usb 4-1: config 0 descriptor?? [ 1983.310100][T14251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1983.320359][T14251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1983.550020][T28852] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1983.567423][T28852] usb 4-1: USB disconnect, device number 55 [ 1983.901828][T14321] loop4: detected capacity change from 0 to 512 [ 1983.974698][T14321] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1983.992251][T14321] EXT4-fs (loop4): inline encryption not supported [ 1984.034098][T14321] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1984.049376][T14321] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1984.087184][T14321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1984.125029][T14321] EXT4-fs (loop4): 1 truncate cleaned up [ 1984.139898][T14321] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1985.053561][T14365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18673'. [ 1985.562684][T14387] loop3: detected capacity change from 0 to 128 [ 1985.599408][T14387] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1985.642578][T14387] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1985.696286][T14387] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 1985.788261][T14387] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.597870][T14428] loop2: detected capacity change from 0 to 128 [ 1988.675105][T14428] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1988.689850][T14428] EXT4-fs (loop2): Ignoring removed oldalloc option [ 1988.710178][T14428] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 1988.726704][T14428] ext4 filesystem being mounted at /593/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2037.222092][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.228393][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.747580][T14449] loop1: detected capacity change from 0 to 128 [ 2041.255283][T14449] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2041.266112][T14449] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2044.119816][ T13] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 2044.540127][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.565753][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2044.689834][T18079] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2044.780169][ T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2044.818312][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.838848][ T13] usb 5-1: Product: syz [ 2044.848972][ T13] usb 5-1: Manufacturer: syz [ 2044.859099][ T13] usb 5-1: SerialNumber: syz [ 2044.930081][T18079] usb 3-1: Using ep0 maxpacket: 16 [ 2045.054960][T18079] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2045.074973][T18079] usb 3-1: config 0 has no interface number 0 [ 2045.083680][T18079] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2045.199959][ T13] usb 5-1: cannot find UAC_HEADER [ 2045.226589][ T13] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 2045.260148][T18079] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2045.262110][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2045.279543][T18079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.285393][ T13] usb 5-1: USB disconnect, device number 44 [ 2045.299899][T17641] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2045.345918][T18079] usb 3-1: Product: syz [ 2045.353418][T18079] usb 3-1: Manufacturer: syz [ 2045.368352][T18079] usb 3-1: SerialNumber: syz [ 2045.387199][T18079] usb 3-1: config 0 descriptor?? [ 2045.444102][T18079] CoreChips: probe of 3-1:0.41 failed with error -22 [ 2045.549876][T17641] usb 2-1: Using ep0 maxpacket: 16 [ 2045.649277][ T26] usb 3-1: USB disconnect, device number 51 [ 2045.691437][T17641] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2045.715145][T17641] usb 2-1: config 0 has no interface number 0 [ 2045.731842][T17641] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2045.779837][T17641] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2045.795000][T17641] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2045.980158][T17641] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2045.993781][T14546] loop4: detected capacity change from 0 to 512 [ 2046.009967][T17641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.020208][T17641] usb 2-1: Product: syz [ 2046.024384][T17641] usb 2-1: Manufacturer: syz [ 2046.044456][T17641] usb 2-1: SerialNumber: syz [ 2046.050383][T14546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2046.060387][T17641] usb 2-1: config 0 descriptor?? [ 2046.079721][T14546] System zones: 1-12 [ 2046.090073][T14536] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2046.100084][T14536] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2046.105674][T14546] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18744: Directory hole found for htree index block 0 [ 2046.150216][T14546] EXT4-fs (loop4): Remounting filesystem read-only [ 2046.198431][T14546] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 2046.228845][T14546] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18744: Directory hole found for htree index block 0 [ 2046.265265][T14546] EXT4-fs (loop4): Remounting filesystem read-only [ 2046.283642][T14546] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 2046.303865][T14546] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2046.340149][T17641] CoreChips: probe of 2-1:0.41 failed with error -71 [ 2046.376979][T17641] usb 2-1: USB disconnect, device number 57 [ 2046.545170][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18748'. [ 2047.086166][T14565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18752'. [ 2047.104779][T14567] netlink: 'syz.1.18753': attribute type 4 has an invalid length. [ 2047.133209][T14567] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18753'. [ 2047.291504][T14575] loop1: detected capacity change from 0 to 512 [ 2047.412861][T14575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2047.435971][T14575] System zones: 1-12 [ 2047.462475][T14575] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18756: Directory hole found for htree index block 0 [ 2047.541393][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18759'. [ 2047.587426][T14575] EXT4-fs (loop1): Remounting filesystem read-only [ 2047.616323][T14575] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 2047.635018][T14575] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18756: Directory hole found for htree index block 0 [ 2047.668415][T14575] EXT4-fs (loop1): Remounting filesystem read-only [ 2047.722069][T14575] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 2047.756271][T14575] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2047.803955][T14575] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 2048.206083][T14602] netlink: 'syz.1.18767': attribute type 4 has an invalid length. [ 2048.219492][T14602] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18767'. [ 2048.545866][T14612] loop0: detected capacity change from 0 to 128 [ 2048.570014][T14614] loop1: detected capacity change from 0 to 512 [ 2048.620928][T14612] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2048.647732][T14614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2048.669326][T14614] System zones: 1-12 [ 2048.674871][T14614] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18773: Directory hole found for htree index block 0 [ 2048.692146][T14614] EXT4-fs (loop1): Remounting filesystem read-only [ 2048.698793][T14612] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2048.709336][T14614] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 2048.718765][T14614] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18773: Directory hole found for htree index block 0 [ 2048.750919][T14614] EXT4-fs (loop1): Remounting filesystem read-only [ 2048.767767][T14614] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 2048.776355][T14614] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2048.810993][T14614] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 2049.409988][T17641] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2049.655882][T14635] loop0: detected capacity change from 0 to 512 [ 2049.784496][T14635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2049.804085][T14635] System zones: 1-12 [ 2049.809027][T14635] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18785: Directory hole found for htree index block 0 [ 2049.822189][T17641] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.840152][T17641] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2049.885805][T14635] EXT4-fs (loop0): Remounting filesystem read-only [ 2049.902738][T14635] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 2049.921111][T14635] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18785: Directory hole found for htree index block 0 [ 2049.956738][T14635] EXT4-fs (loop0): Remounting filesystem read-only [ 2049.976580][T14635] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2049.996881][T14635] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2050.030151][T17641] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2050.064189][T17641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.079793][T17641] usb 2-1: Product: syz [ 2050.094211][T17641] usb 2-1: Manufacturer: syz [ 2050.098824][T17641] usb 2-1: SerialNumber: syz [ 2050.109852][T14635] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 2050.460412][T17641] usb 2-1: cannot find UAC_HEADER [ 2050.501252][T17641] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2050.553901][T17641] usb 2-1: USB disconnect, device number 58 [ 2050.820414][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2050.943211][T14643] chnl_net:caif_netlink_parms(): no params data found [ 2051.251355][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.268670][T14643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.355466][T14643] device bridge_slave_0 entered promiscuous mode [ 2051.396191][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2051.423823][T14643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.465295][T14643] device bridge_slave_1 entered promiscuous mode [ 2051.657554][T14643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2051.707483][T14643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2051.847480][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18806'. [ 2051.873801][T14643] team0: Port device team_slave_0 added [ 2051.903382][T14643] team0: Port device team_slave_1 added [ 2052.011857][T14643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2052.028478][T14643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2052.116453][T14643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2052.185590][T14643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2052.229798][T14643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2052.309806][T14643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2052.424157][T14643] device hsr_slave_0 entered promiscuous mode [ 2052.460890][T14643] device hsr_slave_1 entered promiscuous mode [ 2052.491092][T14643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2052.498770][T14643] Cannot create hsr debugfs directory [ 2052.510048][T28852] Bluetooth: hci0: command 0x0409 tx timeout [ 2052.853671][T14643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.962162][T14643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.079907][T14643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.203890][T14643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.424698][T14643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2053.464285][T14643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2053.483040][T14643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2053.516818][T14643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2053.836263][T14643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2053.881921][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2053.909558][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2053.931782][T14643] 8021q: adding VLAN 0 to HW filter on device team0 [ 2053.977544][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2054.003535][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2054.024296][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.031409][T13145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2054.070244][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2054.110110][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2054.130280][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2054.166563][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.173681][T13145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2054.226971][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2054.251136][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2054.332699][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2054.352849][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2054.387658][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2054.406848][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2054.430793][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2054.467264][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2054.488587][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2054.528247][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2054.548172][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2054.584725][T17640] Bluetooth: hci0: command 0x041b tx timeout [ 2054.618712][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2054.670084][T17641] Bluetooth: hci2: command 0x0406 tx timeout [ 2055.018662][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18818'. [ 2055.075133][T14013] device hsr_slave_0 left promiscuous mode [ 2055.100847][T14013] device hsr_slave_1 left promiscuous mode [ 2055.125531][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2055.146600][T14013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2055.171502][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2055.178962][T14013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2055.200035][T14013] device veth1_macvtap left promiscuous mode [ 2055.206081][T14013] device veth0_macvtap left promiscuous mode [ 2055.227129][T14013] device veth1_vlan left promiscuous mode [ 2055.246362][T14013] device veth0_vlan left promiscuous mode [ 2055.748351][T14743] loop0: detected capacity change from 0 to 128 [ 2055.865191][T14743] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2055.879245][T14743] EXT4-fs (loop0): Ignoring removed oldalloc option [ 2055.913514][T14013] team0 (unregistering): Port device team_slave_1 removed [ 2055.936868][T14743] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2055.961476][T14013] team0 (unregistering): Port device team_slave_0 removed [ 2055.975098][T14013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.984860][T14743] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2056.010795][T14013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.174234][T14013] bond0 (unregistering): Released all slaves [ 2056.243098][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2056.281638][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2056.315610][T14643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2056.422554][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2056.446929][T14753] loop1: detected capacity change from 0 to 512 [ 2056.461928][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2056.522681][T14643] device veth0_vlan entered promiscuous mode [ 2056.530157][T14753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2056.542236][T14753] System zones: 1-12 [ 2056.547128][T14753] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18827: Directory hole found for htree index block 0 [ 2056.562103][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2056.577150][T14753] EXT4-fs (loop1): Remounting filesystem read-only [ 2056.584668][T14753] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 2056.590577][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2056.594466][T14753] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18827: Directory hole found for htree index block 0 [ 2056.613977][T14753] EXT4-fs (loop1): Remounting filesystem read-only [ 2056.621380][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2056.628755][T14753] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 2056.637009][T14753] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2056.643637][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2056.669953][T17640] Bluetooth: hci0: command 0x040f tx timeout [ 2056.689488][T14643] device veth1_vlan entered promiscuous mode [ 2056.868725][T14643] device veth0_macvtap entered promiscuous mode [ 2056.870032][T17641] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2056.895281][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2056.910676][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2056.925010][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2056.964509][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2056.980848][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2057.002257][T14643] device veth1_macvtap entered promiscuous mode [ 2057.041737][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.060462][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.081137][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.099946][T17640] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 2057.100346][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.140378][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.151129][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.161303][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.172450][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.181791][T17641] usb 4-1: Using ep0 maxpacket: 16 [ 2057.202120][T14643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2057.259890][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2057.276678][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2057.305896][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2057.319956][T17641] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2057.328484][T17641] usb 4-1: config 0 has no interface number 0 [ 2057.339630][T17641] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2057.341460][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.380640][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.419794][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.439854][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.460350][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.481282][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.501617][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.526726][T17641] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2057.529933][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.546409][T17641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.554965][T17640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.569784][T17641] usb 4-1: Product: syz [ 2057.573967][T17641] usb 4-1: Manufacturer: syz [ 2057.578651][T17640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2057.587922][T14643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2057.599203][T17641] usb 4-1: SerialNumber: syz [ 2057.615009][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2057.625058][T17641] usb 4-1: config 0 descriptor?? [ 2057.632300][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2057.663674][T14643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.686116][T17641] CoreChips: probe of 4-1:0.41 failed with error -22 [ 2057.690352][T14643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.733966][T14643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.764347][T14643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.825212][T17640] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2057.837147][T17640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.855841][T17640] usb 2-1: Product: syz [ 2057.865947][T17640] usb 2-1: Manufacturer: syz [ 2057.876059][T17640] usb 2-1: SerialNumber: syz [ 2057.911351][T17641] usb 4-1: USB disconnect, device number 56 [ 2058.002635][T13145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.026328][T13145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.070632][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2058.116119][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.136026][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.208761][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2058.260070][T17640] usb 2-1: cannot find UAC_HEADER [ 2058.309293][T17640] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2058.344292][T17640] usb 2-1: USB disconnect, device number 59 [ 2058.412666][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2058.759226][T17641] Bluetooth: hci0: command 0x0419 tx timeout [ 2058.780589][T14789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18842'. [ 2058.806377][T14790] loop3: detected capacity change from 0 to 128 [ 2058.905839][T14790] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2058.964041][T14790] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2060.031723][T14814] loop3: detected capacity change from 0 to 128 [ 2060.111381][T14814] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2060.118707][T14814] EXT4-fs (loop3): Ignoring removed oldalloc option [ 2060.220979][T14814] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2060.292434][T14814] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2061.410741][T14839] loop0: detected capacity change from 0 to 128 [ 2061.538507][T14839] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2061.572091][T14839] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2061.832649][T14843] netlink: 96 bytes leftover after parsing attributes in process `syz.0.18868'. [ 2062.949882][ T26] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 2063.320023][ T26] usb 5-1: config 0 has no interfaces? [ 2063.325580][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2063.352600][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.383189][ T26] usb 5-1: config 0 descriptor?? [ 2063.538207][T14885] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18886'. [ 2063.644935][T17641] usb 5-1: USB disconnect, device number 45 [ 2065.087438][T14911] chnl_net:caif_netlink_parms(): no params data found [ 2065.371504][T14943] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18910'. [ 2065.496782][T14911] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.556121][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.578037][T14911] device bridge_slave_0 entered promiscuous mode [ 2065.618806][T14911] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.650566][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.679643][T14911] device bridge_slave_1 entered promiscuous mode [ 2065.703111][T14959] loop2: detected capacity change from 0 to 128 [ 2065.726368][T14013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.750953][T14959] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2065.838676][T14959] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2065.854420][T14013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.952132][T14911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2066.047143][T14013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.079672][T14911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2066.219068][T14013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.254432][T14911] team0: Port device team_slave_0 added [ 2066.291261][T14911] team0: Port device team_slave_1 added [ 2066.365188][T14911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2066.382491][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.387553][T14982] loop3: detected capacity change from 0 to 512 [ 2066.461078][T14911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2066.546801][T14982] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 2066.550438][T14911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2066.561013][T14982] EXT4-fs (loop3): inline encryption not supported [ 2066.598052][T14982] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2066.601548][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.620915][T14982] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 2066.701036][T14982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2066.750116][T28852] Bluetooth: hci4: command 0x0409 tx timeout [ 2066.766399][T14911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2066.787501][T14982] EXT4-fs (loop3): 1 truncate cleaned up [ 2066.794721][T14982] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 2067.074348][T14911] device hsr_slave_0 entered promiscuous mode [ 2067.142866][T14911] device hsr_slave_1 entered promiscuous mode [ 2067.183822][T14911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2067.213986][T14911] Cannot create hsr debugfs directory [ 2067.667164][T15030] loop1: detected capacity change from 0 to 512 [ 2067.737274][T15030] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 2067.750226][T15030] EXT4-fs (loop1): inline encryption not supported [ 2067.792523][T15030] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2067.820692][T15030] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 2067.843947][T15030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2067.859083][T15040] loop3: detected capacity change from 0 to 512 [ 2067.905989][T15030] EXT4-fs (loop1): 1 truncate cleaned up [ 2067.924955][T15030] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 2068.024739][T15040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2068.041001][T15040] System zones: 1-12 [ 2068.045970][T15040] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.18948: Directory hole found for htree index block 0 [ 2068.098544][T15050] loop1: detected capacity change from 0 to 512 [ 2068.113953][T15040] EXT4-fs (loop3): Remounting filesystem read-only [ 2068.166991][T15040] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 2068.190804][T14911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2068.199381][T15040] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.18948: Directory hole found for htree index block 0 [ 2068.212230][T15050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2068.229002][T14911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2068.256880][T15050] System zones: 1-12 [ 2068.287752][T14911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2068.299168][T15050] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18951: Directory hole found for htree index block 0 [ 2068.363123][T15040] EXT4-fs (loop3): Remounting filesystem read-only [ 2068.369687][T15040] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 2068.379697][T15050] EXT4-fs (loop1): Remounting filesystem read-only [ 2068.386522][T15050] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 2068.399726][T15040] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2068.436476][T14911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2068.454573][T15050] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.18951: Directory hole found for htree index block 0 [ 2068.500292][T15040] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 2068.508463][T15050] EXT4-fs (loop1): Remounting filesystem read-only [ 2068.538801][T15050] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 2068.599938][T15050] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2068.618425][T17641] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 2068.818188][T14013] device hsr_slave_0 left promiscuous mode [ 2068.835882][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 2068.877091][T14013] device hsr_slave_1 left promiscuous mode [ 2068.904718][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2068.932425][T14013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2068.988072][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2069.040037][T17641] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.043865][T14013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2069.065721][T17641] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2069.125109][T14013] device veth1_macvtap left promiscuous mode [ 2069.168143][T14013] device veth0_macvtap left promiscuous mode [ 2069.191160][T14013] device veth1_vlan left promiscuous mode [ 2069.197240][T14013] device veth0_vlan left promiscuous mode [ 2069.310435][T17641] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2069.327401][T17641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.358358][T17641] usb 3-1: Product: syz [ 2069.376129][T17641] usb 3-1: Manufacturer: syz [ 2069.393090][T17641] usb 3-1: SerialNumber: syz [ 2069.700852][T15101] loop0: detected capacity change from 0 to 512 [ 2069.749262][T17641] usb 3-1: cannot find UAC_HEADER [ 2069.791166][T15101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2069.800336][T15101] System zones: 1-12 [ 2069.800929][T17641] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2069.805317][T15101] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18965: Directory hole found for htree index block 0 [ 2069.830003][T15101] EXT4-fs (loop0): Remounting filesystem read-only [ 2069.847728][T15101] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 2069.868854][T15101] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18965: Directory hole found for htree index block 0 [ 2069.904532][T17641] usb 3-1: USB disconnect, device number 52 [ 2069.927557][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2069.984133][T15101] EXT4-fs (loop0): Remounting filesystem read-only [ 2070.010214][T15101] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2070.028866][T15101] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2070.059522][T14013] team0 (unregistering): Port device team_slave_1 removed [ 2070.082434][T15101] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 2070.110465][T14013] team0 (unregistering): Port device team_slave_0 removed [ 2070.156196][T14013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.172932][T14013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2070.258413][T15105] loop0: detected capacity change from 0 to 128 [ 2070.328892][T14013] bond0 (unregistering): Released all slaves [ 2070.375411][T15105] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2070.394298][T15105] EXT4-fs (loop0): Ignoring removed oldalloc option [ 2070.417157][T14911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2070.465026][T15105] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2070.527996][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2070.540977][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2070.546101][T15105] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2070.594538][T14911] 8021q: adding VLAN 0 to HW filter on device team0 [ 2070.651928][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2070.678702][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2070.740229][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.747357][T11208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.815221][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2070.870189][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2070.899873][T14419] Bluetooth: hci4: command 0x040f tx timeout [ 2070.943282][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2070.992381][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.999492][T11208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2071.079361][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2071.172585][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2071.247880][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2071.277767][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2071.296077][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2071.315239][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2071.335573][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2071.366629][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2071.404289][T14911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2071.466513][T14911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2071.519349][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2071.544689][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2071.572845][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2071.599592][T15162] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18992'. [ 2072.014930][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2072.033044][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2072.077396][T14911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2072.708787][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2072.730354][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2072.790547][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2072.809673][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2072.837912][T14911] device veth0_vlan entered promiscuous mode [ 2072.853415][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2072.886475][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2072.965142][T14911] device veth1_vlan entered promiscuous mode [ 2072.980001][ T7361] Bluetooth: hci4: command 0x0419 tx timeout [ 2073.079438][T15197] loop3: detected capacity change from 0 to 128 [ 2073.124611][T14911] device veth0_macvtap entered promiscuous mode [ 2073.146744][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2073.155323][T15197] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2073.189301][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2073.207385][T15197] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2073.220577][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2073.252120][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2073.301423][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2073.338509][T14911] device veth1_macvtap entered promiscuous mode [ 2073.417064][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.447916][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.497051][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.534398][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.591071][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.612210][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.659789][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.679776][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.701712][T14911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.721979][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2073.744198][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2073.796783][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2073.817999][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.844605][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.879546][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.905950][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.934793][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.957757][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.989898][T14911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2074.036841][T14911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.058540][T14911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2074.106859][T14016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2074.125957][T14016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2074.175524][T14911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.189917][T14911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.212850][T14911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.242669][T14911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.435827][T14016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.471645][T14016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.506365][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.510181][T14016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2074.535191][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.563841][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2074.872144][T15233] loop3: detected capacity change from 0 to 512 [ 2074.955543][T15233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2074.969939][T15233] System zones: 1-12 [ 2075.021085][T15233] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.19020: Directory hole found for htree index block 0 [ 2075.124554][T15233] EXT4-fs (loop3): Remounting filesystem read-only [ 2075.178047][T15233] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 2075.189685][T15233] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.19020: Directory hole found for htree index block 0 [ 2075.215543][T15233] EXT4-fs (loop3): Remounting filesystem read-only [ 2075.232088][T15233] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 2075.244475][T15233] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2077.069824][T14120] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2077.504080][T14120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.529779][T14120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2077.750042][T14120] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2077.779478][T14120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.799892][T14120] usb 2-1: Product: syz [ 2077.804072][T14120] usb 2-1: Manufacturer: syz [ 2077.808665][T14120] usb 2-1: SerialNumber: syz [ 2078.191369][T14120] usb 2-1: cannot find UAC_HEADER [ 2078.239270][T14120] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2078.270311][T14120] usb 2-1: USB disconnect, device number 60 [ 2078.551873][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2078.821390][T15307] netlink: 'syz.1.19050': attribute type 4 has an invalid length. [ 2078.835337][T15307] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19050'. [ 2078.960759][T15313] loop1: detected capacity change from 0 to 128 [ 2079.011898][T15313] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2079.073131][T15313] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2079.249827][T17641] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 2079.680109][T17641] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.699807][T17641] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2079.922970][T17641] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2079.952051][T17641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.969803][T17641] usb 3-1: Product: syz [ 2079.986870][T17641] usb 3-1: Manufacturer: syz [ 2079.996032][T17641] usb 3-1: SerialNumber: syz [ 2080.375030][T17641] usb 3-1: cannot find UAC_HEADER [ 2080.397600][T17641] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2080.416884][T15348] loop0: detected capacity change from 0 to 128 [ 2080.419907][T14419] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2080.436750][T17641] usb 3-1: USB disconnect, device number 53 [ 2080.461030][T15348] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2080.483176][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2080.534912][T15348] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2080.682964][T14419] usb 4-1: Using ep0 maxpacket: 16 [ 2080.800400][T14419] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2080.808518][T14419] usb 4-1: config 0 has no interface number 0 [ 2080.831686][T14419] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2080.877834][T14419] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2080.927106][T14419] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2081.110137][T14419] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2081.119339][T14419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.130774][T15363] loop0: detected capacity change from 0 to 512 [ 2081.141711][T14419] usb 4-1: Product: syz [ 2081.146032][T14419] usb 4-1: Manufacturer: syz [ 2081.166770][T14419] usb 4-1: SerialNumber: syz [ 2081.191587][T14419] usb 4-1: config 0 descriptor?? [ 2081.220720][T15346] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2081.230824][T15346] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2081.266799][T15363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2081.278752][T15363] System zones: 1-12 [ 2081.297357][T15363] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19074: Directory hole found for htree index block 0 [ 2081.404339][T15363] EXT4-fs (loop0): Remounting filesystem read-only [ 2081.459996][T14419] CoreChips: probe of 4-1:0.41 failed with error -71 [ 2081.464542][T15363] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 2081.492109][T14419] usb 4-1: USB disconnect, device number 57 [ 2081.505512][T15363] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19074: Directory hole found for htree index block 0 [ 2081.549003][T15363] EXT4-fs (loop0): Remounting filesystem read-only [ 2081.568941][T15363] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2081.644630][T15363] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2082.444837][T15406] loop4: detected capacity change from 0 to 512 [ 2082.532806][T15406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2082.553975][T15406] System zones: 1-12 [ 2082.558931][T15406] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.19094: Directory hole found for htree index block 0 [ 2082.593828][T15406] EXT4-fs (loop4): Remounting filesystem read-only [ 2082.631111][T15406] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 2082.659708][T15406] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.19094: Directory hole found for htree index block 0 [ 2082.744054][T15406] EXT4-fs (loop4): Remounting filesystem read-only [ 2082.754217][T15406] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 2082.762692][T14419] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 2082.780002][T15406] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2083.131345][T14419] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2083.151911][T14419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2083.334653][T14419] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2083.360848][T14419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.394701][T14419] usb 4-1: Product: syz [ 2083.398885][T14419] usb 4-1: Manufacturer: syz [ 2083.414987][T14419] usb 4-1: SerialNumber: syz [ 2083.759975][T14419] usb 4-1: cannot find UAC_HEADER [ 2083.791993][T14419] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 2083.830319][T14419] usb 4-1: USB disconnect, device number 58 [ 2083.844353][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2084.353539][T15423] loop3: detected capacity change from 0 to 512 [ 2084.420889][T15423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2084.438521][T15423] System zones: 1-12 [ 2084.459574][T15423] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.19102: Directory hole found for htree index block 0 [ 2084.525679][T15423] EXT4-fs (loop3): Remounting filesystem read-only [ 2084.576389][T15423] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 2084.609447][T15423] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.19102: Directory hole found for htree index block 0 [ 2084.645744][T15423] EXT4-fs (loop3): Remounting filesystem read-only [ 2084.665266][T15423] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 2084.694173][T15423] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2084.742868][T15423] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 2085.391619][ T7361] Bluetooth: hci3: command 0x0406 tx timeout [ 2085.598039][T15446] loop2: detected capacity change from 0 to 512 [ 2085.665197][T15446] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 2085.696943][T15446] EXT4-fs (loop2): inline encryption not supported [ 2085.729119][T15446] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2085.786466][T15446] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 2085.805786][T15446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2085.851799][T15456] loop1: detected capacity change from 0 to 128 [ 2085.873043][T15446] EXT4-fs (loop2): 1 truncate cleaned up [ 2085.878710][T15446] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 2085.958726][T15456] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2085.978419][T15456] EXT4-fs (loop1): Ignoring removed oldalloc option [ 2086.012366][T15456] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2086.049287][T15456] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2088.540174][T15491] loop2: detected capacity change from 0 to 128 [ 2088.591078][T15491] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2088.628621][T15491] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2089.404141][T15515] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19142'. [ 2091.224065][T15574] loop4: detected capacity change from 0 to 512 [ 2091.293254][T15574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2091.311531][T15574] System zones: 1-12 [ 2091.367588][T15574] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.19170: Directory hole found for htree index block 0 [ 2091.420559][T15574] EXT4-fs (loop4): Remounting filesystem read-only [ 2091.464484][T15574] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 2091.524424][T15574] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.19170: Directory hole found for htree index block 0 [ 2091.578228][T15574] EXT4-fs (loop4): Remounting filesystem read-only [ 2091.598186][T15574] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 2091.638751][T15574] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2091.702543][T15574] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 2092.540863][T15589] netlink: 17 bytes leftover after parsing attributes in process `syz.4.19178'. [ 2092.949852][T14419] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 2093.329972][T14419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.345971][T14419] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2093.553668][T14419] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2093.583843][T14419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.627777][T14419] usb 4-1: Product: syz [ 2093.643333][T14419] usb 4-1: Manufacturer: syz [ 2093.647947][T14419] usb 4-1: SerialNumber: syz [ 2093.688723][T14419] usb 4-1: config 0 descriptor?? [ 2094.192368][T14419] usb 4-1: USB disconnect, device number 59 [ 2095.071095][T15659] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19209'. [ 2095.315842][T15672] loop1: detected capacity change from 0 to 128 [ 2095.360247][T15672] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2095.398019][T15672] EXT4-fs (loop1): Ignoring removed oldalloc option [ 2095.400860][T15677] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19218'. [ 2095.442059][T15672] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2095.470774][T15672] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2096.539858][T18451] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 2096.812132][T15728] netlink: 'syz.0.19241': attribute type 4 has an invalid length. [ 2096.828000][T15728] netlink: 17 bytes leftover after parsing attributes in process `syz.0.19241'. [ 2096.980018][T18451] usb 2-1: config 0 has no interfaces? [ 2096.985596][T18451] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2097.019586][T18451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.074007][T18451] usb 2-1: config 0 descriptor?? [ 2097.375454][T17641] usb 2-1: USB disconnect, device number 61 [ 2097.730106][T15753] loop3: detected capacity change from 0 to 128 [ 2097.790034][T15753] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2097.809345][T15753] EXT4-fs (loop3): Ignoring removed oldalloc option [ 2097.858009][T15753] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2097.900045][T15753] ext4 filesystem being mounted at /488/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2098.103111][T15763] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19257'. [ 2098.129879][T15764] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19256'. [ 2098.641624][T15796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19272'. [ 2098.662623][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.668958][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.025996][T15807] loop2: detected capacity change from 0 to 512 [ 2099.085345][T15807] EXT4-fs (loop2): Ignoring removed nobh option [ 2099.091996][T15807] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2099.260361][T15807] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2099.287505][T15807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 2099.317561][T15807] EXT4-fs (loop2): Remounting filesystem read-only [ 2099.325623][T15807] __quota_error: 56 callbacks suppressed [ 2099.325657][T15807] Quota error (device loop2): write_blk: dquota write failed [ 2099.339695][T15807] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 2099.349698][T15807] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.19274: Failed to acquire dquot type 0 [ 2099.368138][T15807] EXT4-fs (loop2): Remounting filesystem read-only [ 2099.378336][T15807] EXT4-fs (loop2): 1 truncate cleaned up [ 2099.395807][T15807] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 2101.309862][T17641] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 2101.609487][T15853] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19296'. [ 2101.739976][T17641] usb 5-1: config 0 has no interfaces? [ 2101.745887][T17641] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2101.789957][T17641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.863801][T17641] usb 5-1: config 0 descriptor?? [ 2102.138029][T14120] usb 5-1: USB disconnect, device number 46 [ 2105.053837][T15944] loop0: detected capacity change from 0 to 512 [ 2105.229304][T15944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2105.247837][T15944] System zones: 1-12 [ 2105.260961][T15944] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19340: Directory hole found for htree index block 0 [ 2105.286985][T15944] EXT4-fs (loop0): Remounting filesystem read-only [ 2105.347653][T15944] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 2105.417462][T15944] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19340: Directory hole found for htree index block 0 [ 2105.477165][T15944] EXT4-fs (loop0): Remounting filesystem read-only [ 2105.504129][T15944] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2105.529870][T15944] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2108.185348][T16018] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19373'. [ 2109.259875][ T2875] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 2109.630122][ T2875] usb 3-1: config 0 has no interfaces? [ 2109.635646][ T2875] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2109.649957][T16045] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19386'. [ 2109.689688][ T2875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.742539][ T2875] usb 3-1: config 0 descriptor?? [ 2110.002832][ T2875] usb 3-1: USB disconnect, device number 54 [ 2111.731496][T16072] netlink: 17 bytes leftover after parsing attributes in process `syz.0.19396'. [ 2111.823094][T16075] netlink: 'syz.2.19400': attribute type 4 has an invalid length. [ 2111.848821][T16075] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19400'. [ 2113.788678][T16116] loop1: detected capacity change from 0 to 128 [ 2113.850119][T16116] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2113.857446][T16116] EXT4-fs (loop1): Ignoring removed oldalloc option [ 2113.905914][T16116] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2113.937547][T16116] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2115.210004][T14120] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2115.630304][T14120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.665514][T14120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2115.890249][T14120] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2115.929871][T14120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.961828][T14120] usb 2-1: Product: syz [ 2115.976253][T14120] usb 2-1: Manufacturer: syz [ 2115.981203][T14120] usb 2-1: SerialNumber: syz [ 2116.053995][T16154] loop3: detected capacity change from 0 to 128 [ 2116.126457][T16156] loop0: detected capacity change from 0 to 512 [ 2116.141102][T16154] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2116.154497][T16154] EXT4-fs (loop3): Ignoring removed oldalloc option [ 2116.186904][T16154] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2116.224194][T16154] ext4 filesystem being mounted at /520/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2116.299878][T16156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2116.330591][T16156] System zones: 1-12 [ 2116.335531][T16156] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19439: Directory hole found for htree index block 0 [ 2116.350138][T14120] usb 2-1: cannot find UAC_HEADER [ 2116.376900][T14120] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2116.387774][T14120] usb 2-1: USB disconnect, device number 62 [ 2116.419848][T16156] EXT4-fs (loop0): Remounting filesystem read-only [ 2116.426409][T16156] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 2116.519911][T16156] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19439: Directory hole found for htree index block 0 [ 2116.531192][T16169] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19444'. [ 2116.550813][T16156] EXT4-fs (loop0): Remounting filesystem read-only [ 2116.577421][T16156] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2116.624504][T14469] udevd[14469]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2116.649913][T16156] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2116.727305][T16156] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 2117.294879][T16210] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19461'. [ 2117.524464][ T2875] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2117.900024][ T2875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.928255][ T2875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2118.100053][ T2875] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2118.133958][ T2875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.159931][ T2875] usb 4-1: Product: syz [ 2118.164117][ T2875] usb 4-1: Manufacturer: syz [ 2118.189142][ T2875] usb 4-1: SerialNumber: syz [ 2118.520097][ T2875] usb 4-1: cannot find UAC_HEADER [ 2118.548124][ T2875] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 2118.596289][ T2875] usb 4-1: USB disconnect, device number 60 [ 2118.637610][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2119.048461][T16282] loop1: detected capacity change from 0 to 8192 [ 2119.159937][T14419] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2119.262184][T16288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19496'. [ 2119.424582][T14419] usb 3-1: Using ep0 maxpacket: 16 [ 2119.551123][T14419] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2119.565353][T14419] usb 3-1: config 0 has no interface number 0 [ 2119.593829][T14419] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2119.628734][T14419] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2119.669412][T14419] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2119.849922][T14419] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2119.879604][T14419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.920304][T14419] usb 3-1: Product: syz [ 2119.934395][T14419] usb 3-1: Manufacturer: syz [ 2119.970033][T14419] usb 3-1: SerialNumber: syz [ 2119.991389][T14419] usb 3-1: config 0 descriptor?? [ 2120.010091][T16280] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2120.025301][T16280] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2120.269960][T14419] CoreChips: probe of 3-1:0.41 failed with error -71 [ 2120.305259][T14419] usb 3-1: USB disconnect, device number 55 [ 2120.808937][T16334] loop3: detected capacity change from 0 to 128 [ 2120.884398][T16334] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2120.906444][T16334] EXT4-fs (loop3): Ignoring removed oldalloc option [ 2120.954755][T16334] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2121.066242][T16334] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2123.379908][T14120] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 2123.790191][T14120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.839879][T14120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2124.060108][T14120] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2124.084862][T16365] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19532'. [ 2124.089466][T14120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.123317][T14120] usb 2-1: Product: syz [ 2124.127500][T14120] usb 2-1: Manufacturer: syz [ 2124.153648][T14120] usb 2-1: SerialNumber: syz [ 2124.610003][T16378] netlink: 'syz.2.19539': attribute type 4 has an invalid length. [ 2124.618030][T16378] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19539'. [ 2125.209021][T14120] usb 2-1: cannot find UAC_HEADER [ 2125.237522][T14120] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2125.286304][T14120] usb 2-1: USB disconnect, device number 63 [ 2125.337177][T14455] udevd[14455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2125.760844][T16401] loop1: detected capacity change from 0 to 128 [ 2125.826262][T16401] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2125.845471][T16403] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19549'. [ 2125.861526][T16401] EXT4-fs (loop1): Ignoring removed oldalloc option [ 2125.961595][T16407] netlink: 'syz.0.19550': attribute type 4 has an invalid length. [ 2125.969500][T16407] netlink: 17 bytes leftover after parsing attributes in process `syz.0.19550'. [ 2125.969587][T16401] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2126.122642][T16401] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2129.375303][T16484] loop3: detected capacity change from 0 to 128 [ 2129.449867][T16484] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2129.457192][T16484] EXT4-fs (loop3): Ignoring removed oldalloc option [ 2129.567707][T16484] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2129.624752][T16484] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2132.073221][T16545] netlink: 'syz.4.19611': attribute type 4 has an invalid length. [ 2132.104813][T16545] netlink: 17 bytes leftover after parsing attributes in process `syz.4.19611'. [ 2132.164786][T14120] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2132.419937][T14120] usb 2-1: Using ep0 maxpacket: 16 [ 2132.570016][T14120] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2132.584974][T14120] usb 2-1: config 0 has no interface number 0 [ 2132.611535][T14120] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2132.808008][T14120] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2132.830643][T14120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.853989][T14120] usb 2-1: Product: syz [ 2132.858167][T14120] usb 2-1: Manufacturer: syz [ 2132.883158][T14120] usb 2-1: SerialNumber: syz [ 2132.907926][T14120] usb 2-1: config 0 descriptor?? [ 2132.970736][T14120] CoreChips: probe of 2-1:0.41 failed with error -22 [ 2133.180897][T17640] usb 2-1: USB disconnect, device number 64 [ 2133.372032][T16576] netlink: 'syz.3.19625': attribute type 4 has an invalid length. [ 2133.409814][T16576] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19625'. [ 2133.803614][T17640] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2134.129912][T17640] usb 4-1: Using ep0 maxpacket: 16 [ 2134.155686][T16602] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19639'. [ 2134.269983][T17640] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2134.298619][T17640] usb 4-1: config 0 has no interface number 0 [ 2134.305191][T17640] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2134.345728][T17640] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2134.379831][T17640] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2134.590484][T17640] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2134.620026][T17640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.628469][T17640] usb 4-1: Product: syz [ 2134.653316][T17640] usb 4-1: Manufacturer: syz [ 2134.657940][T17640] usb 4-1: SerialNumber: syz [ 2134.703585][T17640] usb 4-1: config 0 descriptor?? [ 2134.750501][T16581] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2134.767773][T16581] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2135.035150][T17640] CoreChips: probe of 4-1:0.41 failed with error -71 [ 2135.080208][T17640] usb 4-1: USB disconnect, device number 61 [ 2135.774099][T16626] loop0: detected capacity change from 0 to 512 [ 2135.850845][T16626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2135.868447][T16626] System zones: 1-12 [ 2135.900704][T16626] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19649: Directory hole found for htree index block 0 [ 2135.975165][T16626] EXT4-fs (loop0): Remounting filesystem read-only [ 2136.014762][T16626] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 2136.060338][T16626] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.19649: Directory hole found for htree index block 0 [ 2136.131590][T16626] EXT4-fs (loop0): Remounting filesystem read-only [ 2136.158567][T16626] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 2136.178794][T16626] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2136.266903][T16626] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 2139.869876][T14419] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2140.119806][T14419] usb 3-1: Using ep0 maxpacket: 16 [ 2140.240133][T14419] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2140.258650][T14419] usb 3-1: config 0 has no interface number 0 [ 2140.275578][T14419] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2140.294974][T17640] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 2140.296225][T14419] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2140.353745][T14419] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2140.530003][T14419] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2140.549412][T14419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.589959][T14419] usb 3-1: Product: syz [ 2140.594145][T14419] usb 3-1: Manufacturer: syz [ 2140.598741][T14419] usb 3-1: SerialNumber: syz [ 2140.640395][T14419] usb 3-1: config 0 descriptor?? [ 2140.670227][T16690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2140.687526][T16690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2140.725951][T17640] usb 2-1: config 0 has no interfaces? [ 2140.736992][T17640] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2140.771783][T17640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.813171][T17640] usb 2-1: config 0 descriptor?? [ 2140.929970][T14419] CoreChips: probe of 3-1:0.41 failed with error -71 [ 2140.971336][T14419] usb 3-1: USB disconnect, device number 56 [ 2141.071936][T17640] usb 2-1: USB disconnect, device number 65 [ 2141.985313][T16750] loop2: detected capacity change from 0 to 512 [ 2142.212345][T16750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2142.289159][T16750] System zones: 1-12 [ 2142.605798][T16750] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.19704: Directory hole found for htree index block 0 [ 2142.740092][T16750] EXT4-fs (loop2): Remounting filesystem read-only [ 2142.798478][T16750] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 2142.838705][T16750] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.19704: Directory hole found for htree index block 0 [ 2142.907267][T16750] EXT4-fs (loop2): Remounting filesystem read-only [ 2142.933285][T16750] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 2142.953770][T16750] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2143.544894][T16798] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2144.083522][T16823] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2144.768629][T16852] netlink: 'syz.4.19748': attribute type 4 has an invalid length. [ 2144.786994][T16852] netlink: 17 bytes leftover after parsing attributes in process `syz.4.19748'. [ 2145.419925][ T2875] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2145.658181][T16858] chnl_net:caif_netlink_parms(): no params data found [ 2145.669892][ T2875] usb 5-1: Using ep0 maxpacket: 16 [ 2145.789965][ T2875] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2145.815519][ T2875] usb 5-1: config 0 has no interface number 0 [ 2145.846037][ T2875] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2146.020144][ T2875] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2146.029219][ T2875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.088926][ T2875] usb 5-1: Product: syz [ 2146.106423][ T2875] usb 5-1: Manufacturer: syz [ 2146.135989][ T2875] usb 5-1: SerialNumber: syz [ 2146.186922][ T2875] usb 5-1: config 0 descriptor?? [ 2146.238207][T16858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2146.250830][ T2875] CoreChips: probe of 5-1:0.41 failed with error -22 [ 2146.279855][T16858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2146.308125][T16858] device bridge_slave_0 entered promiscuous mode [ 2146.348408][T16858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.386216][T16858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.403762][T16858] device bridge_slave_1 entered promiscuous mode [ 2146.458355][ T26] usb 5-1: USB disconnect, device number 47 [ 2146.540457][T16858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2146.582856][T16858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2146.711475][T16858] team0: Port device team_slave_0 added [ 2146.719525][T16858] team0: Port device team_slave_1 added [ 2146.846228][T16858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2146.853471][T16858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.881958][T16858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2146.927849][T16858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2146.954073][T16858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.986535][T18451] Bluetooth: hci5: command 0x0409 tx timeout [ 2147.085462][T16858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2147.136156][T32020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.227557][T32020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.274059][T16947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19789'. [ 2147.312031][T16858] device hsr_slave_0 entered promiscuous mode [ 2147.327834][T16858] device hsr_slave_1 entered promiscuous mode [ 2147.348802][T16858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2147.367999][T16858] Cannot create hsr debugfs directory [ 2147.383383][T32020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.470202][T18451] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 2147.528850][T32020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.709952][T18451] usb 5-1: device descriptor read/64, error -71 [ 2147.745713][T16976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19802'. [ 2147.999944][T18451] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 2148.239886][T18451] usb 5-1: device descriptor read/64, error -71 [ 2148.254517][T17007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19815'. [ 2148.361974][T18451] usb usb5-port1: attempt power cycle [ 2148.391485][T17011] loop1: detected capacity change from 0 to 512 [ 2148.459838][T17011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2148.467828][T17011] System zones: 1-12 [ 2148.480247][T17011] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19816: Directory hole found for htree index block 0 [ 2148.503311][T17011] EXT4-fs (loop1): Remounting filesystem read-only [ 2148.523259][T17011] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 2148.535011][T17011] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19816: Directory hole found for htree index block 0 [ 2148.550704][T17011] EXT4-fs (loop1): Remounting filesystem read-only [ 2148.557608][T17011] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 2148.579965][T17011] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2148.739535][T16858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2148.781927][T18451] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 2148.871631][T16858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2148.882490][T16858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2148.890748][T18451] usb 5-1: device descriptor read/8, error -71 [ 2149.002625][T17041] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19826'. [ 2149.056505][T16858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2149.059953][T18079] Bluetooth: hci5: command 0x041b tx timeout [ 2149.159833][T18451] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 2149.259941][T17056] loop1: detected capacity change from 0 to 512 [ 2149.290438][T18451] usb 5-1: device descriptor read/8, error -71 [ 2149.321731][T17056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 2149.330479][T17056] System zones: 1-12 [ 2149.343960][T17056] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19830: Directory hole found for htree index block 0 [ 2149.374430][T17056] EXT4-fs (loop1): Remounting filesystem read-only [ 2149.391556][T17056] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 2149.400018][T17056] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19830: Directory hole found for htree index block 0 [ 2149.413513][T18451] usb usb5-port1: unable to enumerate USB device [ 2149.420530][T17056] EXT4-fs (loop1): Remounting filesystem read-only [ 2149.427238][T17056] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 2149.436631][T17056] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 2149.491759][T16858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2149.536694][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2149.548813][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2149.570780][T16858] 8021q: adding VLAN 0 to HW filter on device team0 [ 2149.635021][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2149.653009][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2149.676554][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.683718][T13146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2149.788160][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2149.807235][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2149.853124][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2149.902139][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.909253][T13146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2149.936233][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2149.966488][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2150.002547][T17079] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19835'. [ 2150.073350][T16858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2150.106942][T16858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2150.152380][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2150.177734][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2150.219257][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2150.322590][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2150.561996][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2150.739041][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2150.867300][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2150.934271][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2150.970621][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2150.989551][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2151.140295][T18079] Bluetooth: hci5: command 0x040f tx timeout [ 2151.423275][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2151.450067][T11208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2151.476209][T16858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2151.549622][T32020] device hsr_slave_0 left promiscuous mode [ 2151.567700][T32020] device hsr_slave_1 left promiscuous mode [ 2151.590559][T32020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2151.609884][T32020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2151.630678][T32020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2151.638121][T32020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2151.687179][T32020] device bridge_slave_1 left promiscuous mode [ 2151.703800][T32020] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.724247][T32020] device bridge_slave_0 left promiscuous mode [ 2151.742893][T32020] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.762852][T18079] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 2151.798372][T32020] device veth1_macvtap left promiscuous mode [ 2151.817700][T32020] device veth0_macvtap left promiscuous mode [ 2151.830090][T32020] device veth1_vlan left promiscuous mode [ 2151.835978][T32020] device veth0_vlan left promiscuous mode [ 2151.963829][T18079] usb 3-1: device descriptor read/64, error -71 [ 2152.255936][T18079] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 2152.386918][T32020] team0 (unregistering): Port device team_slave_1 removed [ 2152.421374][T32020] team0 (unregistering): Port device team_slave_0 removed [ 2152.449085][T32020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2152.455668][T18079] usb 3-1: device descriptor read/64, error -71 [ 2152.490018][T32020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2152.580061][T18079] usb usb3-port1: attempt power cycle [ 2152.646624][T32020] bond0 (unregistering): Released all slaves [ 2152.838161][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2152.853562][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2152.874945][T16858] device veth0_vlan entered promiscuous mode [ 2152.894292][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2152.913457][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2152.933765][T16858] device veth1_vlan entered promiscuous mode [ 2152.944448][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2152.957291][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2152.968356][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2152.990042][T18079] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 2153.016860][T16858] device veth0_macvtap entered promiscuous mode [ 2153.025436][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2153.042752][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2153.055879][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2153.070714][T16858] device veth1_macvtap entered promiscuous mode [ 2153.084974][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2153.096572][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2153.108826][T18079] usb 3-1: device descriptor read/8, error -71 [ 2153.134815][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.148958][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.166466][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.177355][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.193866][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.206745][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.220172][T16988] Bluetooth: hci5: command 0x0419 tx timeout [ 2153.230303][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.248687][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.268680][T16858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2153.286307][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2153.296378][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2153.317651][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.329109][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.346661][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.358123][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.375399][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.386303][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.402548][T16858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.415559][T18079] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 2153.426945][T16858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.445571][T16858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2153.479881][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2153.493833][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2153.520239][T18079] usb 3-1: device descriptor read/8, error -71 [ 2153.534773][T16858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.543915][T16858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.553207][T16858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.562163][T16858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.660935][T18079] usb usb3-port1: unable to enumerate USB device [ 2153.734874][T11208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.748734][T11208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.780602][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2153.817824][T11208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.855647][T11208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.893015][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2154.121640][T17139] netlink: 'syz.3.19856': attribute type 4 has an invalid length. [ 2154.139674][T17139] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19856'. [ 2154.395057][T17143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19858'. [ 2155.188168][T17162] netlink: 'syz.2.19867': attribute type 4 has an invalid length. [ 2155.212684][T17162] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19867'. [ 2155.494383][T17168] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19870'. [ 2157.880417][T17207] loop1: detected capacity change from 0 to 128 [ 2158.030700][T17207] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2158.043878][T17207] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2158.949830][T17640] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 2159.112238][T17230] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19900'. [ 2159.334855][T17234] loop3: detected capacity change from 0 to 128 [ 2159.391591][T17234] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2159.410661][T17640] usb 5-1: config 0 has no interfaces? [ 2159.414309][T17234] EXT4-fs (loop3): Ignoring removed oldalloc option [ 2159.416270][T17640] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2159.427246][T17234] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2159.479939][T17234] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2159.500604][T17640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.550692][T17640] usb 5-1: config 0 descriptor?? [ 2159.816781][T17640] usb 5-1: USB disconnect, device number 52 [ 2160.037914][T17239] netlink: 'syz.2.19899': attribute type 4 has an invalid length. [ 2160.069850][T17239] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19899'. [ 2160.102128][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.108440][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.376975][T17245] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19903'. [ 2162.233486][T17280] 9pnet: Insufficient options for proto=fd [ 2166.293808][T17367] loop0: detected capacity change from 0 to 128 [ 2166.346014][T17367] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 2166.377691][T17367] EXT4-fs (loop0): Ignoring removed oldalloc option [ 2166.432088][T17367] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2166.468678][T17367] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2166.736175][T17371] netlink: 17 bytes leftover after parsing attributes in process `syz.0.19964'. [ 2167.748056][T17395] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19965'. [ 2168.343350][T17423] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19990'. [ 2168.556773][T17432] loop1: detected capacity change from 0 to 128 [ 2168.618313][T17432] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2168.629012][T17432] EXT4-fs (loop1): Ignoring removed oldalloc option [ 2168.666372][T17432] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2168.712455][T17432] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2169.284071][T17455] loop3: detected capacity change from 0 to 4096 [ 2169.317051][T17455] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2169.374982][T17455] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 2169.396628][T17455] System zones: 0-5 [ 2169.416080][T17455] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 2172.180198][T17535] netlink: 17 bytes leftover after parsing attributes in process `syz.2.20043'. [ 2174.037811][T17568] loop2: detected capacity change from 0 to 128 [ 2174.114993][T17568] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2174.129779][T17568] EXT4-fs (loop2): Ignoring removed oldalloc option [ 2174.178733][T17568] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,grpjquota=,nomblk_io_submit,jqfmt=vfsold,oldalloc,,errors=continue. Quota mode: writeback. [ 2174.235814][T17568] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2176.049867][ T2875] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 2176.421243][ T2875] usb 5-1: config 0 has no interfaces? [ 2176.427009][ T2875] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2176.472736][ T2875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.503600][T17612] netlink: 92 bytes leftover after parsing attributes in process `syz.3.20079'. [ 2176.525967][ T2875] usb 5-1: config 0 descriptor?? [ 2176.785868][ T2875] usb 5-1: USB disconnect, device number 53 [ 2176.954812][ T13] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 2177.285025][ T13] usb 2-1: no configurations [ 2177.289844][ T13] usb 2-1: can't read configurations, error -22 [ 2177.464948][ T13] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2177.542948][T18079] Bluetooth: hci0: command 0x0406 tx timeout [ 2177.773297][ T13] usb 2-1: no configurations [ 2177.778417][ T13] usb 2-1: can't read configurations, error -22 [ 2177.827993][ T13] usb usb2-port1: attempt power cycle [ 2178.260055][ T13] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2178.378269][T17659] netlink: 80 bytes leftover after parsing attributes in process `syz.2.20101'. [ 2178.433750][ T13] usb 2-1: no configurations [ 2178.448606][ T13] usb 2-1: can't read configurations, error -22 [ 2178.620043][ T13] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2178.805592][ T13] usb 2-1: no configurations [ 2178.810713][ T13] usb 2-1: can't read configurations, error -22 [ 2178.839829][ T13] usb usb2-port1: unable to enumerate USB device [ 2180.969854][ T13] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2181.382548][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.402920][ T13] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2181.640636][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2181.659961][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.668091][ T13] usb 2-1: Product: syz [ 2181.688366][ T13] usb 2-1: Manufacturer: syz [ 2181.699316][ T13] usb 2-1: SerialNumber: syz [ 2183.671297][T17640] usb 2-1: USB disconnect, device number 70 [ 2183.703861][T17786] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 2185.400155][T17817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2186.981218][T17831] loop4: detected capacity change from 0 to 512 [ 2187.141314][T17831] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2187.175252][T17831] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2187.283079][T17831] [ 2187.285434][T17831] ====================================================== [ 2187.292453][T17831] WARNING: possible circular locking dependency detected [ 2187.299474][T17831] syzkaller #0 Not tainted [ 2187.303881][T17831] ------------------------------------------------------ [ 2187.310888][T17831] syz.4.20182/17831 is trying to acquire lock: [ 2187.317074][T17831] ffff88806131c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 2187.326060][T17831] [ 2187.326060][T17831] but task is already holding lock: [ 2187.333418][T17831] ffff8880610b3450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 2187.342986][T17831] [ 2187.342986][T17831] which lock already depends on the new lock. [ 2187.342986][T17831] [ 2187.353378][T17831] [ 2187.353378][T17831] the existing dependency chain (in reverse order) is: [ 2187.362395][T17831] [ 2187.362395][T17831] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 2187.370221][T17831] down_read+0x44/0x2e0 [ 2187.374999][T17831] ext4_map_blocks+0x32f/0x1b30 [ 2187.380380][T17831] ext4_getblk+0x16d/0x630 [ 2187.385323][T17831] ext4_bread+0x26/0x180 [ 2187.390084][T17831] ext4_quota_read+0x1b3/0x3a0 [ 2187.395431][T17831] find_tree_dqentry+0x188/0xb30 [ 2187.400899][T17831] find_tree_dqentry+0x3eb/0xb30 [ 2187.406364][T17831] find_tree_dqentry+0x3eb/0xb30 [ 2187.411831][T17831] find_tree_dqentry+0x3eb/0xb30 [ 2187.417290][T17831] qtree_read_dquot+0x13c/0x680 [ 2187.422667][T17831] v2_read_dquot+0xc0/0x110 [ 2187.427694][T17831] dquot_acquire+0x152/0x520 [ 2187.432816][T17831] ext4_acquire_dquot+0x2d9/0x4a0 [ 2187.438367][T17831] dqget+0x778/0xeb0 [ 2187.442794][T17831] __dquot_initialize+0x328/0xcb0 [ 2187.448341][T17831] ext4_process_orphan+0x54/0x300 [ 2187.453957][T17831] ext4_orphan_cleanup+0xaa9/0x12e0 [ 2187.459685][T17831] ext4_fill_super+0x92f0/0x9a60 [ 2187.465143][T17831] mount_bdev+0x287/0x3c0 [ 2187.470053][T17831] legacy_get_tree+0xe6/0x180 [ 2187.475298][T17831] vfs_get_tree+0x88/0x270 [ 2187.480239][T17831] do_new_mount+0x24a/0xa40 [ 2187.485285][T17831] __se_sys_mount+0x2d6/0x3c0 [ 2187.490483][T17831] do_syscall_64+0x4c/0xa0 [ 2187.495435][T17831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2187.501848][T17831] [ 2187.501848][T17831] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 2187.509931][T17831] down_read+0x44/0x2e0 [ 2187.514616][T17831] v2_read_dquot+0x4a/0x110 [ 2187.519646][T17831] dquot_acquire+0x152/0x520 [ 2187.524756][T17831] ext4_acquire_dquot+0x2d9/0x4a0 [ 2187.530312][T17831] dqget+0x778/0xeb0 [ 2187.534730][T17831] __dquot_initialize+0x328/0xcb0 [ 2187.540279][T17831] ext4_process_orphan+0x54/0x300 [ 2187.545820][T17831] ext4_orphan_cleanup+0xaa9/0x12e0 [ 2187.551537][T17831] ext4_fill_super+0x92f0/0x9a60 [ 2187.557003][T17831] mount_bdev+0x287/0x3c0 [ 2187.561848][T17831] legacy_get_tree+0xe6/0x180 [ 2187.567045][T17831] vfs_get_tree+0x88/0x270 [ 2187.571985][T17831] do_new_mount+0x24a/0xa40 [ 2187.577008][T17831] __se_sys_mount+0x2d6/0x3c0 [ 2187.582201][T17831] do_syscall_64+0x4c/0xa0 [ 2187.587140][T17831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2187.593555][T17831] [ 2187.593555][T17831] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 2187.601198][T17831] __lock_acquire+0x2c33/0x7c60 [ 2187.606659][T17831] lock_acquire+0x197/0x3f0 [ 2187.611683][T17831] __mutex_lock_common+0x1eb/0x2390 [ 2187.617401][T17831] mutex_lock_nested+0x17/0x20 [ 2187.622688][T17831] dquot_commit+0x5a/0x410 [ 2187.627625][T17831] ext4_write_dquot+0x1f0/0x360 [ 2187.633001][T17831] mark_all_dquot_dirty+0xf9/0x400 [ 2187.638754][T17831] __dquot_alloc_space+0x5d0/0xe20 [ 2187.644393][T17831] ext4_mb_new_blocks+0xf68/0x4940 [ 2187.650030][T17831] ext4_ext_map_blocks+0x191a/0x6650 [ 2187.655906][T17831] ext4_map_blocks+0x981/0x1b30 [ 2187.661281][T17831] _ext4_get_block+0x1d7/0x4e0 [ 2187.666569][T17831] ext4_block_write_begin+0x60f/0x1210 [ 2187.672549][T17831] ext4_write_begin+0x6c2/0x15c0 [ 2187.678007][T17831] ext4_da_write_begin+0x435/0xb30 [ 2187.683639][T17831] generic_perform_write+0x2aa/0x530 [ 2187.689509][T17831] ext4_buffered_write_iter+0x25f/0x3b0 [ 2187.695578][T17831] ext4_file_write_iter+0x773/0x17b0 [ 2187.701381][T17831] vfs_write+0x712/0xd00 [ 2187.706138][T17831] ksys_write+0x14d/0x250 [ 2187.710985][T17831] do_syscall_64+0x4c/0xa0 [ 2187.715936][T17831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2187.722350][T17831] [ 2187.722350][T17831] other info that might help us debug this: [ 2187.722350][T17831] [ 2187.732569][T17831] Chain exists of: [ 2187.732569][T17831] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 2187.732569][T17831] [ 2187.746214][T17831] Possible unsafe locking scenario: [ 2187.746214][T17831] [ 2187.753654][T17831] CPU0 CPU1 [ 2187.759009][T17831] ---- ---- [ 2187.764370][T17831] lock(&ei->i_data_sem/2); [ 2187.768966][T17831] lock(&s->s_dquot.dqio_sem); [ 2187.776338][T17831] lock(&ei->i_data_sem/2); [ 2187.783452][T17831] lock(&dquot->dq_lock); [ 2187.787864][T17831] [ 2187.787864][T17831] *** DEADLOCK *** [ 2187.787864][T17831] [ 2187.795998][T17831] 5 locks held by syz.4.20182/17831: [ 2187.801276][T17831] #0: ffff888051dba870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 2187.810507][T17831] #1: ffff88802234e460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 2187.819394][T17831] #2: ffff8880610b35c8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0xa6/0x3b0 [ 2187.830721][T17831] #3: ffff8880610b3450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 2187.840654][T17831] #4: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 2187.849740][T17831] [ 2187.849740][T17831] stack backtrace: [ 2187.855629][T17831] CPU: 1 PID: 17831 Comm: syz.4.20182 Not tainted syzkaller #0 [ 2187.863179][T17831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2187.873248][T17831] Call Trace: [ 2187.876527][T17831] [ 2187.879469][T17831] dump_stack_lvl+0x168/0x230 [ 2187.884187][T17831] ? load_image+0x3b0/0x3b0 [ 2187.888695][T17831] ? show_regs_print_info+0x20/0x20 [ 2187.893902][T17831] ? print_circular_bug+0x12b/0x1a0 [ 2187.899099][T17831] check_noncircular+0x274/0x310 [ 2187.904040][T17831] ? add_chain_block+0x940/0x940 [ 2187.908976][T17831] ? lockdep_lock+0xdc/0x1e0 [ 2187.913576][T17831] ? mark_lock+0x94/0x320 [ 2187.917911][T17831] __lock_acquire+0x2c33/0x7c60 [ 2187.922767][T17831] ? hlock_conflict+0x59/0x1f0 [ 2187.927533][T17831] ? check_noncircular+0x16f/0x310 [ 2187.932645][T17831] ? add_chain_block+0x940/0x940 [ 2187.937591][T17831] ? lockdep_lock+0xdc/0x1e0 [ 2187.942195][T17831] ? verify_lock_unused+0x140/0x140 [ 2187.947396][T17831] ? lockdep_unlock+0x134/0x2d0 [ 2187.952249][T17831] ? lockdep_lock+0x1e0/0x1e0 [ 2187.956925][T17831] ? check_noncircular+0x16f/0x310 [ 2187.962034][T17831] ? mark_lock+0x94/0x320 [ 2187.966366][T17831] ? __lock_acquire+0x13ad/0x7c60 [ 2187.971401][T17831] lock_acquire+0x197/0x3f0 [ 2187.975907][T17831] ? dquot_commit+0x5a/0x410 [ 2187.980544][T17831] ? __might_sleep+0xf0/0xf0 [ 2187.985210][T17831] ? read_lock_is_recursive+0x10/0x10 [ 2187.990589][T17831] ? dquot_commit+0x5a/0x410 [ 2187.995186][T17831] __mutex_lock_common+0x1eb/0x2390 [ 2188.000385][T17831] ? dquot_commit+0x5a/0x410 [ 2188.004986][T17831] ? __might_sleep+0xf0/0xf0 [ 2188.009574][T17831] ? mutex_lock_io_nested+0x60/0x60 [ 2188.014782][T17831] mutex_lock_nested+0x17/0x20 [ 2188.019549][T17831] dquot_commit+0x5a/0x410 [ 2188.023964][T17831] ? __ext4_journal_start_sb+0x1bd/0x360 [ 2188.029597][T17831] ext4_write_dquot+0x1f0/0x360 [ 2188.034457][T17831] mark_all_dquot_dirty+0xf9/0x400 [ 2188.039574][T17831] __dquot_alloc_space+0x5d0/0xe20 [ 2188.044698][T17831] ext4_mb_new_blocks+0xf68/0x4940 [ 2188.049825][T17831] ? ext4_mb_pa_callback+0xd0/0xd0 [ 2188.054945][T17831] ? ext4_ext_check_overlap+0x15f/0x560 [ 2188.060495][T17831] ? ext4_inode_to_goal_block+0x313/0x450 [ 2188.066217][T17831] ext4_ext_map_blocks+0x191a/0x6650 [ 2188.071517][T17831] ? ext4_ext_release+0x10/0x10 [ 2188.076370][T17831] ? rwsem_write_trylock+0x12f/0x1b0 [ 2188.081667][T17831] ext4_map_blocks+0x981/0x1b30 [ 2188.086530][T17831] ? ext4_issue_zeroout+0x250/0x250 [ 2188.091735][T17831] _ext4_get_block+0x1d7/0x4e0 [ 2188.096500][T17831] ? ext4_get_block+0x40/0x40 [ 2188.101179][T17831] ext4_block_write_begin+0x60f/0x1210 [ 2188.106663][T17831] ? ext4_es_is_delayed+0x40/0x40 [ 2188.111687][T17831] ? ext4_print_free_blocks+0x390/0x390 [ 2188.117233][T17831] ? __ext4_journal_start_sb+0x1bd/0x360 [ 2188.122871][T17831] ext4_write_begin+0x6c2/0x15c0 [ 2188.127823][T17831] ? ext4_readahead+0x110/0x110 [ 2188.132673][T17831] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 2188.138988][T17831] ? lockdep_hardirqs_on+0x94/0x140 [ 2188.144192][T17831] ext4_da_write_begin+0x435/0xb30 [ 2188.149311][T17831] ? ext4_initxattrs+0x110/0x110 [ 2188.154251][T17831] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 2188.160208][T17831] ? ext4_set_page_dirty+0x320/0x320 [ 2188.165497][T17831] generic_perform_write+0x2aa/0x530 [ 2188.170785][T17831] ? dentry_needs_remove_privs+0xf0/0xf0 [ 2188.176479][T17831] ? grab_cache_page_write_begin+0xa0/0xa0 [ 2188.182287][T17831] ? ext4_write_checks+0x24b/0x2c0 [ 2188.187407][T17831] ext4_buffered_write_iter+0x25f/0x3b0 [ 2188.192960][T17831] ext4_file_write_iter+0x773/0x17b0 [ 2188.198264][T17831] ? ext4_file_read_iter+0x700/0x700 [ 2188.203552][T17831] ? end_current_label_crit_section+0x14b/0x170 [ 2188.209883][T17831] ? memset+0x1e/0x40 [ 2188.213914][T17831] ? iov_iter_init+0xb4/0x170 [ 2188.218644][T17831] vfs_write+0x712/0xd00 [ 2188.222890][T17831] ? file_end_write+0x250/0x250 [ 2188.227738][T17831] ? __fget_files+0x40f/0x480 [ 2188.232417][T17831] ? mutex_lock_nested+0x17/0x20 [ 2188.237373][T17831] ? __fdget_pos+0x2bf/0x370 [ 2188.241960][T17831] ? ksys_write+0x71/0x250 [ 2188.246375][T17831] ksys_write+0x14d/0x250 [ 2188.250707][T17831] ? __ia32_sys_read+0x80/0x80 [ 2188.255472][T17831] ? lockdep_hardirqs_on+0x94/0x140 [ 2188.260672][T17831] do_syscall_64+0x4c/0xa0 [ 2188.265090][T17831] ? clear_bhb_loop+0x30/0x80 [ 2188.269770][T17831] ? clear_bhb_loop+0x30/0x80 [ 2188.274450][T17831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2188.280362][T17831] RIP: 0033:0x7f6d8e09f6c9 [ 2188.284779][T17831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2188.304386][T17831] RSP: 002b:00007f6d8c306038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2188.312805][T17831] RAX: ffffffffffffffda RBX: 00007f6d8e2f5fa0 RCX: 00007f6d8e09f6c9 [ 2188.320776][T17831] RDX: 0000000000000118 RSI: 0000200000000340 RDI: 000000000000000c [ 2188.328743][T17831] RBP: 00007f6d8e121f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=48976 sent=0 n=-1 (errno 32: Broken pipe) [ 2188.336708][T17831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2188.344679][T17831] R13: 00007f6d8e2f6038 R14: 00007f6d8e2f5fa0 R15: 00007ffe82992668 [ 2188.352684][T17831] [ 2188.358422][ T2875] Bluetooth: hci4: command 0x0406 tx timeout [ 2188.766197][T32020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.863267][T32020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.942863][T32020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.023733][T32020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.786260][T32020] device hsr_slave_0 left promiscuous mode [ 2189.792578][T32020] device hsr_slave_1 left promiscuous mode [ 2189.798905][T32020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2189.807163][T32020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2189.814943][T32020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2189.823488][T32020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2189.831445][T32020] device bridge_slave_1 left promiscuous mode [ 2189.837611][T32020] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.847431][T32020] device bridge_slave_0 left promiscuous mode [ 2189.853749][T32020] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.865778][T32020] device veth1_macvtap left promiscuous mode [ 2189.871865][T32020] device veth0_macvtap left promiscuous mode [ 2189.877919][T32020] device veth1_vlan left promiscuous mode [ 2189.886029][T32020] device veth0_vlan left promiscuous mode [ 2189.963127][T32020] team0 (unregistering): Port device team_slave_1 removed [ 2189.973337][T32020] team0 (unregistering): Port device team_slave_0 removed [ 2189.983398][T32020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2189.995573][T32020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2190.032710][T32020] bond0 (unregistering): Released all slaves [ 2190.647213][T14016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.694952][T14016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.734696][T14016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.773954][T14016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.863949][T14016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.904885][T14016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.945169][T14016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.994613][T14016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.093614][T14016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.144547][T14016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.192352][T14016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.233817][T14016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.305832][T14016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.345389][T14016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.393631][T14016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.443876][T14016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.637895][T14016] device hsr_slave_0 left promiscuous mode [ 2192.644133][T14016] device hsr_slave_1 left promiscuous mode [ 2192.650357][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2192.657747][T14016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2192.665520][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2192.672938][T14016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2192.680655][T14016] device bridge_slave_1 left promiscuous mode [ 2192.686763][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.694947][T14016] device bridge_slave_0 left promiscuous mode [ 2192.701175][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.710724][T14016] device hsr_slave_0 left promiscuous mode [ 2192.716773][T14016] device hsr_slave_1 left promiscuous mode [ 2192.723015][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2192.730478][T14016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2192.737859][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2192.745542][T14016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2192.754463][T14016] device bridge_slave_1 left promiscuous mode [ 2192.760797][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.768500][T14016] device bridge_slave_0 left promiscuous mode [ 2192.775244][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.784925][T14016] device hsr_slave_0 left promiscuous mode [ 2192.791119][T14016] device hsr_slave_1 left promiscuous mode [ 2192.797156][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2192.804556][T14016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2192.812013][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2192.819374][T14016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2192.826828][T14016] device bridge_slave_1 left promiscuous mode [ 2192.833045][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.840840][T14016] device bridge_slave_0 left promiscuous mode [ 2192.846931][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.857051][T14016] device hsr_slave_0 left promiscuous mode [ 2192.863197][T14016] device hsr_slave_1 left promiscuous mode [ 2192.869257][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2192.876735][T14016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2192.884462][T14016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2192.892242][T14016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2192.899621][T14016] device bridge_slave_1 left promiscuous mode [ 2192.905782][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.913794][T14016] device bridge_slave_0 left promiscuous mode [ 2192.920135][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.931420][T14016] device veth1_macvtap left promiscuous mode [ 2192.937402][T14016] device veth0_macvtap left promiscuous mode [ 2192.943466][T14016] device veth1_vlan left promiscuous mode [ 2192.949197][T14016] device veth0_vlan left promiscuous mode [ 2192.955776][T14016] device veth1_macvtap left promiscuous mode [ 2192.961908][T14016] device veth0_macvtap left promiscuous mode [ 2192.967907][T14016] device veth1_vlan left promiscuous mode [ 2192.973678][T14016] device veth0_vlan left promiscuous mode [ 2192.980621][T14016] device veth1_macvtap left promiscuous mode [ 2192.986596][T14016] device veth0_macvtap left promiscuous mode [ 2192.992824][T14016] device veth1_vlan left promiscuous mode [ 2192.998559][T14016] device veth0_vlan left promiscuous mode [ 2193.004844][T14016] device veth1_macvtap left promiscuous mode [ 2193.011213][T14016] device veth0_macvtap left promiscuous mode [ 2193.017226][T14016] device veth1_vlan left promiscuous mode [ 2193.023221][T14016] device veth0_vlan left promiscuous mode [ 2193.193237][T14016] team0 (unregistering): Port device team_slave_1 removed [ 2193.205906][T14016] team0 (unregistering): Port device team_slave_0 removed [ 2193.215726][T14016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2193.228864][T14016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2193.265102][T14016] bond0 (unregistering): Released all slaves [ 2193.371856][T14016] team0 (unregistering): Port device team_slave_1 removed [ 2193.383362][T14016] team0 (unregistering): Port device team_slave_0 removed [ 2193.394977][T14016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2193.405733][T14016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2193.444169][T14016] bond0 (unregistering): Released all slaves [ 2193.510618][T14016] team0 (unregistering): Port device team_slave_1 removed [ 2193.520024][T14016] team0 (unregistering): Port device team_slave_0 removed [ 2193.529179][T14016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2193.541108][T14016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2193.622028][T14016] bond0 (unregistering): Released all slaves [ 2193.729334][T14016] team0 (unregistering): Port device team_slave_1 removed [ 2193.738726][T14016] team0 (unregistering): Port device team_slave_0 removed [ 2193.748468][T14016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2193.759197][T14016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2193.797159][T14016] bond0 (unregistering): Released all slaves