last executing test programs: 37.304552063s ago: executing program 4 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x34, r1, 0x4f79951a91b7df8f, 0x70bd27, 0x3, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004845}, 0x2060084) 37.203023156s ago: executing program 4 (id=400): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x22852, r1, 0x0) mremap(&(0x7f00000db000/0x3000)=nil, 0x3000, 0xc000, 0x3, &(0x7f000003e000/0xc000)=nil) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 35.821313054s ago: executing program 4 (id=406): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x8}]}) 35.11900407s ago: executing program 4 (id=409): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='dmode=00000000000000000007777,noadinicb,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c7569643d666f726765742c6e6f7374726963742c756d61736b3d30303030303030303030303030303030303030303030322c6c6f6e6761642c62733d30303030303030303030303030303030313030302c00006f727461642c746e686964652c00324c44fb627b4dc1c315e407c4"], 0xfc, 0xc44, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) rseq(0x0, 0x0, 0x40000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) 33.749454456s ago: executing program 4 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x10005, 0x0, 0x0, 0x41100, 0x42}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 31.972236732s ago: executing program 4 (id=428): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 31.825444425s ago: executing program 32 (id=428): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 8.973570429s ago: executing program 0 (id=594): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, 0x0}, 0x20008b88) 8.844014149s ago: executing program 0 (id=595): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x61}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x0, "37e52be2"}, @local=@item_012={0x2, 0x2, 0xa, "fd8d"}, @main=@item_4={0x3, 0x0, 0xb, "8c45c01a"}, @local=@item_4={0x3, 0x2, 0x1, '0b\b\x00'}, @global=@item_4={0x3, 0x1, 0x4, "c1235e5c"}, @global]}}, 0x0}, 0x0) 8.201642612s ago: executing program 0 (id=602): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x6, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 7.867776636s ago: executing program 0 (id=605): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, 0x0}, 0x20008b88) 7.781611795s ago: executing program 0 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.373904226s ago: executing program 0 (id=609): fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x97444c3fdaaa5e31, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) 2.697317489s ago: executing program 3 (id=638): mount$9p_tcp(&(0x7f0000000640), 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 2.607935269s ago: executing program 3 (id=640): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 2.295049328s ago: executing program 3 (id=643): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfc9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1.937621248s ago: executing program 3 (id=646): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x22852, r1, 0x0) mremap(&(0x7f00000db000/0x3000)=nil, 0x3000, 0xc000, 0x3, &(0x7f000003e000/0xc000)=nil) connect$inet6(r0, 0x0, 0x0) 1.542634116s ago: executing program 2 (id=652): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f0000000e80)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100"/20], 0x1c}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00000e60deeb00", [0x7f, 0x9]}}) 1.454162746s ago: executing program 1 (id=654): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x15}, {0x87, 0x68}]}) 1.353647208s ago: executing program 1 (id=655): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0xa}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.157999162s ago: executing program 1 (id=656): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfc9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1.008883075s ago: executing program 2 (id=659): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x14440, &(0x7f0000000100)={[{@block_validity}, {@grpjquota}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50e, &(0x7f0000000200)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) lseek(0xffffffffffffffff, 0x595e, 0x3) 1.001124637s ago: executing program 3 (id=660): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000004c0)="04", 0x1, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 853.90759ms ago: executing program 5 (id=661): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) 710.411802ms ago: executing program 5 (id=662): mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', 0x0, 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 631.939389ms ago: executing program 2 (id=663): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESOCT=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a01, 0x60) 630.725269ms ago: executing program 1 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x0, 0x3, 0x5, 0x0, 0x40, 0x1, 0xf7, 0x4, 0xc0, 0x5, 0x1, 0x5, 0x0, 0x2, 0x5, 0x7, 0xf9, 0xf8, 0x6, '\x00', 0x2, 0x7fffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0xbd, 0x87, '\x00', 0x8}, {0x9, 0x9, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6, '\x00', 0xf9}, {0x0, 0x4, 0x1, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xfc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x2, 0x26}, {0xcf, 0x3, 0xff, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x7, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x2, 0x7, '\x00', 0x10}, {0x9, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 578.951761ms ago: executing program 5 (id=665): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x20000c, 0xfff9, 0x1000, 0x60, 0x7, 0x0, 0x0, 0x40, 0xb}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 492.86023ms ago: executing program 5 (id=666): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x15}, {0x87, 0x68}]}) 480.925533ms ago: executing program 1 (id=667): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 389.257863ms ago: executing program 5 (id=668): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0xa}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 309.568601ms ago: executing program 2 (id=669): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 230.686998ms ago: executing program 1 (id=670): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f0000000e80)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100"/20], 0x1c}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00000e60deeb00", [0x7f, 0x9]}}) 201.309705ms ago: executing program 2 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 180.74719ms ago: executing program 5 (id=672): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) 322.37µs ago: executing program 2 (id=673): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=674): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfc9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) kernel console output (not intermixed with test programs): 65.076102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.083940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.092079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.118270][ T4187] device veth1_macvtap entered promiscuous mode [ 65.127550][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.139808][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.151057][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.165907][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.172996][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.181236][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.190057][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.198878][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.204104][ T4174] Bluetooth: hci1: command 0x041b tx timeout [ 65.205980][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.219965][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 65.224588][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.241755][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.251328][ T4191] device veth1_vlan entered promiscuous mode [ 65.274141][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.282274][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.291009][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 65.296085][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.297783][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 65.309643][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.310826][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 65.322898][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.335290][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.343780][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.352777][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.361709][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.372272][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.390353][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.399665][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.409802][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.427298][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.436066][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.447106][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.460780][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.470493][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.486701][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.510500][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.529793][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.541351][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.550477][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.562243][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.570932][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.579484][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.588034][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.598188][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.607748][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.617641][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.626531][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.640140][ T4191] device veth0_macvtap entered promiscuous mode [ 65.669657][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.694346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.712374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.723983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.731447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.739973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.751760][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.760542][ T4191] device veth1_macvtap entered promiscuous mode [ 65.831736][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.849820][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.863035][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.873701][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.885048][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.897247][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.907719][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.916778][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.927405][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.935993][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.945269][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.953872][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.986327][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996135][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.007654][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.016935][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.041773][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.059351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.068183][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.074682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.082910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.099053][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.110784][ T4189] device veth0_vlan entered promiscuous mode [ 66.157577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.168110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.177543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.191237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.220864][ T4189] device veth1_vlan entered promiscuous mode [ 66.224162][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.236481][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.291304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.301063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.310125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.320663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.329853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.338814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.347808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.365019][ T4185] device veth0_vlan entered promiscuous mode [ 66.387723][ T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.388273][ T4189] device veth0_macvtap entered promiscuous mode [ 66.402262][ T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.408485][ T4194] device veth0_vlan entered promiscuous mode [ 66.427401][ T4185] device veth1_vlan entered promiscuous mode [ 66.435910][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.449745][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.459698][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.468291][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.476899][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.485761][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.493401][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.501788][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.510522][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.519046][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.526886][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.535911][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.543615][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.578034][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.587640][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.601453][ T4189] device veth1_macvtap entered promiscuous mode [ 66.608079][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.617308][ T4194] device veth1_vlan entered promiscuous mode [ 66.656060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.682917][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.693459][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.720928][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.745212][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.755684][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.766229][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.777936][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.787257][ T4185] device veth0_macvtap entered promiscuous mode [ 66.809365][ T4194] device veth0_macvtap entered promiscuous mode [ 66.840518][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.850143][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.864330][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.873111][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.887269][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.900505][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.919310][ T4264] device syzkaller0 entered promiscuous mode [ 66.929990][ T4185] device veth1_macvtap entered promiscuous mode [ 66.939740][ T4194] device veth1_macvtap entered promiscuous mode [ 66.954232][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.967415][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.980115][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.000830][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.022553][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.042668][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.055817][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.066119][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.077077][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.087564][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.098228][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.109796][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.155636][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.165192][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.173119][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.182401][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.191113][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.201571][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.222843][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.232061][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.241171][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.250581][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.272641][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.284745][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 67.292157][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 67.298691][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.310158][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.320971][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.332041][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.342935][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.354722][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.367943][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.378874][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 67.385662][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 67.385765][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.391719][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 67.406548][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.418940][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.428908][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.439841][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.451823][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.462467][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.474767][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.482569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.492085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.501172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.510083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.528503][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.539505][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.549765][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.560999][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.571098][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.581733][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.591901][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.602519][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.614843][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.622991][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.632082][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.641601][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.650869][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.670576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.680860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.705281][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.723091][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.742603][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.752171][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822506][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.880354][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.898558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.909900][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.918766][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.934066][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.944708][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.954491][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.987630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.016787][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.036674][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.050180][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.052736][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.067455][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.076647][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.078946][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.089629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.100989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.107145][ T4279] ip_tables: iptables: counters copy to user failed while replacing table [ 68.330195][ T4288] ip_tables: iptables: counters copy to user failed while replacing table [ 68.532199][ T4296] ip_tables: iptables: counters copy to user failed while replacing table [ 68.545945][ T4296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.575761][ T4296] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11'. [ 68.585174][ T4296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 68.717088][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.726903][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.735901][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.827330][ T4307] device syzkaller0 entered promiscuous mode [ 68.841527][ T4307] TC_ACT_REPEAT abuse ? [ 69.061636][ T4315] device syzkaller0 entered promiscuous mode [ 69.143064][ T4317] device syzkaller0 entered promiscuous mode [ 69.160753][ T4317] TC_ACT_REPEAT abuse ? [ 69.264259][ T4320] tipc: Started in network mode [ 69.285209][ T4320] tipc: Node identity 1a6542fe41d4, cluster identity 4711 [ 69.292510][ T4320] tipc: Enabled bearer , priority 0 [ 69.330002][ T4325] ip_tables: iptables: counters copy to user failed while replacing table [ 69.346106][ T4325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.370587][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 69.374935][ T1344] Bluetooth: hci0: command 0x0419 tx timeout [ 69.387136][ T4324] device syzkaller0 entered promiscuous mode [ 69.407534][ T4322] device syzkaller0 entered promiscuous mode [ 69.444377][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 69.445611][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 69.456998][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 69.485498][ T4330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26'. [ 69.504849][ T4319] tipc: Resetting bearer [ 69.561900][ T4319] tipc: Disabling bearer [ 69.757507][ T4339] device syzkaller0 entered promiscuous mode [ 69.831066][ T4347] loop1: detected capacity change from 0 to 512 [ 69.879375][ T4346] device syzkaller0 entered promiscuous mode [ 69.955293][ T4347] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 69.968522][ T4347] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.32: invalid indirect mapped block 256 (level 1) [ 69.990955][ T4347] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.32: invalid indirect mapped block 2683928664 (level 1) [ 70.007859][ T4353] ip_tables: iptables: counters copy to user failed while replacing table [ 70.023888][ T4347] EXT4-fs (loop1): 1 truncate cleaned up [ 70.029673][ T4347] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 70.096717][ T4356] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 70.369454][ T4369] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.32: Invalid block bitmap block 3 in block_group 0 [ 70.609004][ T4374] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.32: corrupted in-inode xattr [ 70.906149][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.945397][ T4382] Zero length message leads to an empty skb [ 71.207096][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213647][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.761859][ T4450] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.892522][ T4456] loop3: detected capacity change from 0 to 2048 [ 72.041500][ T4456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.151710][ T4459] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.940525][ T4514] loop0: detected capacity change from 0 to 256 [ 73.694688][ T4526] loop3: detected capacity change from 0 to 128 [ 73.754609][ T4526] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 73.795570][ T4526] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.820044][ T4541] loop0: detected capacity change from 0 to 512 [ 73.827102][ T4526] ext2 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.883807][ T4541] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.897600][ T4541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.940328][ T4541] EXT4-fs (loop0): 1 truncate cleaned up [ 73.949528][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 73.978897][ T4541] EXT4-fs (loop0): shut down requested (1) [ 73.994178][ T4549] loop4: detected capacity change from 0 to 256 [ 74.000570][ T4548] loop1: detected capacity change from 0 to 8 [ 74.125389][ T25] audit: type=1800 audit(1790458561.860:2): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.93" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 74.211855][ T4552] device syzkaller0 entered promiscuous mode [ 74.223176][ T4549] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.265556][ T419] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.349972][ T4549] loop5: detected capacity change from 0 to 7 [ 74.368084][ T4175] Dev loop5: unable to read RDB block 7 [ 74.374619][ T4175] loop5: unable to read partition table [ 74.395320][ T4175] loop5: partition table beyond EOD, truncated [ 74.414143][ T4549] Dev loop5: unable to read RDB block 7 [ 74.420095][ T4549] loop5: unable to read partition table [ 74.443843][ T4549] loop5: partition table beyond EOD, truncated [ 74.472547][ T4549] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.733343][ T4569] device syzkaller0 entered promiscuous mode [ 74.880883][ T4548] syz.1.93 (4548) used greatest stack depth: 20848 bytes left [ 74.909347][ T4574] device syzkaller0 entered promiscuous mode [ 75.118297][ T4584] device syzkaller0 entered promiscuous mode [ 75.975285][ T4594] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 76.328257][ T4227] Bluetooth: hci5: command 0x1003 tx timeout [ 76.342346][ T4226] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.442094][ T4606] device syzkaller0 entered promiscuous mode [ 76.502242][ T4617] device syzkaller0 entered promiscuous mode [ 76.647631][ T4620] device syzkaller0 entered promiscuous mode [ 76.677739][ T4622] loop3: detected capacity change from 0 to 512 [ 76.800209][ T4622] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 76.983498][ T4622] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.124: invalid indirect mapped block 256 (level 1) [ 77.184758][ T4622] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.124: invalid indirect mapped block 2683928664 (level 1) [ 77.514246][ T4622] EXT4-fs (loop3): 1 truncate cleaned up [ 77.543768][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 77.573781][ T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.692801][ T4634] loop4: detected capacity change from 0 to 128 [ 77.961868][ T4638] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.124: Invalid block bitmap block 3 in block_group 0 [ 78.127490][ T4637] loop4: detected capacity change from 0 to 128 [ 78.250114][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.268402][ T4641] loop1: detected capacity change from 0 to 256 [ 78.307910][ T4637] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.403740][ T4277] Bluetooth: hci5: command 0x1001 tx timeout [ 78.409971][ T146] Bluetooth: hci5: sending frame failed (-49) [ 78.421209][ T4641] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 78.583834][ T13] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 78.615278][ T13] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.660375][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.678222][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 78.701181][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.736285][ T13] usb 1-1: config 0 descriptor?? [ 78.755516][ T4650] device syzkaller0 entered promiscuous mode [ 78.764778][ T4624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.853413][ T4653] device syzkaller0 entered promiscuous mode [ 78.965352][ T4656] device syzkaller0 entered promiscuous mode [ 79.229268][ T13] apple 0003:05AC:0240.0001: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 79.244582][ T13] input: HID 05ac:0240 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0240.0001/input/input5 [ 79.363658][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.396242][ T13] apple 0003:05AC:0240.0001: input,hidraw0: USB HID v0.11 Joystick [HID 05ac:0240] on usb-dummy_hcd.0-1/input0 [ 79.518702][ T4671] ======================================================= [ 79.518702][ T4671] WARNING: The mand mount option has been deprecated and [ 79.518702][ T4671] and is ignored by this kernel. Remove the mand [ 79.518702][ T4671] option from the mount to silence this warning. [ 79.518702][ T4671] ======================================================= [ 80.015883][ T13] usb 1-1: USB disconnect, device number 2 [ 80.156427][ T4672] fido_id[4672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 80.283825][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.294895][ T1111] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 80.304007][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.483797][ T4277] Bluetooth: hci5: command 0x1009 tx timeout [ 80.640984][ T4693] device syzkaller0 entered promiscuous mode [ 80.683719][ T1111] usbhid 5-1:1.0: can't add hid device: -71 [ 80.690186][ T1111] usbhid: probe of 5-1:1.0 failed with error -71 [ 80.699211][ T1111] usb 5-1: USB disconnect, device number 2 [ 80.749518][ T4695] device syzkaller0 entered promiscuous mode [ 80.801031][ T4697] device syzkaller0 entered promiscuous mode [ 81.153679][ T4710] capability: warning: `syz.1.155' uses deprecated v2 capabilities in a way that may be insecure [ 81.396345][ T4721] device syzkaller0 entered promiscuous mode [ 81.404376][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.467837][ T4723] device syzkaller0 entered promiscuous mode [ 81.690023][ T4727] fuse: Bad value for 'fd' [ 81.692433][ T4725] device syzkaller0 entered promiscuous mode [ 81.827249][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.843589][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.882010][ T1111] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 81.913606][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.015520][ T4729] kvm: pic: single mode not supported [ 82.015987][ T4729] kvm: pic: single mode not supported [ 82.021796][ T4729] kvm: pic: level sensitive irq not supported [ 82.030919][ T4731] loop0: detected capacity change from 0 to 4096 [ 82.049112][ T4729] kvm: pic: single mode not supported [ 82.049128][ T4729] kvm: pic: level sensitive irq not supported [ 82.057955][ T4729] kvm: pic: single mode not supported [ 82.074811][ T4729] kvm: pic: single mode not supported [ 82.103952][ T4729] kvm: pic: single mode not supported [ 82.109389][ T4729] kvm: pic: level sensitive irq not supported [ 82.120000][ T4731] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.149244][ T4729] kvm: pic: single mode not supported [ 82.149261][ T4729] kvm: pic: level sensitive irq not supported [ 82.155360][ T4729] kvm: pic: single mode not supported [ 82.171981][ T4729] kvm: pic: single mode not supported [ 82.184457][ T4729] kvm: pic: single mode not supported [ 82.190272][ T4729] kvm: pic: level sensitive irq not supported [ 82.202808][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nombcache,,errors=continue. Quota mode: writeback. [ 82.203897][ T4729] kvm: pic: level sensitive irq not supported [ 82.260898][ T4727] loop1: detected capacity change from 0 to 8 [ 82.417078][ T1111] wacom 0003:056A:033B.0002: unknown main item tag 0x0 [ 82.437209][ T1111] wacom 0003:056A:033B.0002: unknown main item tag 0x0 [ 82.454745][ T1111] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 82.484265][ T1111] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 82.521915][ T1111] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0002/input/input6 [ 82.629540][ T1111] usb 4-1: USB disconnect, device number 2 [ 82.741635][ T4731] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 82.749258][ T4744] fido_id[4744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 84.126749][ T4767] device syzkaller0 entered promiscuous mode [ 84.233758][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.473625][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 84.558958][ T4773] overlayfs: missing 'lowerdir' [ 84.593827][ T26] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 84.607792][ T26] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 84.629348][ T26] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 84.655169][ T26] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 84.663452][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 84.672908][ T26] usb 4-1: config 0 has no interface number 0 [ 84.680622][ T26] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 84.692190][ T26] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 84.739598][ T26] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.765599][ T4775] loop0: detected capacity change from 0 to 512 [ 84.792311][ T26] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.887182][ T4775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.888306][ T26] usb 4-1: config 0 interface 125 has no altsetting 0 [ 84.969607][ T4775] fs-verity (loop0, inode 18): Unknown hash algorithm number: 0 [ 85.000905][ T26] usb 4-1: config 0 interface 125 has no altsetting 2 [ 85.136544][ T4783] 9pnet: p9_fd_create_tcp (4783): problem connecting socket to 127.0.0.1 [ 85.193839][ T26] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 85.213330][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.271743][ T26] usb 4-1: Product: syz [ 85.276904][ T26] usb 4-1: Manufacturer: syz [ 85.281522][ T26] usb 4-1: SerialNumber: syz [ 85.295705][ T4787] loop2: detected capacity change from 0 to 1024 [ 85.306423][ T26] usb 4-1: config 0 descriptor?? [ 85.338781][ T4787] EXT4-fs (loop2): inline encryption not supported [ 85.345864][ T26] usb 4-1: selecting invalid altsetting 2 [ 85.390784][ T4787] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.182: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.407673][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.414384][ T4787] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 85.422611][ T4787] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.182: Invalid inode table block 1 in block_group 0 [ 85.443585][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.453686][ T4787] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 85.473850][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.480441][ T4787] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.182: mark_inode_dirty error [ 85.495091][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.508083][ T4787] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 85.519129][ T4787] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.182: Failed to acquire dquot type 0 [ 85.536945][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.543916][ T4787] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 85.561223][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.569146][ T4787] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.182: mark_inode_dirty error [ 85.583684][ T4787] EXT4-fs (loop2): Remounting filesystem read-only [ 85.586265][ T4792] device syzkaller0 entered promiscuous mode [ 85.590198][ T4787] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 85.633662][ T4787] EXT4-fs (loop2): 1 orphan inode deleted [ 85.649679][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,inlinecrypt,errors=remount-ro,. Quota mode: none. [ 85.670483][ T4373] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.701133][ T4373] EXT4-fs (loop2): Remounting filesystem read-only [ 85.711887][ T4373] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 85.763926][ T4373] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 85.765727][ T4765] udc-core: couldn't find an available UDC or it's busy [ 85.793376][ T4373] EXT4-fs (loop2): Remounting filesystem read-only [ 85.860388][ T4765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.866027][ T4794] device syzkaller0 entered promiscuous mode [ 85.883575][ C1] usb 4-1: async_complete: urb error -71 [ 85.889807][ C1] usb 4-1: async_complete: urb error -71 [ 85.893825][ T4189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 85.895512][ C1] usb 4-1: async_complete: urb error -71 [ 85.929405][ T26] get_1284_register: usb error -71 [ 85.942017][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 85.948079][ T26] usb 4-1: USB disconnect, device number 3 [ 85.973555][ T4189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 86.028063][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 86.053732][ T4189] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 86.098856][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 86.405327][ T4373] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.413622][ T4373] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.566531][ T1108] cfg80211: failed to load regulatory.db [ 86.758721][ T4816] netlink: 'syz.3.192': attribute type 4 has an invalid length. [ 87.030612][ T4823] device syzkaller0 entered promiscuous mode [ 87.047345][ T4825] loop3: detected capacity change from 0 to 1024 [ 87.301294][ T4830] loop2: detected capacity change from 0 to 512 [ 87.357326][ T4832] device syzkaller0 entered promiscuous mode [ 87.398471][ T4830] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.199: iget: bad i_size value: 38620345925642 [ 87.426236][ T4830] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.199: couldn't read orphan inode 15 (err -117) [ 87.499798][ T4830] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 87.710137][ T9] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 87.787775][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 87.802541][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.802541][ T9] [ 87.814130][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 87.821075][ T9] EXT4-fs (loop2): Free/Dirty block details [ 87.827586][ T9] EXT4-fs (loop2): free_blocks=0 [ 87.832631][ T9] EXT4-fs (loop2): dirty_blocks=1 [ 87.838125][ T9] EXT4-fs (loop2): Block reservation details [ 87.854787][ T9] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 87.948381][ T4848] loop3: detected capacity change from 0 to 256 [ 88.119073][ T4853] device syzkaller0 entered promiscuous mode [ 88.197564][ T4854] loop1: detected capacity change from 0 to 256 [ 88.266617][ T4854] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 88.301576][ T4856] loop2: detected capacity change from 0 to 512 [ 88.385212][ T4856] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.483612][ T4196] Bluetooth: hci5: command 0x1003 tx timeout [ 88.655002][ T4251] Bluetooth: hci5: Frame reassembly failed (-84) [ 88.836948][ T4861] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 88.882606][ T4861] pit: kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 88.931492][ T4869] device syzkaller0 entered promiscuous mode [ 88.941309][ T4861] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 88.976669][ T4861] pit: kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 89.012371][ T4861] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 89.063297][ T4861] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 89.211825][ T4861] pit: kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 89.229450][ T4861] pit: kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 89.285879][ T4861] pit: kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 89.333335][ T4861] pit: kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 89.482795][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 89.662049][ T4887] loop2: detected capacity change from 0 to 128 [ 89.864006][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 89.877017][ T4887] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.441829][ T4898] loop1: detected capacity change from 0 to 512 [ 90.573665][ T4277] Bluetooth: hci5: command 0x1001 tx timeout [ 90.579774][ T146] Bluetooth: hci5: sending frame failed (-49) [ 90.628079][ T4898] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 90.684903][ T4898] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.220: invalid indirect mapped block 256 (level 1) [ 90.753563][ T4898] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.220: invalid indirect mapped block 2683928664 (level 1) [ 90.801255][ T4898] EXT4-fs (loop1): 1 truncate cleaned up [ 90.858866][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 91.335936][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 91.383966][ T4261] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.446180][ T4928] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.220: Invalid block bitmap block 3 in block_group 0 [ 91.760685][ T4927] loop4: detected capacity change from 0 to 4096 [ 91.898908][ T4927] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.906057][ T4261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.938249][ T4261] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 8 [ 91.956236][ T4927] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nombcache,,errors=continue. Quota mode: writeback. [ 91.976426][ T4261] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.143781][ T1344] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.163953][ T4261] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 92.174405][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.176477][ T4935] loop4: detected capacity change from 0 to 2048 [ 92.182401][ T4261] usb 3-1: Product: syz [ 92.204961][ T4261] usb 3-1: Manufacturer: syz [ 92.209583][ T4261] usb 3-1: SerialNumber: syz [ 92.254116][ T4920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.272082][ T4939] device syzkaller0 entered promiscuous mode [ 92.275012][ T4935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.292157][ T4261] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 92.309340][ T4261] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 92.330062][ T4261] usbserial_generic 3-1:1.0: generic converter detected [ 92.352410][ T4261] usb 3-1: generic converter now attached to ttyUSB0 [ 92.433568][ T1344] usb 4-1: Using ep0 maxpacket: 32 [ 92.573818][ T1344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.597794][ T4261] usb 3-1: USB disconnect, device number 2 [ 92.612646][ T4261] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 92.624706][ T4261] usbserial_generic 3-1:1.0: device disconnected [ 92.643804][ T4196] Bluetooth: hci5: command 0x1009 tx timeout [ 92.654075][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.753994][ T1344] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.785090][ T1344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.793110][ T1344] usb 4-1: Product: syz [ 92.804121][ T1344] usb 4-1: Manufacturer: syz [ 92.808856][ T1344] usb 4-1: SerialNumber: syz [ 92.823163][ T1344] usb 4-1: config 0 descriptor?? [ 92.885978][ T1344] smsc95xx v2.0.0 [ 92.889687][ T1344] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 92.913039][ T1344] smsc95xx: probe of 4-1:0.0 failed with error -22 [ 92.919824][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 92.949956][ T4955] kvm [4954]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x800 [ 92.959995][ T4955] kvm [4954]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x800 [ 93.244137][ T1111] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 93.263651][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.271711][ T1111] usb 5-1: Product: syz [ 93.289272][ T1111] usb 5-1: Manufacturer: syz [ 93.313585][ T1111] usb 5-1: SerialNumber: syz [ 93.665045][ T1111] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.690990][ T1111] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 93.713684][ T1111] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.734737][ T1111] snd-usb-audio: probe of 5-1:1.1 failed with error -2 [ 93.773854][ T1111] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.808716][ T1111] snd-usb-audio: probe of 5-1:1.2 failed with error -2 [ 93.829617][ T1111] usb 5-1: USB disconnect, device number 3 [ 93.840651][ T4691] udevd[4691]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.973084][ T4970] loop2: detected capacity change from 0 to 1024 [ 94.029233][ T4970] EXT4-fs (loop2): Ignoring removed oldalloc option [ 94.053788][ T1344] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.066996][ T4970] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c552,oldalloc,,errors=continue. Quota mode: none. [ 94.474084][ T1344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.486635][ T1344] usb 2-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 94.496952][ T1344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.502670][ T4977] loop4: detected capacity change from 0 to 512 [ 94.600590][ T4977] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.626460][ T4977] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.240: invalid indirect mapped block 256 (level 1) [ 94.640348][ T4977] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.240: invalid indirect mapped block 2683928664 (level 1) [ 94.656073][ T4977] EXT4-fs (loop4): 1 truncate cleaned up [ 94.661727][ T4977] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 94.776782][ T1344] usb 4-1: USB disconnect, device number 4 [ 94.877227][ T1111] usb 2-1: USB disconnect, device number 2 [ 94.976746][ T4986] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.240: Invalid block bitmap block 3 in block_group 0 [ 95.215978][ T4985] loop3: detected capacity change from 0 to 512 [ 95.464519][ T4989] loop2: detected capacity change from 0 to 256 [ 95.539830][ T4989] exfat: Bad value for 'uid' [ 95.580457][ T4985] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.596238][ T4985] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.649773][ T4993] device syzkaller0 entered promiscuous mode [ 95.969439][ T5008] loop3: detected capacity change from 0 to 256 [ 95.992486][ T5008] exfat: Deprecated parameter 'utf8' [ 95.997928][ T5008] exfat: Deprecated parameter 'namecase' [ 96.007938][ T5008] exfat: Deprecated parameter 'utf8' [ 96.041478][ T5008] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 96.117954][ T5008] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 96.150614][ T5008] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 96.160096][ T5014] loop2: detected capacity change from 0 to 128 [ 96.295186][ T5014] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.314363][ T25] audit: type=1326 audit(1790458584.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.1.250" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf5263159 code=0x0 [ 96.344341][ T5018] device syzkaller0 entered promiscuous mode [ 96.356532][ T5014] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.580867][ T4368] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.591479][ T5025] device syzkaller0 entered promiscuous mode [ 96.610266][ T5027] loop3: detected capacity change from 0 to 512 [ 96.669375][ T5033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.728437][ T5027] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 96.740382][ T5027] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.254: invalid indirect mapped block 256 (level 1) [ 96.756977][ T5027] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.254: invalid indirect mapped block 2683928664 (level 1) [ 96.857413][ T5027] EXT4-fs (loop3): 1 truncate cleaned up [ 96.901898][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 97.043819][ T26] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.238908][ T5057] loop4: detected capacity change from 0 to 1764 [ 97.338931][ T5061] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.254: Invalid block bitmap block 3 in block_group 0 [ 97.903840][ T26] usb 3-1: not running at top speed; connect to a high speed hub [ 97.917228][ T5070] loop4: detected capacity change from 0 to 512 [ 97.930412][ T5071] loop3: detected capacity change from 0 to 1024 [ 97.970459][ T5073] device syzkaller0 entered promiscuous mode [ 98.008215][ T5071] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.023761][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.048290][ T5070] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.073574][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.134286][ T5070] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.151459][ T26] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 98.155403][ T5076] loop1: detected capacity change from 0 to 512 [ 98.169085][ T5070] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.266: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 98.207052][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.226404][ T5071] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,nodelalloc,errors=remount-ro,bsdgroups,auto_da_alloc=0x0000000000000346,jqfmt=vfsold,auto_da_alloc=0x0000000000000. Quota mode: none. [ 98.266176][ T5076] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 98.312101][ T5076] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.270: corrupted in-inode xattr [ 98.389129][ T26] gspca_main: spca501-2.14.0 probing 0000:0000 [ 98.399570][ T5076] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.270: couldn't read orphan inode 15 (err -117) [ 98.446099][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 98.683834][ T26] gspca_spca501: reg write: error -71 [ 98.693545][ T26] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 98.700473][ T26] spca501: probe of 3-1:1.0 failed with error -22 [ 98.717129][ T26] usb 3-1: USB disconnect, device number 3 [ 98.758021][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.789353][ T5091] loop3: detected capacity change from 0 to 128 [ 98.859038][ T5091] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.898480][ T5091] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 98.923804][ T5091] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.012717][ T5095] loop0: detected capacity change from 0 to 128 [ 99.184778][ T5095] loop0: detected capacity change from 0 to 256 [ 99.695191][ T5095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 99.897425][ T5103] ip_tables: iptables: counters copy to user failed while replacing table [ 99.977725][ T5106] loop0: detected capacity change from 0 to 512 [ 100.030524][ T5106] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 100.031797][ T5110] device syzkaller0 entered promiscuous mode [ 100.069279][ T5106] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.278: invalid indirect mapped block 256 (level 1) [ 100.093370][ T5106] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.278: invalid indirect mapped block 2683928664 (level 1) [ 100.121364][ T5108] device syzkaller0 entered promiscuous mode [ 100.139891][ T5106] EXT4-fs (loop0): 1 truncate cleaned up [ 100.145675][ T5106] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 100.479345][ T5118] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.278: Invalid block bitmap block 3 in block_group 0 [ 100.814029][ T1344] Bluetooth: hci5: command 0x1003 tx timeout [ 100.825031][ T4517] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.924791][ T5122] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.084597][ T5131] loop0: detected capacity change from 0 to 256 [ 101.117352][ T5131] exfat: Deprecated parameter 'utf8' [ 101.131593][ T5131] exfat: Deprecated parameter 'namecase' [ 101.142947][ T5131] exfat: Deprecated parameter 'utf8' [ 101.196025][ T5131] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 101.250449][ T5131] attempt to access beyond end of device [ 101.250449][ T5131] loop0: rw=524288, want=34359738496, limit=256 [ 101.271802][ T5141] loop1: detected capacity change from 0 to 256 [ 101.289293][ T5131] attempt to access beyond end of device [ 101.289293][ T5131] loop0: rw=0, want=34359738496, limit=256 [ 101.306963][ T25] audit: type=1800 audit(1790458589.040:4): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.286" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 101.351099][ T5141] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 101.498037][ T5146] device syzkaller0 entered promiscuous mode [ 101.747694][ T5155] EXT4-fs (loop0): Test dummy encryption mode enabled [ 101.770170][ T5155] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 101.786780][ T5155] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.857427][ T5174] kvm: vcpu 0: requested 1280 ns lapic timer period limited to 200000 ns [ 102.892494][ T5172] set_capacity_and_notify: 2 callbacks suppressed [ 102.892507][ T5172] loop1: detected capacity change from 0 to 4096 [ 102.893710][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 102.925262][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 102.941446][ T5178] device syzkaller0 entered promiscuous mode [ 102.987836][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsdgroups,acl,errors=remount-ro,norecovery,. Quota mode: writeback. [ 103.091269][ T25] audit: type=1800 audit(1790458590.820:5): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.301" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 103.110603][ T5172] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.301: corrupted inode contents [ 103.168040][ T5186] loop2: detected capacity change from 0 to 128 [ 103.177194][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.185220][ T5172] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #15: comm syz.1.301: mark_inode_dirty error [ 103.191717][ T25] audit: type=1800 audit(1790458590.820:6): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.301" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 103.204029][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.257291][ T5193] loop0: detected capacity change from 0 to 164 [ 103.269026][ T5172] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.301: corrupted inode contents [ 103.282265][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.293927][ T5172] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.301: mark_inode_dirty error [ 103.335198][ T5193] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 103.335339][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.360684][ T5172] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.301: corrupted inode contents [ 103.377805][ T5193] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 103.394392][ T5186] loop2: detected capacity change from 0 to 256 [ 103.413071][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.429454][ T5186] exfat: Bad value for 'uid' [ 103.448547][ T5172] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.301: mark_inode_dirty error [ 103.502617][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.658973][ T5172] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.301: corrupted inode contents [ 103.660886][ T5198] loop2: detected capacity change from 0 to 1024 [ 103.678175][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 103.695281][ T5172] EXT4-fs error (device loop1): ext4_truncate:4286: inode #15: comm syz.1.301: mark_inode_dirty error [ 103.776237][ T5199] netlink: 'syz.0.310': attribute type 16 has an invalid length. [ 103.784063][ T5199] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.310'. [ 103.937648][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 104.025287][ T5198] hfsplus: invalid extent max_key_len 0 [ 104.147201][ T5198] hfsplus: failed to load extents file [ 104.233139][ T5172] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 104.319013][ T5172] EXT4-fs (loop1): Remounting filesystem read-only [ 104.326231][ T5191] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.301: corrupted inode contents [ 104.445493][ T5191] EXT4-fs (loop1): Remounting filesystem read-only [ 104.504124][ T5205] loop0: detected capacity change from 0 to 128 [ 104.613431][ T5205] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.623635][ T4277] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.675750][ T5205] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 104.710188][ T5205] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.767451][ T5214] FAULT_INJECTION: forcing a failure. [ 104.767451][ T5214] name failslab, interval 1, probability 0, space 0, times 1 [ 104.842740][ T5214] CPU: 1 PID: 5214 Comm: syz.3.317 Not tainted syzkaller #0 [ 104.850061][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.860134][ T5214] Call Trace: [ 104.863411][ T5214] [ 104.866338][ T5214] dump_stack_lvl+0x188/0x250 [ 104.871028][ T5214] ? show_regs_print_info+0x20/0x20 [ 104.876223][ T5214] ? load_image+0x410/0x410 [ 104.880723][ T5214] ? __might_sleep+0xf0/0xf0 [ 104.885311][ T5214] ? __lock_acquire+0x7b50/0x7b50 [ 104.890337][ T5214] should_fail+0x383/0x4b0 [ 104.894761][ T5214] should_failslab+0x5/0x20 [ 104.899263][ T5214] slab_pre_alloc_hook+0x51/0xc0 [ 104.904204][ T5214] ? security_file_alloc+0x30/0x110 [ 104.909399][ T5214] kmem_cache_alloc+0x3d/0x280 [ 104.914158][ T5214] ? rcu_is_watching+0x11/0xa0 [ 104.918924][ T5214] security_file_alloc+0x30/0x110 [ 104.923952][ T5214] __alloc_file+0xc2/0x240 [ 104.928375][ T5214] alloc_empty_file+0x90/0x180 [ 104.933142][ T5214] alloc_file+0x5c/0x510 [ 104.937379][ T5214] ? do_raw_spin_unlock+0x11d/0x230 [ 104.942581][ T5214] alloc_file_pseudo+0x180/0x200 [ 104.947525][ T5214] ? alloc_empty_file_noaccount+0x80/0x80 [ 104.953247][ T5214] ? atime_needs_update+0x770/0x770 [ 104.958450][ T5214] ? debug_mutex_init+0x34/0x70 [ 104.963303][ T5214] ? create_pipe_files+0x2b9/0x6b0 [ 104.968416][ T5214] create_pipe_files+0x390/0x6b0 [ 104.973351][ T5214] __do_pipe_flags+0x46/0x1f0 [ 104.978035][ T5214] do_pipe2+0xa7/0x190 [ 104.982106][ T5214] ? pipe_fcntl+0x530/0x530 [ 104.986611][ T5214] ? lock_chain_count+0x20/0x20 [ 104.991472][ T5214] ? syscall_enter_from_user_mode+0x21/0x70 [ 104.993674][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 104.997366][ T5214] __x64_sys_pipe+0x36/0x40 [ 104.997388][ T5214] do_syscall_64+0x4c/0xa0 [ 105.012231][ T5214] ? clear_bhb_loop+0x30/0x80 [ 105.016909][ T5214] ? clear_bhb_loop+0x30/0x80 [ 105.021587][ T5214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.027493][ T5214] RIP: 0033:0x7f3f94b3c159 [ 105.031911][ T5214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.051513][ T5214] RSP: 002b:00007f3f92d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 105.059929][ T5214] RAX: ffffffffffffffda RBX: 00007f3f94dc3fa0 RCX: 00007f3f94b3c159 [ 105.067904][ T5214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 105.075876][ T5214] RBP: 00007f3f94bd306b R08: 0000000000000000 R09: 0000000000000000 [ 105.083850][ T5214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.091820][ T5214] R13: 00007f3f94dc4038 R14: 00007f3f94dc3fa0 R15: 00007ffe62bb7d58 [ 105.099811][ T5214] [ 105.133711][ T4277] usb 3-1: Using ep0 maxpacket: 8 [ 105.258828][ T4277] usb 3-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 105.278637][ T4277] usb 3-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 105.291360][ T4277] usb 3-1: config 218 has no interface number 0 [ 105.703752][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.003657][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 106.006587][ T4277] usb 3-1: config 218 interface 95 altsetting 64 has an invalid endpoint with address 0xFF, skipping [ 106.082495][ T4277] usb 3-1: config 218 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 67, changing to 7 [ 106.094256][ T4277] usb 3-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 26386, setting to 1024 [ 106.107454][ T4277] usb 3-1: config 218 interface 95 has no altsetting 0 [ 106.158604][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.177368][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.201766][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.232876][ T1111] usb 2-1: config 0 descriptor?? [ 106.273992][ T4277] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 106.283258][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.294729][ T1111] hub 2-1:0.0: bad descriptor, ignoring hub [ 106.296426][ T4277] usb 3-1: Product: syz [ 106.300645][ T1111] hub: probe of 2-1:0.0 failed with error -5 [ 106.346977][ T4277] usb 3-1: Manufacturer: syz [ 106.365348][ T4277] usb 3-1: SerialNumber: syz [ 106.398301][ T5228] device syzkaller0 entered promiscuous mode [ 106.675239][ T4277] usbtouchscreen: probe of 3-1:218.95 failed with error -22 [ 106.688753][ T4277] usb 3-1: USB disconnect, device number 4 [ 106.703780][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.794749][ T26] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 107.063759][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.075447][ T1108] usb 4-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 107.090308][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.126347][ T5246] loop2: detected capacity change from 0 to 16 [ 107.143426][ T5246] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.162226][ T146] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[9000] [ 107.199096][ T5246] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[4096] [ 107.224692][ T25] audit: type=1800 audit(1790458594.960:7): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.326" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 107.365294][ T1111] usb 4-1: USB disconnect, device number 5 [ 107.387234][ T5249] device syzkaller0 entered promiscuous mode [ 107.400691][ T5212] loop1: detected capacity change from 0 to 1024 [ 107.492734][ T5212] hfsplus: unable to parse mount options [ 107.558623][ T5254] loop2: detected capacity change from 0 to 128 [ 107.599010][ T5254] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.614014][ T26] usb 2-1: USB disconnect, device number 3 [ 107.625037][ T5254] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 107.647486][ T5254] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.682510][ T5260] loop1: detected capacity change from 0 to 128 [ 108.687294][ T5262] device syzkaller0 entered promiscuous mode [ 108.728660][ T5260] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.785940][ T5260] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 108.818630][ T5260] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.842206][ T5272] loop0: detected capacity change from 0 to 512 [ 108.901737][ T5277] loop2: detected capacity change from 0 to 512 [ 108.907123][ T5272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.925007][ T5272] EXT4-fs (loop0): 1 truncate cleaned up [ 108.930679][ T5272] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,nouid32,nojournal_checksum,. Quota mode: none. [ 109.101877][ T5283] loop4: detected capacity change from 0 to 512 [ 109.166146][ T5277] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.337: iget: bad i_size value: 38620345925642 [ 109.873232][ T5277] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.337: couldn't read orphan inode 15 (err -117) [ 109.893460][ T5283] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 109.915832][ T5283] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.338: invalid indirect mapped block 256 (level 1) [ 109.933358][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.966052][ T5283] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.338: invalid indirect mapped block 2683928664 (level 1) [ 109.989977][ T5283] EXT4-fs (loop4): 1 truncate cleaned up [ 110.004391][ T5283] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 110.004556][ T5290] device syzkaller0 entered promiscuous mode [ 110.321218][ T5298] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.338: Invalid block bitmap block 3 in block_group 0 [ 110.484006][ T5297] loop2: detected capacity change from 0 to 1024 [ 110.560134][ T5297] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 110.636019][ T5297] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 110.734006][ T5297] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.342: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 110.743872][ T5303] loop0: detected capacity change from 0 to 512 [ 110.765718][ T5297] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.342: couldn't read orphan inode 11 (err -117) [ 110.796976][ T5297] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 110.861115][ T5303] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 110.877463][ T5308] loop4: detected capacity change from 0 to 128 [ 110.900988][ T5303] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.354: invalid indirect mapped block 256 (level 1) [ 110.906715][ T5297] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.342: Invalid block bitmap block 0 in block_group 0 [ 110.930428][ T5303] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.354: invalid indirect mapped block 2683928664 (level 1) [ 110.938828][ T5297] Quota error (device loop2): write_blk: dquota write failed [ 110.957667][ T5297] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.969008][ T5297] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.342: Failed to acquire dquot type 0 [ 110.974343][ T5308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.009969][ T5303] EXT4-fs (loop0): 1 truncate cleaned up [ 111.083875][ T5297] EXT4-fs error (device loop2): ext4_nfs_get_inode:1433: inode #11: comm syz.2.342: iget: bad extra_isize 65535 (inode size 256) [ 111.093914][ T5303] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 111.235086][ T5308] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 111.269284][ T5308] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.473700][ T4893] Bluetooth: hci5: Frame reassembly failed (-84) [ 111.906491][ T5318] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.354: Invalid block bitmap block 3 in block_group 0 [ 112.718994][ T5328] loop4: detected capacity change from 0 to 128 [ 112.759213][ T5328] EXT4-fs (loop4): Test dummy encryption mode enabled [ 112.796599][ T5328] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 112.824215][ T5328] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.877582][ T5337] loop2: detected capacity change from 0 to 512 [ 113.059604][ T5337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.073776][ T5337] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.255435][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.801206][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 113.893857][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.422635][ T5350] device syzkaller0 entered promiscuous mode [ 114.531459][ T5353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'. [ 114.654722][ T26] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.683582][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.690217][ T26] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 114.701440][ T5355] loop3: detected capacity change from 0 to 2048 [ 114.714777][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.760283][ T26] usb 1-1: config 0 descriptor?? [ 114.776462][ T5358] loop2: detected capacity change from 0 to 8 [ 114.799481][ T5355] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.819788][ T25] audit: type=1800 audit(1790458602.550:8): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.362" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 114.924665][ T5363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.268209][ T26] kye 0003:0458:0087.0003: hidraw0: USB HID v0.08 Device [HID 0458:0087] on usb-dummy_hcd.0-1/input0 [ 115.441278][ T5372] loop4: detected capacity change from 0 to 512 [ 115.487535][ T13] usb 1-1: USB disconnect, device number 3 [ 115.544337][ T5372] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 115.544337][ T5372] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 115.544337][ T5372] [ 115.597775][ T5372] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.366: inode #1: comm syz.4.366: iget: illegal inode # [ 115.661489][ T5372] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.366: error while reading EA inode 1 err=-117 [ 115.704109][ T5372] EXT4-fs (loop4): 1 orphan inode deleted [ 115.709855][ T5372] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,jqfmt=vfsv1,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000060,barrier,dioread_lock,noblock_validity,noacl,,errors=continue. Quota mode: none. [ 115.862439][ T5375] loop4: detected capacity change from 0 to 256 [ 115.899749][ T5375] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 115.943233][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 115.954527][ T5375] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 115.964896][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 115.973911][ T5375] exFAT-fs (loop4): Filesystem has been set read-only [ 116.079160][ T5386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 116.145174][ T5388] device syzkaller0 entered promiscuous mode [ 116.303278][ T5398] Illegal XDP return value 745406464, expect packet loss! [ 116.449797][ T5409] device syzkaller0 entered promiscuous mode [ 116.548814][ T5411] loop0: detected capacity change from 0 to 128 [ 116.562615][ T5411] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.572861][ T5411] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 116.594158][ T5411] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.708159][ T5414] loop4: detected capacity change from 0 to 512 [ 116.753387][ T5414] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 116.770835][ T5414] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.385: invalid indirect mapped block 256 (level 1) [ 116.785297][ T5414] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.385: invalid indirect mapped block 2683928664 (level 1) [ 116.800808][ T5414] EXT4-fs (loop4): 1 truncate cleaned up [ 116.806824][ T5414] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 117.775160][ T5423] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.385: Invalid block bitmap block 3 in block_group 0 [ 117.962537][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.097978][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 118.397004][ T5436] loop3: detected capacity change from 0 to 736 [ 118.431553][ T5439] device syzkaller0 entered promiscuous mode [ 118.453821][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.496384][ T7] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 118.533730][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.700649][ T5450] loop3: detected capacity change from 0 to 128 [ 118.732524][ T5452] loop4: detected capacity change from 0 to 8 [ 118.762755][ T5450] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.801540][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 118.819153][ T4229] usb 3-1: USB disconnect, device number 5 [ 118.826210][ T25] audit: type=1800 audit(1790458606.570:9): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.400" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 118.873946][ T5450] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.070224][ T5459] loop0: detected capacity change from 0 to 512 [ 119.420093][ T5459] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 119.643516][ T5459] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.401: invalid indirect mapped block 256 (level 1) [ 119.718139][ T5459] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.401: invalid indirect mapped block 2683928664 (level 1) [ 119.828122][ T5459] EXT4-fs (loop0): 1 truncate cleaned up [ 119.842215][ T5459] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 120.205982][ T5475] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.401: Invalid block bitmap block 3 in block_group 0 [ 120.915056][ T5483] device syzkaller0 entered promiscuous mode [ 120.945629][ T5481] loop4: detected capacity change from 0 to 2048 [ 121.026012][ T5481] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 121.069148][ T5481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.154744][ T4194] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 122.170756][ T5510] loop3: detected capacity change from 0 to 512 [ 122.189555][ T4194] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 122.227063][ T5514] loop2: detected capacity change from 0 to 256 [ 122.247374][ T5510] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 122.277938][ T5512] device syzkaller0 entered promiscuous mode [ 122.289727][ T5510] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.421: invalid indirect mapped block 256 (level 1) [ 122.318835][ T5510] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.421: invalid indirect mapped block 2683928664 (level 1) [ 122.328980][ T5514] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 122.357332][ T5510] EXT4-fs (loop3): 1 truncate cleaned up [ 122.363073][ T5510] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 122.517473][ T5521] loop0: detected capacity change from 0 to 2048 [ 122.628275][ T5521] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.730929][ T5530] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.421: Invalid block bitmap block 3 in block_group 0 [ 124.093595][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.363772][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 124.429365][ T5554] loop1: detected capacity change from 0 to 8 [ 124.487022][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.514160][ T26] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.523148][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.529647][ T5551] device syzkaller0 entered promiscuous mode [ 124.543652][ T5560] loop3: detected capacity change from 0 to 512 [ 124.563240][ T25] audit: type=1800 audit(1790458612.290:10): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.440" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 124.716946][ T5560] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 124.739228][ T5560] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.442: invalid indirect mapped block 256 (level 1) [ 124.752789][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 124.754116][ T5560] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.442: invalid indirect mapped block 2683928664 (level 1) [ 124.773003][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.805434][ T5560] EXT4-fs (loop3): 1 truncate cleaned up [ 124.811102][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 124.837851][ T26] usb 1-1: Product: syz [ 124.842032][ T26] usb 1-1: Manufacturer: syz [ 124.847270][ T26] usb 1-1: SerialNumber: syz [ 124.890059][ T5555] chnl_net:caif_netlink_parms(): no params data found [ 125.200513][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.207764][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.215880][ T5555] device bridge_slave_0 entered promiscuous mode [ 125.272152][ T5575] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.442: Invalid block bitmap block 3 in block_group 0 [ 125.368925][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.401690][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.432460][ T5555] device bridge_slave_1 entered promiscuous mode [ 125.512121][ T5555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.563217][ T5555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.757737][ T5555] team0: Port device team_slave_0 added [ 125.766906][ T5555] team0: Port device team_slave_1 added [ 125.789917][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.796990][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.839837][ T5555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.858977][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.866164][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.893102][ T5555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.613792][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 126.691038][ T5555] device hsr_slave_0 entered promiscuous mode [ 126.698234][ T5555] device hsr_slave_1 entered promiscuous mode [ 126.713749][ T26] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 126.722365][ T26] usb 1-1: clock source 0 is not valid, cannot use [ 126.751582][ T5555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.759395][ T26] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 126.772061][ T5555] Cannot create hsr debugfs directory [ 126.793863][ T26] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 126.981707][ T26] usb 1-1: USB disconnect, device number 4 [ 127.132443][ T5613] loop0: detected capacity change from 0 to 512 [ 127.211106][ T5613] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 127.213860][ T5611] device syzkaller0 entered promiscuous mode [ 127.233149][ T5613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.454: invalid indirect mapped block 256 (level 1) [ 127.265324][ T5555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.277037][ T5555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.299956][ T5613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.454: invalid indirect mapped block 2683928664 (level 1) [ 127.350389][ T5613] EXT4-fs (loop0): 1 truncate cleaned up [ 127.357119][ T5613] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 127.370588][ T5619] loop1: detected capacity change from 0 to 8 [ 127.423145][ T5555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.442825][ T5555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.584731][ T25] audit: type=1800 audit(1790458615.320:11): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.457" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 127.605264][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.613292][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.644347][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.663005][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.724332][ T5626] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.454: Invalid block bitmap block 3 in block_group 0 [ 127.865877][ T5629] loop2: detected capacity change from 0 to 8 [ 127.877550][ T5555] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.923791][ T26] usb 1-1: Dual-Role OTG device on HNP port [ 127.943873][ T26] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 127.969440][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.987658][ T25] audit: type=1800 audit(1790458615.720:12): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.458" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 128.011428][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.035233][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.076363][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.083545][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.107889][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.134064][ C1] configfs-gadget gadget: Using interface 0 [ 128.147174][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.156286][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.187462][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.190715][ T26] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0000 pid 0x0000 [ 128.194564][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.218754][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.281161][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.338803][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.359535][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.379870][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.402023][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.433251][ T4687] udevd[4687]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.438276][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.550884][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.591907][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.633652][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.644810][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 128.658049][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.671773][ T5555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.901263][ T5650] loop0: detected capacity change from 0 to 4096 [ 128.945105][ T5658] loop2: detected capacity change from 0 to 512 [ 128.953429][ T5653] device syzkaller0 entered promiscuous mode [ 128.986820][ T5650] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.037819][ T5650] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.055033][ T5658] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 129.080004][ T5664] loop3: detected capacity change from 0 to 8 [ 129.087646][ T5658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.468: invalid indirect mapped block 256 (level 1) [ 129.101494][ T5658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.468: invalid indirect mapped block 2683928664 (level 1) [ 129.107697][ T5650] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,barrier=0x0000000000000002,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 129.127134][ T5658] EXT4-fs (loop2): 1 truncate cleaned up [ 129.163807][ T5658] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 129.217832][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.236788][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.251697][ T25] audit: type=1800 audit(1790458616.990:13): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.469" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 129.292959][ T5555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.557081][ T5672] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.468: Invalid block bitmap block 3 in block_group 0 [ 130.059819][ T5684] loop1: detected capacity change from 0 to 512 [ 130.173156][ T5696] loop0: detected capacity change from 0 to 8 [ 130.200992][ T5684] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 130.303711][ T5684] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.328406][ T5703] loop2: detected capacity change from 0 to 1024 [ 130.335079][ T25] audit: type=1800 audit(1790458618.070:14): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.478" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 130.420668][ T25] audit: type=1800 audit(1790458618.070:15): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.477" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 130.449155][ T5703] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 130.503744][ T5703] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 130.535459][ T5703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.545943][ T5703] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.479: Inode bitmap for bg 0 marked uninitialized [ 130.547062][ T5709] device syzkaller0 entered promiscuous mode [ 130.617470][ T5703] EXT4-fs (loop2): Remounting filesystem read-only [ 130.633971][ T5703] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 130.690500][ T25] audit: type=1804 audit(1790458618.070:16): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.477" name="/newroot/91/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 130.735444][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 130.813647][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.822830][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.861187][ T5716] loop2: detected capacity change from 0 to 1024 [ 130.900984][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.932597][ T5716] EXT4-fs (loop2): Ignoring removed oldalloc option [ 130.940251][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.965309][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.981034][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.021821][ T5716] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c555,oldalloc,,errors=continue. Quota mode: none. [ 131.050155][ T5555] device veth0_vlan entered promiscuous mode [ 131.107404][ T5555] device veth1_vlan entered promiscuous mode [ 131.122079][ T5724] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 131.138061][ T5724] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.485: invalid indirect mapped block 256 (level 1) [ 131.176223][ T5724] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.485: invalid indirect mapped block 2683928664 (level 1) [ 131.192362][ T25] audit: type=1800 audit(1790458618.930:17): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.488" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 131.194106][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 131.222443][ T25] audit: type=1804 audit(1790458618.950:18): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.482" name="/newroot/92/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 131.251412][ T5724] EXT4-fs (loop1): 1 truncate cleaned up [ 131.293832][ T5724] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 131.326657][ T5733] EXT4-fs (loop2): shut down requested (0) [ 131.333427][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.390780][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.432135][ T5555] device veth0_macvtap entered promiscuous mode [ 131.461328][ T5555] device veth1_macvtap entered promiscuous mode [ 131.541694][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.575908][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.658388][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.668997][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.679318][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.690365][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.700609][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.773266][ T5742] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.485: Invalid block bitmap block 3 in block_group 0 [ 131.883534][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.936806][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.993404][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.065498][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.091953][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.102697][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.112644][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.133660][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.145653][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.156199][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.166758][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.177391][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.189217][ T5555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.199859][ T5555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.220456][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.243769][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.251946][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.279949][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.288865][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.299787][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.311853][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.365825][ T5555] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.367558][ T5751] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.383567][ T5555] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.410802][ T5555] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.429637][ T5754] set_capacity_and_notify: 2 callbacks suppressed [ 132.429654][ T5754] loop1: detected capacity change from 0 to 128 [ 132.447123][ T5555] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.511323][ T5754] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.565917][ T5754] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 132.592397][ T5754] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.608799][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.498'. [ 132.649105][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.670286][ T5759] device syzkaller0 entered promiscuous mode [ 132.694083][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.704795][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.727237][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.800504][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807123][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 132.844663][ T5767] loop3: detected capacity change from 0 to 8 [ 132.855408][ T5760] device syzkaller0 entered promiscuous mode [ 133.312114][ T25] audit: type=1800 audit(1790458621.040:19): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.499" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 133.413233][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.433270][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.468664][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.601147][ T25] audit: type=1326 audit(1790458621.330:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.511" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcbab98159 code=0x0 [ 133.607096][ T5772] ip_tables: iptables: counters copy to user failed while replacing table [ 133.812659][ T5772] netlink: 17 bytes leftover after parsing attributes in process `syz.2.501'. [ 133.825814][ T5772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 133.938882][ T5790] device syzkaller0 entered promiscuous mode [ 133.967824][ T5796] ip_tables: iptables: counters copy to user failed while replacing table [ 133.976530][ T5790] TC_ACT_REPEAT abuse ? [ 134.478664][ T5813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.529712][ T5815] loop5: detected capacity change from 0 to 128 [ 134.600793][ T5815] EXT4-fs (loop5): Test dummy encryption mode enabled [ 134.649386][ T5815] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 134.667405][ T5815] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.918892][ T5826] udc-core: couldn't find an available UDC or it's busy [ 134.927492][ T5826] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.456792][ T5829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 135.501855][ T5831] loop3: detected capacity change from 0 to 8 [ 135.610779][ T5835] loop2: detected capacity change from 0 to 512 [ 135.628697][ T5837] loop0: detected capacity change from 0 to 1024 [ 135.641828][ T25] audit: type=1800 audit(1790458623.380:21): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.521" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 135.707335][ T5837] EXT4-fs (loop0): Ignoring removed oldalloc option [ 135.719380][ T5835] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.792862][ T5850] ip_tables: iptables: counters copy to user failed while replacing table [ 135.810277][ T5835] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.833099][ T5837] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c552,oldalloc,,errors=continue. Quota mode: none. [ 137.135995][ T4373] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.311220][ T4373] Bluetooth: hci5: Frame reassembly failed (-84) [ 138.653497][ C0] sched: RT throttling activated [ 139.133878][ T26] Bluetooth: hci5: command 0x1003 tx timeout [ 139.143144][ T4520] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.164567][ T4520] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.335517][ T5896] ip_tables: iptables: counters copy to user failed while replacing table [ 139.547628][ T5907] ip_tables: iptables: counters copy to user failed while replacing table [ 139.572695][ T5907] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.621726][ T5907] netlink: 17 bytes leftover after parsing attributes in process `syz.1.540'. [ 139.638441][ T5907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 139.826315][ T5915] loop5: detected capacity change from 0 to 256 [ 139.865928][ T5919] loop1: detected capacity change from 0 to 1024 [ 139.912508][ T5919] EXT4-fs (loop1): Ignoring removed oldalloc option [ 139.938506][ T5915] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 139.971891][ T5919] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c552,oldalloc,,errors=continue. Quota mode: none. [ 140.567326][ T5933] loop5: detected capacity change from 0 to 512 [ 140.576803][ T5933] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.591550][ T5933] EXT4-fs (loop5): 1 truncate cleaned up [ 140.663886][ T5933] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 140.709241][ T5937] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.757025][ T5933] EXT4-fs (loop5): shut down requested (1) [ 142.455239][ T4277] Bluetooth: hci5: command 0x1001 tx timeout [ 142.657451][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 143.034784][ T5980] loop1: detected capacity change from 0 to 512 [ 143.105151][ T5982] 9pnet: p9_fd_create_tcp (5982): problem connecting socket to 127.0.0.1 [ 143.168335][ T5980] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.300074][ T5986] loop5: detected capacity change from 0 to 512 [ 143.311626][ T5988] device syzkaller0 entered promiscuous mode [ 143.343909][ T5980] fs-verity (loop1, inode 18): Unknown hash algorithm number: 0 [ 143.360733][ T5988] TC_ACT_REPEAT abuse ? [ 143.414509][ T5986] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.445804][ T5986] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.764845][ T5994] udc-core: couldn't find an available UDC or it's busy [ 143.771820][ T5994] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.859231][ T6001] loop5: detected capacity change from 0 to 1024 [ 143.925968][ T6001] EXT4-fs (loop5): inline encryption not supported [ 143.933008][ T6004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.977405][ T6001] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.567: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.985398][ T6007] loop1: detected capacity change from 0 to 128 [ 143.993810][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.009346][ T6001] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 144.017582][ T6001] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.567: Invalid inode table block 1 in block_group 0 [ 144.042894][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.051270][ T6001] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.051865][ T6007] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.083889][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.089325][ T6007] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 144.091195][ T6001] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.567: mark_inode_dirty error [ 144.118353][ T6007] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.130349][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.137608][ T6001] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 144.147286][ T6001] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.567: Failed to acquire dquot type 0 [ 144.172586][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.182541][ T6001] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.209041][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.216897][ T6001] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.567: mark_inode_dirty error [ 144.236645][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 144.249306][ T6001] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 144.261069][ T6001] EXT4-fs (loop5): 1 orphan inode deleted [ 144.272347][ T6001] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,inlinecrypt,errors=remount-ro,. Quota mode: none. [ 144.298358][ T4373] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.322798][ T4373] EXT4-fs (loop5): Remounting filesystem read-only [ 144.329769][ T4373] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 144.359582][ T4373] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 144.602468][ T4373] EXT4-fs (loop5): Remounting filesystem read-only [ 144.724931][ T26] Bluetooth: hci5: command 0x1009 tx timeout [ 144.913916][ T5555] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 144.973761][ T5555] EXT4-fs (loop5): Remounting filesystem read-only [ 144.993698][ T5555] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 145.030580][ T5555] EXT4-fs (loop5): Remounting filesystem read-only [ 145.041073][ T5555] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 145.055796][ T5555] EXT4-fs (loop5): Remounting filesystem read-only [ 145.087284][ T6015] udc-core: couldn't find an available UDC or it's busy [ 145.104459][ T6015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.126885][ T6017] device syzkaller0 entered promiscuous mode [ 145.220084][ T6021] loop5: detected capacity change from 0 to 256 [ 145.235434][ T6021] exfat: Deprecated parameter 'utf8' [ 145.240983][ T6021] exfat: Deprecated parameter 'namecase' [ 145.253204][ T6021] exfat: Deprecated parameter 'utf8' [ 145.289663][ T6021] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 145.311839][ T6021] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 145.321741][ T6021] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 145.397001][ T6029] device syzkaller0 entered promiscuous mode [ 145.413079][ T6029] TC_ACT_REPEAT abuse ? [ 145.539815][ T6035] loop5: detected capacity change from 0 to 7 [ 145.577250][ T6035] Dev loop5: unable to read RDB block 7 [ 145.582847][ T6035] loop5: unable to read partition table [ 145.599586][ T6035] loop5: partition table beyond EOD, truncated [ 145.613691][ T6035] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 145.629790][ T6039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.730428][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'. [ 145.787214][ T6049] loop3: detected capacity change from 0 to 128 [ 145.827287][ T6049] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.873215][ T6049] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 145.899679][ T6049] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.033746][ T4277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.068791][ T1111] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.323852][ T1111] usb 6-1: Using ep0 maxpacket: 16 [ 146.444089][ T1111] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 146.476677][ T1111] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 146.562444][ T1111] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 146.665359][ T1111] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 146.690529][ T1111] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.719974][ T1111] usb 6-1: config 0 has no interface number 0 [ 146.732261][ T1111] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 146.750443][ T1111] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 146.760850][ T1111] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.778513][ T1111] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.793106][ T1111] usb 6-1: config 0 interface 125 has no altsetting 0 [ 146.802574][ T1111] usb 6-1: config 0 interface 125 has no altsetting 2 [ 146.963724][ T1111] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 146.994241][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.002269][ T1111] usb 6-1: Product: syz [ 147.009756][ T6078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.019147][ T1111] usb 6-1: Manufacturer: syz [ 147.023974][ T1111] usb 6-1: SerialNumber: syz [ 147.034013][ T4277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.053551][ T4277] usb 2-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 147.054314][ T1111] usb 6-1: config 0 descriptor?? [ 147.062598][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.109652][ T6086] udc-core: couldn't find an available UDC or it's busy [ 147.126363][ T6086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.165737][ T1111] usb 6-1: selecting invalid altsetting 2 [ 147.194315][ T6088] loop3: detected capacity change from 0 to 256 [ 147.249568][ T6088] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.338900][ T7] usb 2-1: USB disconnect, device number 4 [ 147.579676][ T6097] loop3: detected capacity change from 0 to 8 [ 147.629663][ T25] audit: type=1800 audit(1790458635.360:22): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 147.651287][ T6047] udc-core: couldn't find an available UDC or it's busy [ 147.665773][ T6047] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.713544][ C0] usb 6-1: async_complete: urb error -71 [ 147.719269][ C0] usb 6-1: async_complete: urb error -71 [ 147.724975][ C0] usb 6-1: async_complete: urb error -71 [ 147.730783][ T1111] get_1284_register: usb error -71 [ 147.740258][ T1111] usb 6-1: USB disconnect, device number 2 [ 148.111189][ T6117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.281337][ T6124] loop5: detected capacity change from 0 to 256 [ 148.321530][ T6124] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.586025][ T6133] loop3: detected capacity change from 0 to 256 [ 149.134874][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.153389][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 150.973932][ T4196] Bluetooth: hci5: command 0x1003 tx timeout [ 150.985597][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 151.005734][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 151.383176][ T6161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.506684][ T6169] loop2: detected capacity change from 0 to 256 [ 151.565938][ T6169] exfat: Deprecated parameter 'utf8' [ 151.571284][ T6169] exfat: Deprecated parameter 'namecase' [ 151.590224][ T6169] exfat: Deprecated parameter 'utf8' [ 151.601726][ T6179] loop5: detected capacity change from 0 to 256 [ 151.618654][ T6169] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 151.659198][ T6169] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 151.669163][ T6169] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 151.715323][ T6179] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.814651][ T6185] loop2: detected capacity change from 0 to 256 [ 152.100391][ T6203] loop5: detected capacity change from 0 to 8 [ 152.147858][ T25] audit: type=1800 audit(1790458639.880:23): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.628" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 152.576436][ T6225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.877829][ T6238] loop3: detected capacity change from 0 to 256 [ 152.930361][ T6238] exfat: Deprecated parameter 'utf8' [ 152.966690][ T6238] exfat: Deprecated parameter 'namecase' [ 152.994680][ T6238] exfat: Deprecated parameter 'utf8' [ 153.034098][ T6238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 153.047834][ T4196] Bluetooth: hci5: command 0x1001 tx timeout [ 153.079664][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 153.113967][ T6238] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 153.138041][ T6255] loop2: detected capacity change from 0 to 256 [ 153.175286][ T6259] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 153.181677][ T6261] loop5: detected capacity change from 0 to 256 [ 153.255158][ T6265] loop1: detected capacity change from 0 to 8 [ 153.296475][ T6261] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.352331][ T25] audit: type=1800 audit(1790458641.080:24): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.639" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 153.409391][ T6269] device syzkaller0 entered promiscuous mode [ 153.992296][ T6298] loop3: detected capacity change from 0 to 8 [ 154.100299][ T25] audit: type=1800 audit(1790458641.840:25): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.646" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 154.210387][ T6302] loop5: detected capacity change from 0 to 256 [ 154.241510][ T6302] exfat: Deprecated parameter 'utf8' [ 154.249092][ T6302] exfat: Deprecated parameter 'namecase' [ 154.255441][ T6302] exfat: Deprecated parameter 'utf8' [ 154.319092][ T6302] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 154.368273][ T6302] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 154.411410][ T6302] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 154.512491][ T6311] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.598351][ T6315] device syzkaller0 entered promiscuous mode [ 154.624236][ T6311] Dev loop5: unable to read RDB block 7 [ 154.629850][ T6311] loop5: unable to read partition table [ 154.642692][ T6311] loop5: partition table beyond EOD, truncated [ 154.650717][ T6311] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.094606][ T6334] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.659: iget: bad i_size value: 38620345925642 [ 155.134013][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 155.161964][ T6334] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.659: couldn't read orphan inode 15 (err -117) [ 155.233088][ T6334] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 155.417309][ T6354] exfat: Deprecated parameter 'utf8' [ 155.434841][ T6354] exfat: Deprecated parameter 'namecase' [ 155.466544][ T6354] exfat: Deprecated parameter 'utf8' [ 155.516735][ T6354] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 155.518049][ T6359] device syzkaller0 entered promiscuous mode [ 155.568011][ T6354] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 155.585388][ T6354] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 155.803421][ T6368] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.851748][ T6372] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.873761][ T6372] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.949046][ T25] audit: type=1800 audit(1790458643.680:26): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.672" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 155.950256][ T6372] [ 155.971617][ T6372] ====================================================== [ 155.978627][ T6372] WARNING: possible circular locking dependency detected [ 155.985641][ T6372] syzkaller #0 Not tainted [ 155.990042][ T6372] ------------------------------------------------------ [ 155.997032][ T6372] syz.5.672/6372 is trying to acquire lock: [ 156.002913][ T6372] ffff88805f4f0268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 156.011934][ T6372] [ 156.011934][ T6372] but task is already holding lock: [ 156.019280][ T6372] ffff88805f592060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 156.028772][ T6372] [ 156.028772][ T6372] which lock already depends on the new lock. [ 156.028772][ T6372] [ 156.039155][ T6372] [ 156.039155][ T6372] the existing dependency chain (in reverse order) is: [ 156.048149][ T6372] [ 156.048149][ T6372] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 156.055945][ T6372] down_write+0x38/0x60 [ 156.060627][ T6372] ext4_map_blocks+0x8c4/0x1a50 [ 156.065998][ T6372] ext4_getblk+0x176/0x670 [ 156.070938][ T6372] ext4_bread+0x26/0x180 [ 156.075702][ T6372] ext4_quota_write+0x237/0x580 [ 156.081082][ T6372] do_insert_tree+0x1193/0x19c0 [ 156.086458][ T6372] do_insert_tree+0x5c4/0x19c0 [ 156.091748][ T6372] do_insert_tree+0x5c4/0x19c0 [ 156.097031][ T6372] do_insert_tree+0x5c4/0x19c0 [ 156.102317][ T6372] qtree_write_dquot+0x354/0x4a0 [ 156.107781][ T6372] v2_write_dquot+0x108/0x190 [ 156.112981][ T6372] dquot_acquire+0x2d5/0x520 [ 156.118093][ T6372] ext4_acquire_dquot+0x2e3/0x4a0 [ 156.123645][ T6372] dqget+0x713/0xbb0 [ 156.128063][ T6372] __dquot_initialize+0x3a9/0xd00 [ 156.133609][ T6372] ext4_process_orphan+0x4c/0x2e0 [ 156.139285][ T6372] ext4_orphan_cleanup+0xc96/0x14f0 [ 156.145003][ T6372] ext4_fill_super+0x8c65/0x93f0 [ 156.150447][ T6372] mount_bdev+0x28a/0x3c0 [ 156.155283][ T6372] legacy_get_tree+0xe6/0x180 [ 156.160467][ T6372] vfs_get_tree+0x88/0x270 [ 156.165393][ T6372] do_new_mount+0x247/0xa40 [ 156.170422][ T6372] __se_sys_mount+0x2e3/0x3d0 [ 156.175626][ T6372] do_syscall_64+0x4c/0xa0 [ 156.180565][ T6372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.186985][ T6372] [ 156.186985][ T6372] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 156.195059][ T6372] down_read+0x44/0x2e0 [ 156.199730][ T6372] v2_read_dquot+0x4a/0x110 [ 156.204732][ T6372] dquot_acquire+0x152/0x520 [ 156.209825][ T6372] ext4_acquire_dquot+0x2e3/0x4a0 [ 156.215364][ T6372] dqget+0x713/0xbb0 [ 156.219776][ T6372] __dquot_initialize+0x3a9/0xd00 [ 156.225309][ T6372] ext4_mkdir+0x198/0xc90 [ 156.230144][ T6372] vfs_mkdir+0x386/0x570 [ 156.234893][ T6372] do_mkdirat+0x1dd/0x5c0 [ 156.239729][ T6372] __x64_sys_mkdirat+0x85/0x90 [ 156.245000][ T6372] do_syscall_64+0x4c/0xa0 [ 156.249917][ T6372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.256318][ T6372] [ 156.256318][ T6372] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 156.263941][ T6372] __lock_acquire+0x2c66/0x7b50 [ 156.269304][ T6372] lock_acquire+0x19e/0x400 [ 156.274323][ T6372] __mutex_lock_common+0x1e5/0x2400 [ 156.280025][ T6372] mutex_lock_nested+0x17/0x20 [ 156.285292][ T6372] dquot_commit+0x5a/0x410 [ 156.290214][ T6372] ext4_write_dquot+0x1f0/0x360 [ 156.295571][ T6372] mark_all_dquot_dirty+0xf9/0x400 [ 156.301188][ T6372] __dquot_alloc_space+0x5cb/0xe10 [ 156.306803][ T6372] ext4_mb_new_blocks+0xf80/0x47c0 [ 156.312419][ T6372] ext4_ext_map_blocks+0x17d1/0x63d0 [ 156.318207][ T6372] ext4_map_blocks+0x97f/0x1a50 [ 156.323569][ T6372] ext4_iomap_begin+0x800/0xb70 [ 156.328919][ T6372] iomap_iter+0x604/0xda0 [ 156.333751][ T6372] __iomap_dio_rw+0xafd/0x1ba0 [ 156.339026][ T6372] iomap_dio_rw+0x38/0x90 [ 156.343853][ T6372] ext4_file_write_iter+0x12e6/0x1720 [ 156.349727][ T6372] do_iter_readv_writev+0x47d/0x5f0 [ 156.355424][ T6372] do_iter_write+0x1f8/0x7a0 [ 156.360519][ T6372] do_writev+0x281/0x480 [ 156.365264][ T6372] do_syscall_64+0x4c/0xa0 [ 156.370183][ T6372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.376575][ T6372] [ 156.376575][ T6372] other info that might help us debug this: [ 156.376575][ T6372] [ 156.386778][ T6372] Chain exists of: [ 156.386778][ T6372] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 156.386778][ T6372] [ 156.400395][ T6372] Possible unsafe locking scenario: [ 156.400395][ T6372] [ 156.407827][ T6372] CPU0 CPU1 [ 156.413165][ T6372] ---- ---- [ 156.418511][ T6372] lock(&ei->i_data_sem/2); [ 156.423084][ T6372] lock(&s->s_dquot.dqio_sem); [ 156.430428][ T6372] lock(&ei->i_data_sem/2); [ 156.437539][ T6372] lock(&dquot->dq_lock); [ 156.441932][ T6372] [ 156.441932][ T6372] *** DEADLOCK *** [ 156.441932][ T6372] [ 156.450051][ T6372] 5 locks held by syz.5.672/6372: [ 156.455052][ T6372] #0: ffff8880291985f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 156.464255][ T6372] #1: ffff888024590460 (sb_writers#5){++++}-{0:0}, at: do_writev+0x263/0x480 [ 156.473110][ T6372] #2: ffff88805f5921d8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_file_write_iter+0x67a/0x1720 [ 156.484230][ T6372] #3: ffff88805f592060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 156.494125][ T6372] #4: ffffffff8c4418b8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 156.503145][ T6372] [ 156.503145][ T6372] stack backtrace: [ 156.509009][ T6372] CPU: 0 PID: 6372 Comm: syz.5.672 Not tainted syzkaller #0 [ 156.516274][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.526308][ T6372] Call Trace: [ 156.529567][ T6372] [ 156.532488][ T6372] dump_stack_lvl+0x188/0x250 [ 156.537145][ T6372] ? load_image+0x410/0x410 [ 156.541626][ T6372] ? show_regs_print_info+0x20/0x20 [ 156.546803][ T6372] ? print_circular_bug+0x12b/0x1a0 [ 156.551987][ T6372] check_noncircular+0x296/0x330 [ 156.556907][ T6372] ? add_chain_block+0x9b0/0x9b0 [ 156.561828][ T6372] ? lockdep_lock+0xf1/0x1f0 [ 156.566403][ T6372] ? mark_lock+0x94/0x320 [ 156.570711][ T6372] ? _find_first_zero_bit+0xd1/0xf0 [ 156.575896][ T6372] __lock_acquire+0x2c66/0x7b50 [ 156.580731][ T6372] ? check_path+0x21/0x40 [ 156.585038][ T6372] ? verify_lock_unused+0x140/0x140 [ 156.590219][ T6372] ? lockdep_lock+0xf1/0x1f0 [ 156.594789][ T6372] ? lockdep_unlock+0x143/0x2e0 [ 156.599621][ T6372] ? mark_lock+0x94/0x320 [ 156.603931][ T6372] lock_acquire+0x19e/0x400 [ 156.608424][ T6372] ? dquot_commit+0x5a/0x410 [ 156.613014][ T6372] ? __might_sleep+0xf0/0xf0 [ 156.617586][ T6372] ? read_lock_is_recursive+0x10/0x10 [ 156.622937][ T6372] ? verify_lock_unused+0x140/0x140 [ 156.628118][ T6372] __mutex_lock_common+0x1e5/0x2400 [ 156.633295][ T6372] ? dquot_commit+0x5a/0x410 [ 156.637869][ T6372] ? dquot_commit+0x5a/0x410 [ 156.642440][ T6372] ? __might_sleep+0xf0/0xf0 [ 156.647011][ T6372] ? mutex_lock_io_nested+0x60/0x60 [ 156.652191][ T6372] mutex_lock_nested+0x17/0x20 [ 156.656932][ T6372] dquot_commit+0x5a/0x410 [ 156.661331][ T6372] ext4_write_dquot+0x1f0/0x360 [ 156.666166][ T6372] mark_all_dquot_dirty+0xf9/0x400 [ 156.671258][ T6372] __dquot_alloc_space+0x5cb/0xe10 [ 156.676353][ T6372] ext4_mb_new_blocks+0xf80/0x47c0 [ 156.681456][ T6372] ? memset+0x1e/0x40 [ 156.685420][ T6372] ? ext4_mb_pa_callback+0xd0/0xd0 [ 156.690511][ T6372] ? ext4_inode_to_goal_block+0x313/0x450 [ 156.696210][ T6372] ext4_ext_map_blocks+0x17d1/0x63d0 [ 156.701493][ T6372] ? __kernel_text_address+0x9a/0x100 [ 156.706855][ T6372] ? ext4_ext_release+0x10/0x10 [ 156.711689][ T6372] ? rwsem_write_trylock+0x135/0x1c0 [ 156.716957][ T6372] ext4_map_blocks+0x97f/0x1a50 [ 156.721793][ T6372] ? ext4_issue_zeroout+0x250/0x250 [ 156.726971][ T6372] ? ext4_journal_check_start+0x17f/0x240 [ 156.732674][ T6372] ? __ext4_journal_start_sb+0x1bd/0x360 [ 156.738287][ T6372] ext4_iomap_begin+0x800/0xb70 [ 156.743118][ T6372] ? do_writev+0x281/0x480 [ 156.747515][ T6372] ? do_syscall_64+0x4c/0xa0 [ 156.752088][ T6372] ? ext4_alloc_da_blocks+0x230/0x230 [ 156.757440][ T6372] ? xas_next_entry+0x3e0/0x3e0 [ 156.762295][ T6372] ? ext4_alloc_da_blocks+0x230/0x230 [ 156.767644][ T6372] iomap_iter+0x604/0xda0 [ 156.771957][ T6372] __iomap_dio_rw+0xafd/0x1ba0 [ 156.776706][ T6372] ? ktime_get_real_ts64+0x440/0x440 [ 156.781980][ T6372] ? iomap_dio_complete+0x6d0/0x6d0 [ 156.787186][ T6372] ? inode_dio_wait+0x25a/0x2d0 [ 156.792032][ T6372] ? file_update_time+0x2f1/0x440 [ 156.797052][ T6372] ? ext4_fc_replay_link_internal+0x290/0x290 [ 156.803110][ T6372] iomap_dio_rw+0x38/0x90 [ 156.807423][ T6372] ? ext4_file_write_iter+0xbd1/0x1720 [ 156.812881][ T6372] ext4_file_write_iter+0x12e6/0x1720 [ 156.818244][ T6372] ? ext4_file_write_iter+0xbd1/0x1720 [ 156.823691][ T6372] ? ext4_file_read_iter+0x6f0/0x6f0 [ 156.828971][ T6372] ? aa_file_perm+0x38b/0xe80 [ 156.833632][ T6372] do_iter_readv_writev+0x47d/0x5f0 [ 156.838812][ T6372] ? aa_path_link+0x8a0/0x8a0 [ 156.843475][ T6372] ? generic_file_rw_checks+0x280/0x280 [ 156.849004][ T6372] ? common_file_perm+0x171/0x1c0 [ 156.854006][ T6372] ? fsnotify_perm+0x5d/0x560 [ 156.858667][ T6372] ? security_file_permission+0x75/0xa0 [ 156.864192][ T6372] do_iter_write+0x1f8/0x7a0 [ 156.868779][ T6372] do_writev+0x281/0x480 [ 156.873004][ T6372] ? do_readv+0x460/0x460 [ 156.877322][ T6372] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.883286][ T6372] ? lock_chain_count+0x20/0x20 [ 156.888118][ T6372] ? lockdep_hardirqs_on+0x94/0x140 [ 156.893299][ T6372] do_syscall_64+0x4c/0xa0 [ 156.897697][ T6372] ? clear_bhb_loop+0x30/0x80 [ 156.902361][ T6372] ? clear_bhb_loop+0x30/0x80 [ 156.907037][ T6372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.912917][ T6372] RIP: 0033:0x7f1ccb8b2159 [ 156.917327][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.936917][ T6372] RSP: 002b:00007f1cc9b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 156.945317][ T6372] RAX: ffffffffffffffda RBX: 00007f1ccbb39fa0 RCX: 00007f1ccb8b2159 [ 156.953355][ T6372] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 156.961310][ T6372] RBP: 00007f1ccb94906b R08: 0000000000000000 R09: 0000000000000000 [ 156.969260][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.977208][ T6372] R13: 00007f1ccbb3a038 R14: 00007f1ccbb39fa0 R15: 00007ffd7cef8398 [ 156.985164][ T6372]