last executing test programs: 13.631366471s ago: executing program 1 (id=498): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f0000000140)) move_pages(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x2) 12.834222915s ago: executing program 2 (id=501): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = fsopen(0x0, 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) 12.581872222s ago: executing program 2 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 12.233693073s ago: executing program 1 (id=504): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) 11.613619782s ago: executing program 1 (id=506): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)="84a9e319"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 11.114972826s ago: executing program 2 (id=507): msgctl$MSG_INFO(0x0, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40805}, 0x20048084) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4ade, &(0x7f0000000280)=ANY=[], 0x4, 0x32e, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) connect$pptp(r7, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r8 = accept4$unix(r7, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) recvmmsg$unix(r8, &(0x7f0000004e00)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x5, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001fc0)=""/54, 0x36}, {&(0x7f0000002000)=""/112, 0x70}, {&(0x7f0000002080)=""/94, 0x5e}, {&(0x7f0000002100)=""/41, 0x29}, {&(0x7f0000002140)=""/88, 0x58}], 0x6, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000022c0), 0x6e, &(0x7f0000004380)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/13, 0xd}], 0x3, &(0x7f00000043c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004440)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000044c0)=""/215, 0xd7}, {&(0x7f00000045c0)=""/167, 0xa7}, {&(0x7f0000004680)=""/141, 0x8d}], 0x3, &(0x7f0000004780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000004d40)=[{&(0x7f00000048c0)=""/72, 0x48}, {&(0x7f0000004940)=""/200, 0xc8}, {&(0x7f0000004a40)=""/255, 0xff}, {&(0x7f0000004b40)=""/252, 0xfc}, {&(0x7f0000004c40)=""/48, 0x30}, {&(0x7f0000004c80)=""/133, 0x85}], 0x6, &(0x7f0000004dc0)=[@rights={{0x10}}], 0x10}}], 0x5, 0x102, &(0x7f0000004f40)={0x77359400}) socket$igmp(0x2, 0x3, 0x2) 10.447451826s ago: executing program 1 (id=509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x10000000}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 9.358140309s ago: executing program 2 (id=513): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = fsopen(0x0, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) 8.98389898s ago: executing program 2 (id=515): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x20040890) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16, @ANYBLOB="3b9600000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="4a003300400000000802110000010802110000010802110000000000000601010101010101002d1b00801b06000000000000000d00c0001c0000000004ce950000e972"], 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x3ff) 7.373625238s ago: executing program 3 (id=518): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f00000001c0)='./file2\x00', 0x14927e, 0x68) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80a61, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$key(r0, 0x0, 0x0) 6.831136115s ago: executing program 3 (id=520): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x80008000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) shutdown(r2, 0x1) 6.547750234s ago: executing program 2 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000004000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x2, 0xb4, 0x7f}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) 6.348189409s ago: executing program 1 (id=522): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) 6.115336696s ago: executing program 1 (id=524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 6.096680907s ago: executing program 4 (id=525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = fsopen(0x0, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) 5.818248665s ago: executing program 4 (id=527): socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 5.060449998s ago: executing program 3 (id=529): r0 = syz_mount_image$fuse(0x0, 0x0, 0x84461, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) r1 = open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@errors_continue}, {@nodelalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRESDEC=r0], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, 0xffffffffffffffff, 0x5}}, 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xfc, 0x2b8, &(0x7f0000000300)="$eJzs3EFr02AYwPGnXbt2HVt7EhTEB73oJWz1ExTZQCwocxX1IGQu1dLYjqZWKuJ2E29+juHRm+D8Art48y5ehiB42UEWadLYtBQ3Z7vM7f+DkWd53yfvmzYbTwJ5d+6+eVItO0bZbEo8rRIX2ZBdkVwn6opJwtvGvXhSwjbkyvSPz+dv37t/o1AsLiypLhaWr+ZVdfbCh2cv3l782Jy+8272fUq2cw92vue/bJ/ZPruztxwcvd5UU1fq9aa5Ylu6WnGqhuot2zIdSys1x2r0tZft+tpaW83a6kxmrWE5jpq1tlattjbr2my01XxkVmpqGIbOZOS0mfjrjNLm0pJZGMtkEIWpYTsbjYI54TfGJBZuKW0e2cwAAMCxcbD63zfK+v9xxdGKo7X96v+4UP+Pj1f/7w0tGnEyJDs3AAUz0/377Uf9DwAAAAAAAAAAAAAAAAAAAADA/2DXdbOu62aDbfCTEpG0iAS/Rz1PjMchvv9YhNPFiIVe3EuL2K9apVbJ3/rthbJUxBZL5pIiP73rocuPF68XF+bUk5Mte72b770kmAryA7nh+fN+voby11ulpGTC4+f99w6H5ecH8pMi0ipNyuVLoXxDsvLpodTFllXvOL38l/Oq124WB8af8voBAAAAAHASGPpbrv/+119N0jA0WDZkoN3f2Xs+INl9ng+obE1KLz8h5xLRnTcAAAAAAKeJ035eNW3banQCSYg0+vaMPpge25GPNhj46AaC18dghqMPjLR/0fyxs+u6651O/z5oXEQiOtNvInL0n3NKRMY6xNen/hd4kM5R/lcCAAAAMA69oj/qmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHoddPGwoP9h1h4LDTcRzVkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8OvAAAA//8XzBeO") openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.118117876s ago: executing program 0 (id=530): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f00000001c0)='./file2\x00', 0x14927e, 0x68) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80a61, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 3.442309977s ago: executing program 0 (id=531): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close(0x3) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44c001, 0x0) fanotify_init(0x200, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 3.077075327s ago: executing program 4 (id=532): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, &(0x7f0000000700)="211f620a57b1", 0x6, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="42f1d77a032190040855") setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 2.319379681s ago: executing program 0 (id=533): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)="84a9e319"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2.069438358s ago: executing program 4 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a4", 0x5d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1.035534779s ago: executing program 4 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 998.95916ms ago: executing program 0 (id=536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffc, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x4, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x32}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x1000003, @loopback, 0x4005}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) 767.308617ms ago: executing program 3 (id=537): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = fsopen(0x0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) 642.304221ms ago: executing program 0 (id=538): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001300)=""/100, 0x64}, {0x0}], 0x2) 548.253463ms ago: executing program 0 (id=539): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x80008000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) shutdown(r2, 0x1) 447.374007ms ago: executing program 3 (id=540): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r1) 379.442349ms ago: executing program 4 (id=541): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f00000001c0)='./file2\x00', 0x14927e, 0x68) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80a61, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=542): socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 62.462312][ T4177] cgroup: Unknown subsys name 'net' [ 62.593534][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.077180][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.964106][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.064745][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.097337][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 66.133934][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.150969][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.160141][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.168723][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.178006][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.185100][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.193181][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.264257][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 66.282163][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.306370][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.314599][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.323465][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.333032][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.360054][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.367422][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.375571][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.428124][ T4191] team0: Port device team_slave_0 added [ 66.452040][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.462978][ T4191] team0: Port device team_slave_1 added [ 66.485716][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.493282][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.501659][ T4198] device bridge_slave_0 entered promiscuous mode [ 66.516235][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.523427][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.531753][ T4198] device bridge_slave_1 entered promiscuous mode [ 66.540961][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.581560][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.588631][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.615437][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.627861][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.634972][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.643322][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.671493][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.678919][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.687310][ T4194] device bridge_slave_0 entered promiscuous mode [ 66.695091][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.702298][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.728555][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.740040][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.747248][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.755429][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.764701][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.776650][ T4189] team0: Port device team_slave_0 added [ 66.782974][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.790808][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.799045][ T4194] device bridge_slave_1 entered promiscuous mode [ 66.819995][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.837312][ T4189] team0: Port device team_slave_1 added [ 66.898220][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.910654][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.922049][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.933738][ T4198] team0: Port device team_slave_0 added [ 66.940450][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.948405][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.974733][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.991814][ T4191] device hsr_slave_0 entered promiscuous mode [ 66.999168][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.022775][ T4198] team0: Port device team_slave_1 added [ 67.030302][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.041020][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.048066][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.074494][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.130249][ T4194] team0: Port device team_slave_0 added [ 67.145409][ T4194] team0: Port device team_slave_1 added [ 67.155263][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.162394][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.188421][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.207414][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.214411][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.241964][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.255736][ T4190] team0: Port device team_slave_0 added [ 67.294994][ T4190] team0: Port device team_slave_1 added [ 67.309932][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.317487][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.324244][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.332535][ T4189] Cannot create hsr debugfs directory [ 67.338798][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.345778][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.372054][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.385303][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.392351][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.418488][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.463881][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.471089][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.497124][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.526689][ T4198] device hsr_slave_0 entered promiscuous mode [ 67.533629][ T4198] device hsr_slave_1 entered promiscuous mode [ 67.540584][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.548362][ T4198] Cannot create hsr debugfs directory [ 67.569779][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.576838][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.602937][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.666591][ T4194] device hsr_slave_0 entered promiscuous mode [ 67.669634][ T4195] Bluetooth: hci0: command 0x0409 tx timeout [ 67.674897][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 67.685036][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 67.695284][ T4194] device hsr_slave_1 entered promiscuous mode [ 67.702380][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.710712][ T4194] Cannot create hsr debugfs directory [ 67.747128][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 67.756997][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 67.801516][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.808613][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.815179][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.823258][ T4190] Cannot create hsr debugfs directory [ 68.054915][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.070439][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.085624][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.096388][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.143255][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.164161][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.182548][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.195878][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.231956][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.250823][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.279381][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.292289][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.349079][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.362071][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.390258][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.409116][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.428113][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.454710][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.465706][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.491000][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.514401][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.536089][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.546176][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.559911][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.575765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.585953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.595971][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.603262][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.612625][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.640525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.649306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.660997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.670039][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.677188][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.687451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.716156][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.735200][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.749417][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.756964][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.765373][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.775691][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.785348][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.795151][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.824943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.834237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.846344][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.853482][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.862889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.872169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.882133][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.889279][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.897105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.905893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.915486][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.922622][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.931145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.940265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.949136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.957268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.965454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.977328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.991574][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.005141][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.015226][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.051280][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.060747][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.070295][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.077427][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.089553][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.100476][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.109828][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.119944][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.130204][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.139605][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.147804][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.155570][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.165457][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.174488][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.184467][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.193308][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.202259][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.216305][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.242880][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.252068][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.261533][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.272434][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.282621][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.292472][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.301910][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.310830][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.321465][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.343188][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.364389][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.374953][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.385718][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.394607][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.401775][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.410292][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.419997][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.428860][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.436118][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.446614][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.455705][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.464256][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.474290][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.483158][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.494468][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.518058][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.534447][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.561069][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.570770][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.581373][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.591066][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.622728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.643960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.689899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.708073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.737336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.757376][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 69.763685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.767797][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 69.777990][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 69.809388][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.818162][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.837681][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 69.844522][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 69.877211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.903560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.919229][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.941915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.959326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.984781][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.004355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.022826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.031708][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.038849][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.048852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.057710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.066353][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.073476][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.083762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.118057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.128168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.135738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.144849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.156493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.173191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.184777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.198359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.217444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.225579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.233483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.252989][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.273310][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.282257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.292995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.303620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.314303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.323186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.332335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.341379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.349272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.362123][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.373079][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.396303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.411449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.478451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.493959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.504340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.513254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.524979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.534320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.546153][ T4191] device veth0_vlan entered promiscuous mode [ 70.569151][ T4189] device veth0_vlan entered promiscuous mode [ 70.578275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.586354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.594794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.611240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.622630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.634301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.654825][ T4191] device veth1_vlan entered promiscuous mode [ 70.670131][ T4190] device veth0_vlan entered promiscuous mode [ 70.681995][ T4189] device veth1_vlan entered promiscuous mode [ 70.689592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.700721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.709819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.718520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.753116][ T4190] device veth1_vlan entered promiscuous mode [ 70.778256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.788867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.797513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.805770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.814943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.824461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.832783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.845219][ T4194] device veth0_vlan entered promiscuous mode [ 70.866080][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.876472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.885620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.895665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.921523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.932106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.978628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.989443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.999165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.008288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.017327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.031829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.047054][ T4191] device veth0_macvtap entered promiscuous mode [ 71.056043][ T4190] device veth0_macvtap entered promiscuous mode [ 71.073033][ T4194] device veth1_vlan entered promiscuous mode [ 71.081713][ T4189] device veth0_macvtap entered promiscuous mode [ 71.095491][ T4191] device veth1_macvtap entered promiscuous mode [ 71.114861][ T4190] device veth1_macvtap entered promiscuous mode [ 71.129539][ T4189] device veth1_macvtap entered promiscuous mode [ 71.148103][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.165486][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.183696][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.205345][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.216557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.225060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.240393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.252605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.261152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.271194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.280254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.289075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.298189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.307301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.316041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.324985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.342933][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.360825][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.367492][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.367514][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.379796][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.394944][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.406442][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.418075][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.436667][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.451184][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.462845][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.471652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.481015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.490045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.498982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.515914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.525782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.537312][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.552052][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.562119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.572684][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584947][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.598295][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607603][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.616430][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.626653][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.651092][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.660327][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.669449][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.682957][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.694964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.704396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.713952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.722841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.732172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.741336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.754215][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.763794][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.772824][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.781925][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.810631][ T4194] device veth0_macvtap entered promiscuous mode [ 71.820948][ T4194] device veth1_macvtap entered promiscuous mode [ 71.828074][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.834275][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 71.841357][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 71.907402][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 71.915069][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 71.959871][ T4198] device veth0_vlan entered promiscuous mode [ 71.975229][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.993730][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.004543][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.015569][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.025494][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.036107][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.053856][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.067627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.076676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.086243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.096248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.105678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.115048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.124323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.136092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.175419][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.189612][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.202881][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.215173][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.225331][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.236199][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.248881][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.258972][ T4198] device veth1_vlan entered promiscuous mode [ 72.279820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.289463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.299363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.312546][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.321701][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.331205][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.340256][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.377031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.384792][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.397932][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.408437][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.416307][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.426594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.436472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.487582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.499232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.519269][ T4198] device veth0_macvtap entered promiscuous mode [ 72.547536][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.555420][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.567326][ T4198] device veth1_macvtap entered promiscuous mode [ 72.589026][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.597872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.610734][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.622978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.631503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.640929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.660651][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.671939][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.692570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.724745][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.733926][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.743669][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.753537][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.764661][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.775561][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.785781][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.804365][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.814738][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.831854][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.844611][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.869558][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.881920][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.891963][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.913574][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.924642][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.934856][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.936533][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.960810][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.973480][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.018364][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.057837][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.079059][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.089925][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.103110][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.166642][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.185912][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.337882][ T4273] loop2: detected capacity change from 0 to 40427 [ 73.350716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.366448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.376100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.393689][ T4273] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 73.401778][ T4273] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.443127][ T4273] F2FS-fs (loop2): invalid crc value [ 73.456539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.473739][ T4273] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.523789][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.541923][ T4273] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 73.549726][ T4273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.553737][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.613522][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.653438][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630818][ T26] audit: type=1800 audit(1779339259.908:2): pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 75.006722][ C0] sched: RT throttling activated [ 75.009676][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 75.021258][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 75.027856][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 75.036950][ T1324] Bluetooth: hci3: command 0x0419 tx timeout [ 75.093488][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 75.112772][ T26] audit: type=1804 audit(1779339259.978:3): pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 75.149100][ T4272] loop1: detected capacity change from 0 to 32768 [ 75.162312][ T4289] loop3: detected capacity change from 0 to 64 [ 75.267721][ T4272] ======================================================= [ 75.267721][ T4272] WARNING: The mand mount option has been deprecated and [ 75.267721][ T4272] and is ignored by this kernel. Remove the mand [ 75.267721][ T4272] option from the mount to silence this warning. [ 75.267721][ T4272] ======================================================= [ 76.203845][ T4289] hfs: request for non-existent node 131072 in B*Tree [ 76.328595][ T4289] hfs: request for non-existent node 131072 in B*Tree [ 76.339289][ T4299] hfs: request for non-existent node 131072 in B*Tree [ 76.346280][ T4299] hfs: request for non-existent node 131072 in B*Tree [ 76.371253][ T4289] hfs: request for non-existent node 131072 in B*Tree [ 76.381348][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.391131][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.406162][ T4289] hfs: request for non-existent node 131072 in B*Tree [ 76.497588][ T4299] hfs: request for non-existent node 131072 in B*Tree [ 76.504650][ T4299] hfs: request for non-existent node 131072 in B*Tree [ 76.514004][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.554466][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.571461][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.607768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.646240][ T4306] loop1: detected capacity change from 0 to 512 [ 76.739012][ T4306] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.859984][ T4306] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 76.882869][ T4311] loop3: detected capacity change from 0 to 512 [ 76.985481][ T4311] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.084933][ T4311] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.263436][ T4311] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.9: Allocating blocks 41-42 which overlap fs metadata [ 77.379498][ T4311] Quota error (device loop3): write_blk: dquota write failed [ 77.387544][ T4311] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 77.398667][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.9: Failed to acquire dquot type 0 [ 78.713046][ T4311] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.793678][ T4311] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.9: corrupted inode contents [ 78.807712][ T4311] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.9: mark_inode_dirty error [ 78.819924][ T4311] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.9: corrupted inode contents [ 78.832411][ T4311] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.9: mark_inode_dirty error [ 78.845746][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 78.875222][ T4311] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.9: corrupted inode contents [ 78.894004][ T4311] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 78.917540][ T4311] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.9: corrupted inode contents [ 78.967112][ T4311] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.9: mark_inode_dirty error [ 78.998833][ T4311] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 79.043796][ T4311] EXT4-fs (loop3): 1 truncate cleaned up [ 79.077440][ T4311] EXT4-fs (loop3): pa ffff8880261029a0: logic 1, phys. 41, len 23 [ 79.085596][ T4311] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 79.113586][ T4311] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 79.512462][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 79.638004][ T4352] loop3: detected capacity change from 0 to 64 [ 79.758899][ T4352] hfs: request for non-existent node 131072 in B*Tree [ 79.765709][ T4352] hfs: request for non-existent node 131072 in B*Tree [ 79.826113][ T4353] hfs: request for non-existent node 131072 in B*Tree [ 79.843779][ T4353] hfs: request for non-existent node 131072 in B*Tree [ 79.865058][ T4352] hfs: request for non-existent node 131072 in B*Tree [ 79.865093][ T4352] hfs: request for non-existent node 131072 in B*Tree [ 79.866376][ T4352] hfs: request for non-existent node 131072 in B*Tree [ 79.866405][ T4352] hfs: request for non-existent node 131072 in B*Tree [ 80.085620][ T4340] loop0: detected capacity change from 0 to 1024 [ 81.016790][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.026787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.056772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 81.076776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 81.166766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 81.196769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.206763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.216752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.226751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.236749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.744377][ T26] audit: type=1326 audit(1779339268.628:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.3.30" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faba3047e59 code=0x0 [ 83.118583][ T4382] loop0: detected capacity change from 0 to 32768 [ 83.202825][ T4382] JBD2: Ignoring recovery information on journal [ 83.271567][ T4382] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.414720][ T4382] syz.0.32 (4382) used greatest stack depth: 20528 bytes left [ 83.581968][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 84.892255][ T4392] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.290709][ T4401] loop2: detected capacity change from 0 to 256 [ 87.399144][ T1346] cfg80211: failed to load regulatory.db [ 87.959788][ T4401] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 89.033072][ T4419] Zero length message leads to an empty skb [ 91.559383][ T4425] loop3: detected capacity change from 0 to 4096 [ 91.663641][ T4425] EXT4-fs (loop3): inline encryption not supported [ 91.709201][ T4425] EXT4-fs (loop3): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 94.099345][ T4461] loop0: detected capacity change from 0 to 256 [ 94.870083][ T4470] loop3: detected capacity change from 0 to 16 [ 94.878043][ T4461] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 95.965937][ T4465] loop4: detected capacity change from 0 to 512 [ 96.038306][ T4477] loop1: detected capacity change from 0 to 1024 [ 96.337851][ T4470] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.619103][ T4479] loop2: detected capacity change from 0 to 32768 [ 96.734259][ T4479] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.62 (4479) [ 96.935622][ T4479] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 96.947334][ T4479] BTRFS info (device loop2): using free space tree [ 96.954226][ T4479] BTRFS info (device loop2): has skinny extents [ 97.803319][ T4465] fscrypt: Error allocating hmac(sha512): -2 [ 97.868094][ T4465] EXT4-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 98.289681][ T4507] loop3: detected capacity change from 0 to 4096 [ 99.544330][ T4507] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 99.657778][ T4479] BTRFS info (device loop2): enabling ssd optimizations [ 99.885861][ T4507] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.269090][ T4507] ntfs3: loop3: Inode r=b is not in use! [ 100.395440][ T4507] ntfs3: loop3: Failed to load $Extend. [ 100.684280][ T26] audit: type=1800 audit(1779339285.416:5): pid=4507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 104.561316][ T4574] loop2: detected capacity change from 0 to 512 [ 104.731132][ T4577] loop1: detected capacity change from 0 to 256 [ 104.817824][ T4577] FAT-fs (loop1): Directory bread(block 64) failed [ 104.824478][ T4577] FAT-fs (loop1): Directory bread(block 65) failed [ 104.831325][ T4577] FAT-fs (loop1): Directory bread(block 66) failed [ 104.837983][ T4577] FAT-fs (loop1): Directory bread(block 67) failed [ 104.844615][ T4577] FAT-fs (loop1): Directory bread(block 68) failed [ 104.851424][ T4577] FAT-fs (loop1): Directory bread(block 69) failed [ 104.859470][ T4577] FAT-fs (loop1): Directory bread(block 70) failed [ 104.866075][ T4577] FAT-fs (loop1): Directory bread(block 71) failed [ 104.872788][ T4577] FAT-fs (loop1): Directory bread(block 72) failed [ 104.879533][ T4577] FAT-fs (loop1): Directory bread(block 73) failed [ 105.959519][ T4574] EXT4-fs (loop2): Test dummy encryption mode enabled [ 106.026615][ T4574] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 106.098523][ T4574] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 106.256113][ T4574] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 107.102744][ T4608] loop3: detected capacity change from 0 to 40427 [ 107.146487][ T4608] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.154343][ T4608] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.164694][ T4608] F2FS-fs (loop3): invalid crc value [ 107.616241][ T4608] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.696727][ T4608] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.703850][ T4608] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.763040][ T4574] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 108.692677][ T26] audit: type=1800 audit(1779339292.248:6): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 109.093260][ T26] audit: type=1804 audit(1779339292.257:7): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.91" name="/newroot/18/bus/file1" dev="loop3" ino=10 res=1 errno=0 [ 110.510853][ T4635] loop4: detected capacity change from 0 to 128 [ 110.622430][ T4644] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[4644] [ 111.285629][ T4651] loop2: detected capacity change from 0 to 512 [ 111.424362][ T4651] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.544514][ T4206] Bluetooth: unknown link type 130 [ 111.664567][ T4651] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.530545][ T4651] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 113.612584][ T4651] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 113.697666][ T4651] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 113.758736][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 113.920655][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 116.024840][ T4681] tmpfs: Unknown parameter '0xffffffffffffffff' [ 117.039846][ T4689] loop1: detected capacity change from 0 to 512 [ 117.151520][ T4689] EXT4-fs (loop1): Test dummy encryption mode enabled [ 117.191104][ T4689] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 117.256492][ T4689] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 117.332882][ T4689] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 117.743494][ T4708] binder: 4706:4708 ioctl c0306201 0 returned -14 [ 117.766460][ T4689] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 117.775928][ T4689] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 117.821590][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 117.836766][ T4716] netlink: 'syz.3.116': attribute type 2 has an invalid length. [ 117.903063][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 117.913099][ T4206] CPU: 0 PID: 4206 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 117.920696][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.930797][ T4206] Workqueue: hci3 hci_rx_work [ 117.935558][ T4206] Call Trace: [ 117.938968][ T4206] [ 117.941934][ T4206] dump_stack_lvl+0x188/0x250 [ 117.946656][ T4206] ? show_regs_print_info+0x20/0x20 [ 117.951902][ T4206] ? load_image+0x400/0x400 [ 117.956495][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 117.961654][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 117.966565][ T4206] ? process_one_work+0x85f/0x1010 [ 117.971730][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 117.977107][ T4206] kobject_add_internal+0x6e0/0xd90 [ 117.982365][ T4206] kobject_add+0x160/0x230 [ 117.986839][ T4206] ? kobject_init+0x1d0/0x1d0 [ 117.991570][ T4206] ? klist_children_get+0x50/0x50 [ 117.996637][ T4206] ? get_device_parent+0x121/0x3f0 [ 118.001789][ T4206] device_add+0x483/0xfb0 [ 118.006185][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 118.011174][ T4206] le_conn_complete_evt+0xc48/0x15c0 [ 118.016513][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 118.021675][ T4206] ? __mutex_trylock_common+0x155/0x260 [ 118.027280][ T4206] hci_le_meta_evt+0xd59/0x3c90 [ 118.032183][ T4206] ? hci_event_packet+0x37b/0x1370 [ 118.037339][ T4206] ? __lock_acquire+0x7d10/0x7d10 [ 118.042420][ T4206] ? hci_remote_host_features_evt+0x280/0x280 [ 118.048548][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 118.054234][ T4206] ? mark_lock+0x94/0x320 [ 118.058617][ T4206] ? mutex_unlock+0x10/0x10 [ 118.063175][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 118.069207][ T4206] ? lock_chain_count+0x20/0x20 [ 118.074106][ T4206] ? __rwlock_init+0x140/0x140 [ 118.078927][ T4206] hci_event_packet+0xe48/0x1370 [ 118.083920][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 118.089172][ T4206] ? rcu_lock_release+0x20/0x20 [ 118.094074][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 118.099327][ T4206] hci_rx_work+0x255/0xa10 [ 118.103812][ T4206] process_one_work+0x85f/0x1010 [ 118.108827][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 118.114504][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 118.119844][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.124910][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.130507][ T4206] ? wq_worker_running+0x97/0x170 [ 118.135587][ T4206] worker_thread+0xaa6/0x1290 [ 118.140323][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 118.145571][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 118.151522][ T4206] kthread+0x436/0x520 [ 118.155631][ T4206] ? rcu_lock_release+0x20/0x20 [ 118.160525][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 118.165150][ T4206] ret_from_fork+0x1f/0x30 [ 118.169622][ T4206] [ 118.176857][ T4206] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.190153][ T4206] Bluetooth: hci3: failed to register connection device [ 118.356976][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 118.462293][ T4718] netlink: 'syz.3.116': attribute type 2 has an invalid length. [ 120.008944][ T4739] loop1: detected capacity change from 0 to 1024 [ 120.282073][ T4742] loop2: detected capacity change from 0 to 512 [ 120.307993][ T4742] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 120.394702][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.420737][ T4742] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 120.443945][ T4742] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.741353][ T13] usb 1-1: device descriptor read/all, error -71 [ 123.739610][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.807721][ T4770] loop2: detected capacity change from 0 to 512 [ 124.519957][ T4770] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.573123][ T4770] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 124.647065][ T4770] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 124.660945][ T4772] loop4: detected capacity change from 0 to 32768 [ 124.701686][ T4770] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 124.726842][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 124.793271][ T4770] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 124.924167][ T4234] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 124.942043][ T4234] usb 4-1: config 0 has no interface number 0 [ 124.960795][ T4772] XFS (loop4): Mounting V5 Filesystem [ 125.718164][ T4234] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.767518][ T4234] usb 4-1: config 0 interface 85 has no altsetting 0 [ 125.870075][ T4772] XFS (loop4): Ending clean mount [ 125.930231][ T4234] usb 4-1: string descriptor 0 read error: -71 [ 125.940879][ T4234] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 125.949978][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.014922][ T4793] loop1: detected capacity change from 0 to 512 [ 126.091691][ T4234] usb 4-1: config 0 descriptor?? [ 126.141150][ T4793] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 126.259534][ T4797] loop3: detected capacity change from 0 to 256 [ 126.387774][ T4797] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 126.727537][ T4796] binder: 4795:4796 ioctl c0306201 0 returned -14 [ 126.970956][ T4793] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 127.438334][ T4793] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.992598][ T4234] usb 4-1: can't set config #0, error -71 [ 128.008634][ T4234] usb 4-1: USB disconnect, device number 2 [ 128.106899][ T4772] XFS (loop4): Quotacheck needed: Please wait. [ 128.246353][ T4772] XFS (loop4): Quotacheck: Done. [ 128.280417][ T4198] XFS (loop4): Unmounting Filesystem [ 128.667039][ T4804] loop0: detected capacity change from 0 to 32768 [ 128.898756][ T4804] find_entry called with index >= next_index [ 128.905376][ T4804] find_entry called with index >= next_index [ 128.911458][ T4804] find_entry called with index >= next_index [ 128.922391][ T4804] capability: warning: `syz.0.140' uses 32-bit capabilities (legacy support in use) [ 129.294922][ T4815] add_index: next_index = 0. Resetting! [ 129.300970][ T4815] find_entry called with index >= next_index [ 129.307084][ T4815] find_entry called with index >= next_index [ 130.356392][ T4821] loop3: detected capacity change from 0 to 32768 [ 130.673526][ T4825] device syzkaller0 entered promiscuous mode [ 131.791086][ T4851] loop3: detected capacity change from 0 to 512 [ 132.476539][ T4856] loop1: detected capacity change from 0 to 128 [ 132.542522][ T4856] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.559897][ T4856] attempt to access beyond end of device [ 132.559897][ T4856] loop1: rw=2051, want=1052, limit=128 [ 133.012856][ T4851] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 133.187360][ T4862] syz.2.155 uses obsolete (PF_INET,SOCK_PACKET) [ 134.005396][ T4851] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 134.198239][ T4851] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.983755][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 136.039096][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.126285][ T4883] device syzkaller0 entered promiscuous mode [ 136.333479][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.339900][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.399179][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.435621][ T21] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.482655][ T21] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.501393][ T21] usb 1-1: config 220 has no interface number 2 [ 136.512559][ T21] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.737977][ T21] usb 1-1: config 220 interface 0 has no altsetting 0 [ 136.767514][ T21] usb 1-1: config 220 interface 76 has no altsetting 0 [ 137.149696][ T4896] loop1: detected capacity change from 0 to 128 [ 137.181080][ T4895] binder: BINDER_SET_CONTEXT_MGR already set [ 137.189097][ T21] usb 1-1: config 220 interface 1 has no altsetting 0 [ 137.203848][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 137.244190][ T4895] binder: 4892:4895 ioctl 4018620d 200000004a80 returned -16 [ 137.332452][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.370167][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 137.396398][ T21] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.421954][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.441846][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 137.465880][ T21] usb 1-1: Product: syz [ 137.491418][ T21] usb 1-1: Manufacturer: syz [ 137.520008][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.528434][ T21] usb 1-1: SerialNumber: syz [ 137.581034][ T23] usb 3-1: config 0 descriptor?? [ 137.600938][ T21] usb 1-1: can't set config #220, error -71 [ 137.616769][ T21] usb 1-1: USB disconnect, device number 4 [ 137.660802][ T4896] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.673798][ T4896] attempt to access beyond end of device [ 137.673798][ T4896] loop1: rw=2051, want=1052, limit=128 [ 137.923335][ T4900] loop0: detected capacity change from 0 to 32768 [ 138.029458][ T4900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.168 (4900) [ 138.267541][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 138.504087][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 138.779122][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 138.804350][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 138.989541][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 139.188596][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 139.402905][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 139.458611][ T23] wacom 0003:056A:0027.0001: unknown main item tag 0x0 [ 139.466378][ T23] wacom 0003:056A:0027.0001: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 139.578809][ T4912] loop3: detected capacity change from 0 to 64 [ 139.705201][ T23] wacom 0003:056A:0027.0001: hidraw0: USB HID v0.08 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 139.926359][ T4913] loop1: detected capacity change from 0 to 40427 [ 139.926908][ T23] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0001/input/input6 [ 139.960422][ T4920] loop4: detected capacity change from 0 to 256 [ 139.970901][ T4900] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.979802][ T4900] BTRFS info (device loop0): force clearing of disk cache [ 139.987097][ T4900] BTRFS info (device loop0): allowing degraded mounts [ 139.993974][ T4900] BTRFS info (device loop0): enabling auto defrag [ 139.995656][ T4919] loop2: detected capacity change from 0 to 512 [ 140.000441][ T4900] BTRFS info (device loop0): enabling ssd optimizations [ 140.000486][ T4900] BTRFS info (device loop0): using spread ssd allocation scheme [ 140.021596][ T4900] BTRFS info (device loop0): using free space tree [ 140.028241][ T4900] BTRFS info (device loop0): has skinny extents [ 140.072283][ T23] usb 3-1: USB disconnect, device number 2 [ 140.095220][ T4920] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 140.105327][ T4913] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 140.113194][ T4913] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.123291][ T4913] F2FS-fs (loop1): invalid crc value [ 140.192727][ T4913] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.254338][ T4919] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 140.272334][ T4913] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.279508][ T4913] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.523196][ T4919] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 141.291039][ T26] audit: type=1800 audit(1779339322.811:8): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.169" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 141.696424][ T4919] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.737157][ T26] audit: type=1804 audit(1779339322.811:9): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.169" name="/newroot/37/bus/file1" dev="loop1" ino=10 res=1 errno=0 [ 141.762799][ T4900] BTRFS error (device loop0): open_ctree failed: -22 [ 141.830431][ T4945] fido_id[4945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.313354][ T4960] device syzkaller0 entered promiscuous mode [ 142.354551][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.803427][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.316787][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.406160][ T4268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4268) [ 143.444299][ T4237] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.564842][ T4237] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.955789][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.024761][ T4237] usb 5-1: config 0 descriptor?? [ 144.201501][ T4965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.389528][ T4237] usbhid 5-1:0.0: can't add hid device: -71 [ 145.395925][ T4237] usbhid: probe of 5-1:0.0 failed with error -71 [ 145.460593][ T4237] usb 5-1: USB disconnect, device number 2 [ 145.696604][ T4983] loop2: detected capacity change from 0 to 32768 [ 145.759756][ T4983] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 145.768848][ T4983] BTRFS info (device loop2): turning on async discard [ 145.775827][ T4983] BTRFS info (device loop2): metadata ratio 0 [ 145.781985][ T4983] BTRFS info (device loop2): setting nodatasum [ 145.788242][ T4983] BTRFS info (device loop2): using free space tree [ 145.794784][ T4983] BTRFS info (device loop2): has skinny extents [ 145.892296][ T4991] loop3: detected capacity change from 0 to 64 [ 146.184465][ T5002] loop4: detected capacity change from 0 to 40427 [ 146.268073][ T5002] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 146.275880][ T5002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 146.286955][ T5002] F2FS-fs (loop4): invalid crc value [ 146.384948][ T5002] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.385144][ T4983] BTRFS info (device loop2): enabling ssd optimizations [ 146.583103][ T5002] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 146.590353][ T5002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.280544][ T26] audit: type=1800 audit(1779339329.240:10): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.188" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 148.374831][ T26] audit: type=1804 audit(1779339329.240:11): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.188" name="/newroot/34/bus/file1" dev="loop4" ino=10 res=1 errno=0 [ 148.700002][ T5022] loop3: detected capacity change from 0 to 512 [ 148.795833][ T5022] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 149.014644][ T5022] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 149.086783][ T5022] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.192281][ T5030] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.534718][ T5051] loop1: detected capacity change from 0 to 32768 [ 150.700554][ T4267] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.011854][ T4267] usb 3-1: Using ep0 maxpacket: 16 [ 151.181282][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 151.513022][ T4267] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 151.522285][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.534438][ T4267] usb 3-1: Product: syz [ 151.549386][ T4267] usb 3-1: Manufacturer: syz [ 151.554182][ T4267] usb 3-1: SerialNumber: syz [ 151.613014][ T4267] usb 3-1: config 0 descriptor?? [ 152.075783][ T4267] hub 3-1:0.0: bad descriptor, ignoring hub [ 152.113189][ T4267] hub: probe of 3-1:0.0 failed with error -5 [ 152.341791][ T5062] loop3: detected capacity change from 0 to 256 [ 152.371819][ T5061] binder: BINDER_SET_CONTEXT_MGR already set [ 152.377876][ T5061] binder: 5060:5061 ioctl 4018620d 200000004a80 returned -16 [ 152.424729][ T5062] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 153.533918][ T5070] overlayfs: failed to get inode (-116) [ 153.847530][ T5079] device syzkaller0 entered promiscuous mode [ 153.865781][ T5070] overlayfs: failed to get inode (-116) [ 153.897176][ T4279] usb 3-1: USB disconnect, device number 3 [ 153.943586][ T5081] overlayfs: failed to get inode (-116) [ 154.178978][ T5081] overlayfs: failed to get inode (-116) [ 155.654678][ T5098] loop3: detected capacity change from 0 to 512 [ 155.979684][ T5101] device syzkaller0 entered promiscuous mode [ 155.992750][ T5098] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 156.167528][ T5098] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 156.321841][ T5108] loop2: detected capacity change from 0 to 256 [ 156.370440][ T5098] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.407866][ T5108] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 159.024527][ T5141] loop4: detected capacity change from 0 to 40427 [ 159.173879][ T5141] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 159.181859][ T5141] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.193950][ T5141] F2FS-fs (loop4): invalid crc value [ 159.282218][ T5131] overlayfs: overlapping lowerdir path [ 159.391987][ T5141] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.456937][ T5141] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.464103][ T5141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.628215][ T5152] loop2: detected capacity change from 0 to 16 [ 160.799021][ T26] audit: type=1800 audit(1779339340.713:12): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.227" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 160.919187][ T26] audit: type=1804 audit(1779339340.722:13): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.227" name="/newroot/41/bus/file1" dev="loop4" ino=10 res=1 errno=0 [ 160.981684][ T5156] device syzkaller0 entered promiscuous mode [ 160.990290][ T5152] erofs: (device loop2): mounted with root inode @ nid 36. [ 165.883820][ T5197] loop1: detected capacity change from 0 to 16 [ 165.927067][ T5197] erofs: (device loop1): mounted with root inode @ nid 36. [ 167.623996][ T5210] loop4: detected capacity change from 0 to 512 [ 167.658968][ T5210] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 168.552751][ T5213] IPVS: dh: FWM 3 0x00000003 - no destination available [ 168.593438][ T5210] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 168.631616][ T5210] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.848324][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 168.883107][ T4267] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.113977][ T5228] loop3: detected capacity change from 0 to 40427 [ 169.133741][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 169.183968][ T5228] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 169.191849][ T5228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.204464][ T5228] F2FS-fs (loop3): invalid crc value [ 169.283587][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.302585][ T5228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.305725][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.347691][ T5228] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 169.352298][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.354782][ T5228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.510010][ T1108] usb 2-1: config 4 has an invalid interface number: 203 but max is 0 [ 169.561809][ T1108] usb 2-1: config 4 has no interface number 0 [ 169.573132][ T1108] usb 2-1: config 4 interface 203 has no altsetting 0 [ 169.582773][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.359061][ T26] audit: type=1800 audit(1779339349.940:14): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 170.705893][ T4267] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.726123][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.766313][ T4267] usb 3-1: config 0 descriptor?? [ 170.775815][ T26] audit: type=1804 audit(1779339349.949:15): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.242" name="/newroot/43/bus/file1" dev="loop3" ino=10 res=1 errno=0 [ 170.833147][ T1108] usb 2-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=f3.d0 [ 170.846013][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.871957][ T1108] usb 2-1: Product: syz [ 170.876652][ T1108] usb 2-1: Manufacturer: syz [ 170.881613][ T1108] usb 2-1: SerialNumber: syz [ 171.566299][ T4267] usbhid 3-1:0.0: can't add hid device: -71 [ 172.254180][ T4267] usbhid: probe of 3-1:0.0 failed with error -71 [ 172.334197][ T4267] usb 3-1: USB disconnect, device number 4 [ 172.529109][ T5254] loop2: detected capacity change from 0 to 16 [ 173.287882][ T1108] usb 2-1: USB disconnect, device number 2 [ 173.546035][ T5254] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.474444][ T5270] loop4: detected capacity change from 0 to 512 [ 174.550301][ T5270] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 175.513020][ T5270] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 175.559227][ T5270] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.784982][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.871234][ T5308] device syzkaller0 entered promiscuous mode [ 177.378803][ T5315] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 178.206525][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.353121][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.415301][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.552548][ T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.844225][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.008879][ T23] usb 5-1: config 0 descriptor?? [ 180.495592][ T5340] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.557223][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 180.563292][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 180.604522][ T23] usb 5-1: USB disconnect, device number 3 [ 180.699073][ T5345] loop1: detected capacity change from 0 to 512 [ 180.751500][ T5345] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 180.855394][ T5345] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 180.902815][ T5345] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.675855][ T5364] device syzkaller0 entered promiscuous mode [ 182.712207][ T5380] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.115959][ T5391] loop4: detected capacity change from 0 to 512 [ 184.006974][ T5391] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 184.217625][ T5400] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 184.382733][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.491236][ T5391] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 184.551019][ T5391] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.853067][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.866589][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.884679][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.902597][ T1108] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.916173][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.930324][ T1108] usb 3-1: config 0 descriptor?? [ 185.560231][ T1108] usbhid 3-1:0.0: can't add hid device: -71 [ 185.590309][ T1108] usbhid: probe of 3-1:0.0 failed with error -71 [ 185.600669][ T1108] usb 3-1: USB disconnect, device number 5 [ 185.986346][ T5420] device syzkaller0 entered promiscuous mode [ 186.434992][ T5429] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.673112][ T5428] device syzkaller0 entered promiscuous mode [ 186.718588][ T5443] loop1: detected capacity change from 0 to 512 [ 186.901335][ T5443] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 186.993229][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 187.128120][ T5443] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.166132][ T5454] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.894444][ T5462] IPVS: dh: FWM 3 0x00000003 - no destination available [ 187.980830][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.989126][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.033412][ T5460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.780408][ T5041] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.426874][ T5041] usb 3-1: Using ep0 maxpacket: 8 [ 189.752651][ T5041] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.785918][ T5483] binder: 5482:5483 ioctl 4018620d 0 returned -22 [ 189.865000][ T5041] usb 3-1: config 4 has an invalid interface number: 203 but max is 0 [ 189.875662][ T5041] usb 3-1: config 4 has no interface number 0 [ 189.881843][ T5041] usb 3-1: config 4 interface 203 has no altsetting 0 [ 190.089334][ T5041] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=f3.d0 [ 190.098745][ T5041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.107253][ T5041] usb 3-1: Product: syz [ 190.112028][ T5041] usb 3-1: Manufacturer: syz [ 190.116712][ T5041] usb 3-1: SerialNumber: syz [ 190.283827][ T5490] loop0: detected capacity change from 0 to 32768 [ 190.439046][ T5490] find_entry called with index >= next_index [ 190.445176][ T5490] find_entry called with index >= next_index [ 190.451321][ T5490] find_entry called with index >= next_index [ 190.627973][ T5494] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 190.799131][ T5499] add_index: next_index = 0. Resetting! [ 190.805016][ T5499] find_entry called with index >= next_index [ 190.811077][ T5499] find_entry called with index >= next_index [ 191.291110][ T5501] device syzkaller0 entered promiscuous mode [ 191.335782][ T5041] usb 3-1: USB disconnect, device number 6 [ 191.552587][ T5505] loop2: detected capacity change from 0 to 512 [ 191.781273][ T5505] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 192.387385][ T5505] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 192.495006][ T5505] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.957281][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.965191][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.987364][ T5525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.966023][ T5532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.142523][ T5539] binder: 5538:5539 ioctl 4018620d 0 returned -22 [ 194.514224][ T5544] IPVS: dh: FWM 3 0x00000003 - no destination available [ 194.844454][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 195.175699][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 195.505193][ T5548] nfs4: Unknown parameter 'smackfshat' [ 195.539116][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.647435][ T1108] usb 4-1: config 4 has an invalid interface number: 203 but max is 0 [ 195.671036][ T1108] usb 4-1: config 4 has no interface number 0 [ 195.684103][ T1108] usb 4-1: config 4 interface 203 has no altsetting 0 [ 195.866383][ T5551] loop1: detected capacity change from 0 to 32768 [ 195.882370][ T1108] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=f3.d0 [ 195.901830][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.936576][ T5551] find_entry called with index >= next_index [ 195.942678][ T5551] find_entry called with index >= next_index [ 195.948805][ T5551] find_entry called with index >= next_index [ 195.954560][ T1108] usb 4-1: Product: syz [ 195.970404][ T1108] usb 4-1: Manufacturer: syz [ 195.987525][ T1108] usb 4-1: SerialNumber: syz [ 197.225156][ T5555] add_index: next_index = 0. Resetting! [ 197.231039][ T5555] find_entry called with index >= next_index [ 197.237283][ T5555] find_entry called with index >= next_index [ 198.284347][ T5561] loop2: detected capacity change from 0 to 512 [ 198.332714][ T5561] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 198.414981][ T1108] usb 4-1: USB disconnect, device number 3 [ 198.497999][ T5561] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 198.520666][ T5561] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.916442][ T5569] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.330982][ T5579] loop1: detected capacity change from 0 to 40427 [ 199.343971][ T5583] loop4: detected capacity change from 0 to 1024 [ 199.433250][ T5579] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 199.441119][ T5579] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 199.449576][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 199.471454][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 199.488496][ T5579] F2FS-fs (loop1): invalid crc value [ 199.495882][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 199.517053][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 199.529580][ T5579] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.594018][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 199.609321][ T5579] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 199.616776][ T5579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.307521][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.315077][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.666453][ T26] audit: type=1800 audit(1779339378.304:16): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.333" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 200.704065][ T5596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.856606][ T26] audit: type=1804 audit(1779339378.322:17): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.333" name="/newroot/77/bus/file1" dev="loop1" ino=10 res=1 errno=0 [ 201.213689][ T5605] loop0: detected capacity change from 0 to 512 [ 201.330909][ T5605] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 201.357884][ T5604] loop4: detected capacity change from 0 to 32768 [ 201.416424][ T4279] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.451039][ T5605] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 201.473153][ T5604] find_entry called with index >= next_index [ 201.479277][ T5604] find_entry called with index >= next_index [ 201.485525][ T5604] find_entry called with index >= next_index [ 201.675216][ T5605] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.808145][ T5613] add_index: next_index = 0. Resetting! [ 201.813915][ T5613] find_entry called with index >= next_index [ 201.819927][ T5613] find_entry called with index >= next_index [ 202.807751][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.814193][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.869669][ T4279] usb 3-1: Using ep0 maxpacket: 32 [ 202.998011][ T4279] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 203.011060][ T4279] usb 3-1: config 0 has no interface number 0 [ 203.049950][ T4279] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.113052][ T4279] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.155777][ T4279] usb 3-1: config 0 interface 85 has no altsetting 0 [ 203.353281][ T4279] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 203.394508][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.467425][ T4279] usb 3-1: Product: syz [ 203.474273][ T4279] usb 3-1: Manufacturer: syz [ 203.496631][ T4279] usb 3-1: SerialNumber: syz [ 203.566930][ T4279] usb 3-1: config 0 descriptor?? [ 203.790525][ T5624] IPVS: dh: FWM 3 0x00000003 - no destination available [ 204.355264][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.491952][ T4279] appletouch 3-1:0.85: Failed to read mode from device. [ 204.499565][ T4279] appletouch: probe of 3-1:0.85 failed with error -5 [ 204.562818][ T4279] usb 3-1: USB disconnect, device number 7 [ 204.708286][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 205.196050][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.456493][ T1108] usb 2-1: config 4 has an invalid interface number: 203 but max is 0 [ 205.456588][ T1108] usb 2-1: config 4 has no interface number 0 [ 205.456707][ T1108] usb 2-1: config 4 interface 203 has no altsetting 0 [ 205.509662][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.869116][ T5644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.018813][ T5647] loop4: detected capacity change from 0 to 40427 [ 206.081753][ T1108] usb 2-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=f3.d0 [ 206.091212][ T5647] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 206.099026][ T5647] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 206.129437][ T5647] F2FS-fs (loop4): invalid crc value [ 206.151244][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.191945][ T5647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.248347][ T1108] usb 2-1: Product: syz [ 206.290892][ T5647] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 206.298085][ T5647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.321741][ T5649] loop3: detected capacity change from 0 to 32768 [ 206.432829][ T5649] find_entry called with index >= next_index [ 206.439022][ T5649] find_entry called with index >= next_index [ 206.445040][ T5649] find_entry called with index >= next_index [ 206.502912][ T1108] usb 2-1: Manufacturer: syz [ 206.517066][ T1108] usb 2-1: SerialNumber: syz [ 207.647686][ T5663] loop0: detected capacity change from 0 to 32768 [ 207.758014][ T5663] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.358 (5663) [ 207.964008][ T5668] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 207.980666][ T5663] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 207.989621][ T5663] BTRFS info (device loop0): setting nodatacow, compression disabled [ 207.997785][ T5663] BTRFS info (device loop0): enabling auto defrag [ 208.004921][ T5663] BTRFS info (device loop0): max_inline at 0 [ 208.011232][ T5663] BTRFS info (device loop0): using free space tree [ 208.017773][ T5663] BTRFS info (device loop0): has skinny extents [ 208.052957][ T1108] usb 2-1: USB disconnect, device number 3 [ 209.061046][ T5663] BTRFS info (device loop0): scrub: started on devid 1 [ 209.085575][ T5663] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 209.596498][ T5709] hub 8-0:1.0: USB hub found [ 209.604072][ T5709] hub 8-0:1.0: 1 port detected [ 209.660569][ T5709] No such timeout policy "syz1" [ 209.676922][ T5709] loop2: detected capacity change from 0 to 16 [ 209.762761][ T5709] erofs: (device loop2): mounted with root inode @ nid 36. [ 209.807076][ T5709] attempt to access beyond end of device [ 209.807076][ T5709] loop2: rw=524288, want=32, limit=16 [ 209.828034][ T5709] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 209.945164][ T26] audit: type=1800 audit(1779339387.568:18): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.366" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 209.948315][ T5709] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 210.091873][ T5708] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 210.101635][ T5708] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 210.153325][ T5708] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 210.175675][ T5708] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 210.200008][ T5708] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 210.221189][ T5708] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 210.335508][ T5106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5106) [ 210.369360][ T5714] loop4: detected capacity change from 0 to 512 [ 210.895236][ T5721] trusted_key: encrypted_key: key user:syz not found [ 210.958924][ T5718] nfs4: Unknown parameter 'smackfshat' [ 211.246805][ T5714] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 211.575699][ T5714] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 211.702394][ T5714] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.306387][ T5730] loop4: detected capacity change from 0 to 40427 [ 212.406269][ T5730] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 212.414107][ T5730] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 212.429375][ T5730] F2FS-fs (loop4): invalid crc value [ 212.480075][ T5730] F2FS-fs (loop4): Found nat_bits in checkpoint [ 212.563571][ T5730] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 212.570694][ T5730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 215.139439][ T5753] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 217.098391][ T5774] loop4: detected capacity change from 0 to 512 [ 217.145519][ T5774] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 217.227214][ T5774] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 217.262762][ T5774] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.416945][ T4279] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 217.939751][ T5781] loop1: detected capacity change from 0 to 40427 [ 218.014209][ T5781] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 218.022041][ T5781] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 218.038885][ T5781] F2FS-fs (loop1): invalid crc value [ 218.065535][ T4279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.087074][ T4279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.098686][ T5781] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.107074][ T5788] loop4: detected capacity change from 0 to 256 [ 218.158000][ T4279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.174185][ T5781] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 218.181754][ T5781] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.197475][ T4279] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.371887][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.395732][ T4279] usb 1-1: config 0 descriptor?? [ 219.216972][ T5795] loop2: detected capacity change from 0 to 32768 [ 219.240715][ T4279] usbhid 1-1:0.0: can't add hid device: -71 [ 219.246883][ T4279] usbhid: probe of 1-1:0.0 failed with error -71 [ 219.283489][ T4279] usb 1-1: USB disconnect, device number 5 [ 219.317900][ T5795] find_entry called with index >= next_index [ 219.323969][ T5795] find_entry called with index >= next_index [ 219.330205][ T5795] find_entry called with index >= next_index [ 219.661943][ T5803] add_index: next_index = 0. Resetting! [ 219.667753][ T5803] find_entry called with index >= next_index [ 219.674046][ T5803] find_entry called with index >= next_index [ 223.407175][ T5835] loop2: detected capacity change from 0 to 40427 [ 223.508137][ T5835] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 223.516456][ T5835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 223.550467][ T5835] F2FS-fs (loop2): invalid crc value [ 223.587012][ T5835] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.593915][ T5835] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 224.601112][ T5835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 224.900551][ T4279] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.321823][ T26] audit: type=1800 audit(1779339401.680:19): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.396" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 226.358255][ T4279] usb 2-1: Using ep0 maxpacket: 32 [ 226.421858][ T26] audit: type=1804 audit(1779339401.680:20): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.396" name="/newroot/88/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 226.646162][ T4279] usb 2-1: device descriptor read/all, error -71 [ 226.898524][ T5876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.109545][ T5876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.257901][ T5892] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 232.142600][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.152058][ T5938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.344850][ T5939] loop3: detected capacity change from 0 to 4096 [ 232.449273][ T5939] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 232.667621][ T5951] loop0: detected capacity change from 0 to 8 [ 234.226626][ T26] audit: type=1326 audit(1779339410.383:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faba3047e59 code=0x0 [ 234.903355][ T5976] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 236.302148][ T5995] loop0: detected capacity change from 0 to 40427 [ 236.331641][ T5995] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 236.339708][ T5995] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 236.351041][ T5995] F2FS-fs (loop0): invalid crc value [ 236.401114][ T5995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 236.460852][ T5995] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 236.468133][ T5995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.750334][ T26] audit: type=1800 audit(1779339412.750:22): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.435" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 237.040962][ T26] audit: type=1804 audit(1779339412.769:23): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.435" name="/newroot/90/bus/file1" dev="loop0" ino=10 res=1 errno=0 [ 238.309892][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.527521][ T6019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.881260][ T6035] netlink: 52 bytes leftover after parsing attributes in process `syz.1.446'. [ 239.933397][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.942793][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.008215][ T6039] netlink: 52 bytes leftover after parsing attributes in process `syz.1.446'. [ 241.456914][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 241.527634][ T6056] loop1: detected capacity change from 0 to 256 [ 241.546813][ T6055] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 241.563494][ T6056] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 241.766822][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 241.908480][ T21] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.938823][ T6059] program syz.4.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.962881][ T21] usb 3-1: config 0 has no interface number 0 [ 241.969115][ T21] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.016690][ T21] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 242.258728][ T21] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 242.292233][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.308026][ T21] usb 3-1: Product: syz [ 242.318860][ T21] usb 3-1: Manufacturer: syz [ 242.329681][ T21] usb 3-1: SerialNumber: syz [ 242.368210][ T21] usb 3-1: config 0 descriptor?? [ 242.463512][ T21] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 243.754638][ T21] usb 3-1: qt2_attach - failed to power on unit: -71 [ 243.761736][ T21] quatech2: probe of 3-1:0.51 failed with error -71 [ 243.862400][ T6077] device syzkaller0 entered promiscuous mode [ 243.883328][ T21] usb 3-1: USB disconnect, device number 8 [ 245.540752][ T6098] loop3: detected capacity change from 0 to 40427 [ 245.644008][ T6098] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 245.652775][ T6098] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 245.666889][ T6098] F2FS-fs (loop3): invalid crc value [ 245.685465][ T6098] F2FS-fs (loop3): Found nat_bits in checkpoint [ 245.737347][ T6098] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 245.745047][ T6098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 245.995300][ T26] audit: type=1800 audit(1779339421.397:24): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.463" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 246.094053][ T26] audit: type=1804 audit(1779339421.416:25): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.463" name="/newroot/79/bus/file1" dev="loop3" ino=10 res=1 errno=0 [ 246.682909][ T5710] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 247.121509][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.172288][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.265943][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.382357][ T5710] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.466650][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.578290][ T5710] usb 5-1: config 0 descriptor?? [ 247.933920][ T6119] device syzkaller0 entered promiscuous mode [ 248.154123][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.194154][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.209149][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.218553][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.232339][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.248639][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.258289][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.276974][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.284455][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.300411][ T5710] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 248.318413][ T5710] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 248.355598][ T5710] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 248.424484][ T5710] usb 5-1: USB disconnect, device number 4 [ 248.439496][ T6129] loop3: detected capacity change from 0 to 128 [ 248.610772][ T6130] fido_id[6130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 250.799208][ T6140] loop4: detected capacity change from 0 to 40427 [ 250.844881][ T6140] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 250.852756][ T6140] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 250.868513][ T6140] F2FS-fs (loop4): invalid crc value [ 250.894684][ T6140] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.109318][ T6140] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 251.109351][ T6140] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.424006][ T26] audit: type=1800 audit(1779339426.460:26): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.476" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 253.091492][ T6161] binder: 6160:6161 ioctl c0306201 0 returned -14 [ 253.486248][ T6167] loop1: detected capacity change from 0 to 128 [ 253.667679][ T6167] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.697134][ T6167] attempt to access beyond end of device [ 253.697134][ T6167] loop1: rw=2051, want=1052, limit=128 [ 254.587016][ T6173] device syzkaller0 entered promiscuous mode [ 258.082313][ T6206] binder: 6204:6206 ioctl c0306201 0 returned -14 [ 258.104488][ T6207] loop3: detected capacity change from 0 to 512 [ 258.154413][ T6207] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 258.407519][ T6207] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 258.424688][ T6207] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.555307][ T6217] loop1: detected capacity change from 0 to 128 [ 258.749035][ T6217] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.784766][ T6217] attempt to access beyond end of device [ 258.784766][ T6217] loop1: rw=2051, want=1052, limit=128 [ 260.679038][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 261.567397][ T6252] loop4: detected capacity change from 0 to 512 [ 261.673052][ T6252] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 261.844276][ T6252] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 261.913309][ T6252] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.544253][ T6262] loop2: detected capacity change from 0 to 128 [ 263.609727][ T6262] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.628618][ T6261] attempt to access beyond end of device [ 263.628618][ T6261] loop2: rw=2051, want=1052, limit=128 [ 263.900114][ T6270] loop4: detected capacity change from 0 to 32768 [ 263.917517][ T6270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.508 (6270) [ 263.962653][ T6269] loop3: detected capacity change from 0 to 4096 [ 264.011873][ T6270] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 264.020814][ T6270] BTRFS info (device loop4): turning on async discard [ 264.027828][ T6270] BTRFS info (device loop4): metadata ratio 0 [ 264.034533][ T6270] BTRFS info (device loop4): setting nodatasum [ 264.040778][ T6270] BTRFS info (device loop4): using free space tree [ 264.047375][ T6270] BTRFS info (device loop4): has skinny extents [ 264.109674][ T6269] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 264.240115][ T6270] BTRFS info (device loop4): enabling ssd optimizations [ 265.880450][ T6315] loop3: detected capacity change from 0 to 512 [ 265.892961][ T6315] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 266.081742][ T6315] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 266.170069][ T6315] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.629563][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.636128][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.359629][ T6351] loop3: detected capacity change from 0 to 4096 [ 268.441600][ T6351] EXT4-fs (loop3): inline encryption not supported [ 268.492062][ T6351] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 268.519337][ T6351] System zones: 0-5 [ 268.564121][ T6351] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,discard,errors=continue,errors=continue,nodelalloc,barrier,,errors=continue. Quota mode: writeback. [ 269.311064][ T6357] loop0: detected capacity change from 0 to 512 [ 269.413577][ T6357] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 269.492375][ T6357] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 269.585772][ T6357] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.603973][ T5036] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 269.840976][ T5036] usb 4-1: device descriptor read/64, error -71 [ 270.143789][ T5036] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 270.335807][ T6366] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 270.832881][ T5036] usb 4-1: device descriptor read/64, error -71 [ 270.972103][ T5036] usb usb4-port1: attempt power cycle [ 272.153855][ T5036] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 272.394628][ T5036] usb 4-1: device descriptor read/8, error -71 [ 272.897020][ T6392] loop4: detected capacity change from 0 to 512 [ 272.984552][ T6392] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 273.052809][ T6392] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 273.110919][ T6392] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.328922][ T6392] [ 273.331324][ T6392] ====================================================== [ 273.338365][ T6392] WARNING: possible circular locking dependency detected [ 273.345435][ T6392] syzkaller #0 Not tainted [ 273.349876][ T6392] ------------------------------------------------------ [ 273.357035][ T6392] syz.4.541/6392 is trying to acquire lock: [ 273.362945][ T6392] ffff888059a2a968 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 273.371909][ T6392] [ 273.371909][ T6392] but task is already holding lock: [ 273.379303][ T6392] ffff8880740eaa58 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 273.388805][ T6392] [ 273.388805][ T6392] which lock already depends on the new lock. [ 273.388805][ T6392] [ 273.399237][ T6392] [ 273.399237][ T6392] the existing dependency chain (in reverse order) is: [ 273.408287][ T6392] [ 273.408287][ T6392] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 273.416165][ T6392] down_read+0x44/0x2e0 [ 273.420879][ T6392] ext4_map_blocks+0x33c/0x1b30 [ 273.426294][ T6392] ext4_getblk+0x176/0x670 [ 273.431261][ T6392] ext4_bread+0x26/0x180 [ 273.436060][ T6392] ext4_quota_read+0x1b3/0x3a0 [ 273.441376][ T6392] find_tree_dqentry+0x188/0xb30 [ 273.447014][ T6392] find_tree_dqentry+0x3eb/0xb30 [ 273.452516][ T6392] qtree_read_dquot+0x13c/0x680 [ 273.457934][ T6392] v2_read_dquot+0xc0/0x110 [ 273.463011][ T6392] dquot_acquire+0x152/0x520 [ 273.468160][ T6392] ext4_acquire_dquot+0x2d9/0x4a0 [ 273.473743][ T6392] dqget+0x778/0xeb0 [ 273.478201][ T6392] __dquot_initialize+0x3c3/0xcd0 [ 273.483789][ T6392] ext4_process_orphan+0x54/0x300 [ 273.489368][ T6392] ext4_orphan_cleanup+0xad2/0x1320 [ 273.495121][ T6392] ext4_fill_super+0x8d6e/0x94f0 [ 273.500617][ T6392] mount_bdev+0x287/0x3c0 [ 273.505506][ T6392] legacy_get_tree+0xe6/0x180 [ 273.510745][ T6392] vfs_get_tree+0x88/0x270 [ 273.515734][ T6392] do_new_mount+0x24a/0xa40 [ 273.520808][ T6392] __se_sys_mount+0x2e3/0x3d0 [ 273.526053][ T6392] do_syscall_64+0x4c/0xa0 [ 273.531027][ T6392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.537481][ T6392] [ 273.537481][ T6392] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 273.545609][ T6392] down_read+0x44/0x2e0 [ 273.550335][ T6392] v2_read_dquot+0x4a/0x110 [ 273.555522][ T6392] dquot_acquire+0x152/0x520 [ 273.560659][ T6392] ext4_acquire_dquot+0x2d9/0x4a0 [ 273.566238][ T6392] dqget+0x778/0xeb0 [ 273.570689][ T6392] __dquot_initialize+0x3c3/0xcd0 [ 273.576264][ T6392] ext4_process_orphan+0x54/0x300 [ 273.581836][ T6392] ext4_orphan_cleanup+0xad2/0x1320 [ 273.587580][ T6392] ext4_fill_super+0x8d6e/0x94f0 [ 273.593068][ T6392] mount_bdev+0x287/0x3c0 [ 273.597943][ T6392] legacy_get_tree+0xe6/0x180 [ 273.603164][ T6392] vfs_get_tree+0x88/0x270 [ 273.608219][ T6392] do_new_mount+0x24a/0xa40 [ 273.613276][ T6392] __se_sys_mount+0x2e3/0x3d0 [ 273.618515][ T6392] do_syscall_64+0x4c/0xa0 [ 273.623485][ T6392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.630207][ T6392] [ 273.630207][ T6392] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 273.637975][ T6392] __lock_acquire+0x2c42/0x7d10 [ 273.643536][ T6392] lock_acquire+0x19e/0x400 [ 273.648606][ T6392] __mutex_lock_common+0x1e3/0x2400 [ 273.654364][ T6392] mutex_lock_nested+0x17/0x20 [ 273.659684][ T6392] dquot_commit+0x5a/0x410 [ 273.664656][ T6392] ext4_write_dquot+0x1f0/0x360 [ 273.670069][ T6392] mark_all_dquot_dirty+0xf9/0x400 [ 273.675726][ T6392] __dquot_free_space+0x7ca/0xb90 [ 273.681297][ T6392] ext4_free_blocks+0x1b2b/0x24d0 [ 273.686875][ T6392] ext4_ext_remove_space+0x1f86/0x42b0 [ 273.692886][ T6392] ext4_ext_truncate+0x192/0x240 [ 273.698378][ T6392] ext4_truncate+0xa09/0x10f0 [ 273.703597][ T6392] ext4_setattr+0x1147/0x1b60 [ 273.708817][ T6392] notify_change+0xbcd/0xee0 [ 273.713960][ T6392] do_truncate+0x1ac/0x240 [ 273.718927][ T6392] path_openat+0x2922/0x2fa0 [ 273.724062][ T6392] do_filp_open+0x1e2/0x410 [ 273.729117][ T6392] do_sys_openat2+0x150/0x4b0 [ 273.734344][ T6392] __x64_sys_open+0x11b/0x140 [ 273.739570][ T6392] do_syscall_64+0x4c/0xa0 [ 273.744530][ T6392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.750973][ T6392] [ 273.750973][ T6392] other info that might help us debug this: [ 273.750973][ T6392] [ 273.761217][ T6392] Chain exists of: [ 273.761217][ T6392] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 273.761217][ T6392] [ 273.774936][ T6392] Possible unsafe locking scenario: [ 273.774936][ T6392] [ 273.782421][ T6392] CPU0 CPU1 [ 273.787812][ T6392] ---- ---- [ 273.793202][ T6392] lock(&ei->i_data_sem/2); [ 273.797831][ T6392] lock(&s->s_dquot.dqio_sem); [ 273.805236][ T6392] lock(&ei->i_data_sem/2); [ 273.812389][ T6392] lock(&dquot->dq_lock); [ 273.816834][ T6392] [ 273.816834][ T6392] *** DEADLOCK *** [ 273.816834][ T6392] [ 273.824996][ T6392] 5 locks held by syz.4.541/6392: [ 273.830050][ T6392] #0: ffff88804708c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 273.834150][ T6403] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.541: iget: bad i_size value: 2533274857506816 [ 273.839238][ T6392] #1: ffff8880740eabd0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240 [ 273.861879][ T6392] #2: ffff8880740ead70 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xf16/0x1b60 [ 273.872109][ T6392] #3: ffff8880740eaa58 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 273.881930][ T6392] #4: ffffffff8c441df8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 273.891302][ T6392] [ 273.891302][ T6392] stack backtrace: [ 273.897227][ T6392] CPU: 0 PID: 6392 Comm: syz.4.541 Not tainted syzkaller #0 [ 273.904538][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.914621][ T6392] Call Trace: [ 273.917927][ T6392] [ 273.920885][ T6392] dump_stack_lvl+0x188/0x250 [ 273.925597][ T6392] ? load_image+0x400/0x400 [ 273.930140][ T6392] ? show_regs_print_info+0x20/0x20 [ 273.935384][ T6392] ? print_circular_bug+0x12b/0x1a0 [ 273.940629][ T6392] check_noncircular+0x296/0x330 [ 273.945609][ T6392] ? add_chain_block+0x940/0x940 [ 273.950583][ T6392] ? lockdep_lock+0xf1/0x1f0 [ 273.955231][ T6392] ? mark_lock+0x94/0x320 [ 273.959595][ T6392] __lock_acquire+0x2c42/0x7d10 [ 273.964486][ T6392] ? __bfs+0x2a3/0x5c0 [ 273.968589][ T6392] ? verify_lock_unused+0x140/0x140 [ 273.973825][ T6392] ? check_noncircular+0x189/0x330 [ 273.978969][ T6392] ? add_chain_block+0x940/0x940 [ 273.983946][ T6392] ? lockdep_lock+0xf1/0x1f0 [ 273.988663][ T6392] ? lockdep_unlock+0x143/0x2e0 [ 273.993563][ T6392] lock_acquire+0x19e/0x400 [ 273.998136][ T6392] ? dquot_commit+0x5a/0x410 [ 274.002768][ T6392] ? __might_sleep+0xf0/0xf0 [ 274.007392][ T6392] ? read_lock_is_recursive+0x10/0x10 [ 274.012798][ T6392] ? mark_lock+0x94/0x320 [ 274.017163][ T6392] ? dquot_commit+0x5a/0x410 [ 274.021777][ T6392] __mutex_lock_common+0x1e3/0x2400 [ 274.027010][ T6392] ? dquot_commit+0x5a/0x410 [ 274.031637][ T6392] ? lockdep_hardirqs_on+0x94/0x140 [ 274.036874][ T6392] ? asm_sysvec_call_function_single+0x16/0x20 [ 274.043075][ T6392] ? __might_sleep+0xf0/0xf0 [ 274.047702][ T6392] ? mutex_lock_io_nested+0x60/0x60 [ 274.052965][ T6392] mutex_lock_nested+0x17/0x20 [ 274.057773][ T6392] dquot_commit+0x5a/0x410 [ 274.062223][ T6392] ? __ext4_journal_start_sb+0x1bd/0x360 [ 274.067895][ T6392] ext4_write_dquot+0x1f0/0x360 [ 274.072789][ T6392] mark_all_dquot_dirty+0xf9/0x400 [ 274.077947][ T6392] __dquot_free_space+0x7ca/0xb90 [ 274.083021][ T6392] ext4_free_blocks+0x1b2b/0x24d0 [ 274.088097][ T6392] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 274.095513][ T6392] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 274.101628][ T6392] ? ext4_inode_journal_mode+0x18f/0x460 [ 274.107427][ T6392] ext4_ext_remove_space+0x1f86/0x42b0 [ 274.112946][ T6392] ? asm_sysvec_call_function_single+0x16/0x20 [ 274.119139][ T6392] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 274.124992][ T6392] ? ext4_es_remove_extent+0x24f/0x3e0 [ 274.130496][ T6392] ext4_ext_truncate+0x192/0x240 [ 274.135477][ T6392] ext4_truncate+0xa09/0x10f0 [ 274.140220][ T6392] ? __ext4_mark_inode_dirty+0x700/0x700 [ 274.145891][ T6392] ? unmap_mapping_range+0xc8/0x100 [ 274.151133][ T6392] ext4_setattr+0x1147/0x1b60 [ 274.155856][ T6392] ? ext4_write_inode+0x5f0/0x5f0 [ 274.160918][ T6392] notify_change+0xbcd/0xee0 [ 274.165551][ T6392] do_truncate+0x1ac/0x240 [ 274.170010][ T6392] ? rcu_lock_release+0x20/0x20 [ 274.174904][ T6392] ? ima_bprm_check+0x200/0x200 [ 274.179804][ T6392] ? bpf_lsm_path_truncate+0x5/0x10 [ 274.185040][ T6392] path_openat+0x2922/0x2fa0 [ 274.189685][ T6392] ? do_filp_open+0x410/0x410 [ 274.194416][ T6392] do_filp_open+0x1e2/0x410 [ 274.198959][ T6392] ? vfs_tmpfile+0x300/0x300 [ 274.203596][ T6392] ? _raw_spin_unlock+0x24/0x40 [ 274.208484][ T6392] ? alloc_fd+0x598/0x630 [ 274.212847][ T6392] do_sys_openat2+0x150/0x4b0 [ 274.217556][ T6392] ? do_sys_open+0xe0/0xe0 [ 274.222007][ T6392] __x64_sys_open+0x11b/0x140 [ 274.226719][ T6392] do_syscall_64+0x4c/0xa0 [ 274.231168][ T6392] ? clear_bhb_loop+0x30/0x80 [ 274.235890][ T6392] ? clear_bhb_loop+0x30/0x80 [ 274.240602][ T6392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.246545][ T6392] RIP: 0033:0x7fd596f07e59 [ 274.250995][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.270632][ T6392] RSP: 002b:00007fd595161028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 274.279090][ T6392] RAX: ffffffffffffffda RBX: 00007fd597180fa0 RCX: 00007fd596f07e59 [ 274.287107][ T6392] RDX: 0000000000000068 RSI: 000000000014927e RDI: 00002000000001c0 [ 274.295119][ T6392] RBP: 00007fd596f9dd6f R08: 0000000000000000 R09: 0000000000000000 [ 274.303123][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.311135][ T6392] R13: 00007fd597181038 R14: 00007fd597180fa0 R15: 00007ffc901ccb88 [ 274.319160][ T6392]