last executing test programs: 2m52.833510857s ago: executing program 0 (id=85): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 2m52.605806804s ago: executing program 0 (id=87): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f0000000300)={[{@map_off}, {@showassoc, 0x0}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@block={'block', 0x3d, 0x600}}, {@mode={'mode', 0x3d, 0x6}}, {@nocompress, 0x41}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@sbsector={'sbsector', 0x3d, 0xd280}}, {@map_acorn}, {@utf8}, {@gid}], [{@fsname={'fsname', 0x3d, 'cp874'}}]}, 0xfd, 0x6b8, &(0x7f0000000f00)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 2m52.295599983s ago: executing program 0 (id=88): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x8, 0x8, 0x7, 0x3, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end, @end, @timestamp={0x44, 0x8, 0x75, 0x0, 0x8, [0x7]}, @timestamp_addr={0x44, 0x34, 0xc3, 0x1, 0xd, [{@private=0xa010101, 0xcabd}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}, {@remote, 0x9}, {@loopback, 0x80000000}, {@multicast1, 0x3}]}, @cipso={0x86, 0x1a, 0x0, [{0x1, 0x12, "f5bfe6d4c5c39ad0dc88f7db0ac9eef1"}, {0x2, 0x2}]}]}}}}}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="010000000100"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 2m52.105089329s ago: executing program 0 (id=91): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="7a7610e6e96fbe183fc5c0b77bfdc49f3a0f91f31698810de4e12223b24b"], 0x44, 0x6f7, &(0x7f0000001f80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x80, 0x4) read$FUSE(r3, &(0x7f0000001e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m51.536714386s ago: executing program 0 (id=93): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ftruncate(r0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m49.369142023s ago: executing program 0 (id=97): syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) mount(&(0x7f0000000540)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002600)='gfs2\x00', 0x2a08005, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x1, 0x0, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x10000400009, 0x5, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x258, 0xffff, 0xc1, 0x8, 0x10, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0xfffffffffffffffc, 0x4, 0x4, 0x6, 0x3, 0xf933, 0x8892, 0x1, 0x43dd1007, 0x46, 0x8, 0xfffffffffffffff8, 0xa3dc, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x8, 0xffffffffffffffb7, 0xfffffffffffffffb, 0x2, 0x3, 0xfffffffffffff068, 0x4, 0xe7, 0x8, 0x2, 0xd, 0x66, 0x6, 0x8001, 0x40000005, 0xfffffffeffffffff, 0xfe, 0xd, 0x3, 0xbbdb, 0xffffffff, 0xfffffffffffffc00, 0x2, 0x7, 0x18, 0xcdc, 0x100004000000003, 0x2, 0x6, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x3, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0xb, 0x6aff6548, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x5, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0xff, 0x6, 0x5, 0x3, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x3, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x6, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x4000000000000001, 0xb68e, 0x1, 0x8, 0x1000003]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x8, 0x1, @any, 0xff, 0xc6, 0xb, 0x1, 0x0, 0x6, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}}}}, 0x1d) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x7}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x300, 0x400}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f00000004c0)) write$UHID_CREATE2(r3, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0xc9d2, 0x8e, 0x7f, 0x9, 0x4, "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"}}, 0x1118) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x3) 2m34.175645529s ago: executing program 32 (id=97): syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) mount(&(0x7f0000000540)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002600)='gfs2\x00', 0x2a08005, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x1, 0x0, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x10000400009, 0x5, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x258, 0xffff, 0xc1, 0x8, 0x10, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0xfffffffffffffffc, 0x4, 0x4, 0x6, 0x3, 0xf933, 0x8892, 0x1, 0x43dd1007, 0x46, 0x8, 0xfffffffffffffff8, 0xa3dc, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x8, 0xffffffffffffffb7, 0xfffffffffffffffb, 0x2, 0x3, 0xfffffffffffff068, 0x4, 0xe7, 0x8, 0x2, 0xd, 0x66, 0x6, 0x8001, 0x40000005, 0xfffffffeffffffff, 0xfe, 0xd, 0x3, 0xbbdb, 0xffffffff, 0xfffffffffffffc00, 0x2, 0x7, 0x18, 0xcdc, 0x100004000000003, 0x2, 0x6, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x3, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0xb, 0x6aff6548, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x5, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0xff, 0x6, 0x5, 0x3, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x3, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x6, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x4000000000000001, 0xb68e, 0x1, 0x8, 0x1000003]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x8, 0x1, @any, 0xff, 0xc6, 0xb, 0x1, 0x0, 0x6, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}}}}, 0x1d) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x7}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x300, 0x400}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f00000004c0)) write$UHID_CREATE2(r3, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0xc9d2, 0x8e, 0x7f, 0x9, 0x4, "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"}}, 0x1118) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x3) 12.75264032s ago: executing program 3 (id=504): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2be, &(0x7f0000000c80)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x131) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}]}, 0x1, 0x248, &(0x7f0000002340)="$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") inotify_init() gettimeofday(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 10.000927224s ago: executing program 4 (id=509): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="f60ece0ef0a0", @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES16=r2], 0x0, 0x1516, &(0x7f0000001940)="$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") 9.688365214s ago: executing program 3 (id=513): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000002cc0)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x5, 0x3, 0x4, 0x50b, {0x5, 0x800, 0x80000001, 0xf, 0x3d9, 0x1, 0x10001, 0x13, 0xf4d2, 0x0, 0x3, 0xee00, 0x0, 0x5, 0x8}}, {0x0, 0x8}}}, 0xf3) statfs(&(0x7f0000000280)='./file0\x00', 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x800, 0x19c) 6.110554073s ago: executing program 1 (id=520): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c1, &(0x7f00000006c0)="$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") 6.008392796s ago: executing program 3 (id=521): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 5.453697743s ago: executing program 3 (id=524): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r1 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x44, 0x0, 0x0, 0x0, 0x29e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r4, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003c80)="f4", 0x1}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20009001) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 5.420527764s ago: executing program 2 (id=525): mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x220, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x80, 0xd80, 0x1d, 0xffffff00, 0xfffffff4, 0xd, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@nobh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, 0x0, 0x1000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.300737878s ago: executing program 1 (id=526): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\r2', 0x2}]) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) r8 = openat$ppp(0xffffff9c, 0x0, 0xe2002, 0x0) ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000100)=0x2) 5.179174052s ago: executing program 5 (id=527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x28, 0x0, &(0x7f0000000100)="e0374123ad6f54d23e3c240f036f063506f1a03ea03013c4692478bac519f028a57a00b5d6e3ef5a"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.168897362s ago: executing program 2 (id=528): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') keyctl$clear(0x11, 0xfffffffffffffffd) 5.052020656s ago: executing program 4 (id=529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) read$FUSE(r1, 0x0, 0x0) 4.831521023s ago: executing program 4 (id=530): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000005c0)={0x0, 0x4, 0xc, 0xfffffffe, @vifc_lcl_ifindex, @loopback}, 0x10) 4.634455428s ago: executing program 1 (id=531): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000002cc0)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x5, 0x3, 0x4, 0x50b, {0x5, 0x800, 0x80000001, 0xf, 0x3d9, 0x1, 0x10001, 0x13, 0xf4d2, 0x0, 0x3, 0xee00, 0x0, 0x5, 0x8}}, {0x0, 0x8}}}, 0xf3) statfs(&(0x7f0000000280)='./file0\x00', 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x800, 0x19c) 4.062528076s ago: executing program 2 (id=532): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x3920e, r2, 0x3, 0x1, 0x3, 0x6}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = dup(r4) getpriority(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="2e000000010000", 0x7) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 3.996736318s ago: executing program 4 (id=533): syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x8001, 0x200}) tkill(r0, 0x7) r2 = getpid() syz_open_procfs$userns(r2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) personality(0x8) 3.956550899s ago: executing program 5 (id=534): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) 3.59594061s ago: executing program 1 (id=535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x82b, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18}, 0xfffffdef) ioctl$FIBMAP(r5, 0x1, &(0x7f00000001c0)=0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) fstat(r7, &(0x7f0000000200)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) splice(r7, &(0x7f0000000680)=0x4aa3, r7, 0x0, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) 3.540769922s ago: executing program 2 (id=536): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000d00)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@noload}, {@i_version}, {@bh}, {@errors_remount}]}, 0x21, 0x569, &(0x7f00000002c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x991480, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000b00)=[{&(0x7f0000000c40)=""/4103, 0x1007}], 0x1, 0x8000, 0x9, 0x9) 3.540593792s ago: executing program 4 (id=537): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585d1", @ANYRES32], 0x0) 3.427726175s ago: executing program 2 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) poll(0x0, 0x0, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) 3.383148907s ago: executing program 3 (id=539): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0xfeff) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80742, 0x148) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc42f6fd7d894d806a765731ded", 0xe}, {0x0}], 0x2, 0x5412, 0x0, 0x0) 2.440688226s ago: executing program 5 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) 1.690551828s ago: executing program 2 (id=541): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\r2', 0x2}]) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) r8 = openat$ppp(0xffffff9c, 0x0, 0xe2002, 0x0) ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000100)=0x2) 1.510484704s ago: executing program 5 (id=542): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init1(0x0) openat(0xffffffffffffff9c, 0x0, 0x80800, 0x4) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x8) 708.710898ms ago: executing program 3 (id=543): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 474.721706ms ago: executing program 5 (id=544): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 448.613017ms ago: executing program 1 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) chroot(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 352.7709ms ago: executing program 4 (id=546): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x2480e, 0x0, 0xfd, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./bus/file0\x00', 0x80020, 0x0, 0x0, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r2) 119.122347ms ago: executing program 5 (id=547): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a00", @ANYRES32=0x0, @ANYBLOB='\x00\x00J'], 0x24}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=548): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.300229][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.309331][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.319609][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.326715][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.335797][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.344853][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.354151][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.363641][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.373239][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.382532][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.396850][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.411959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.422706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.442928][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.460144][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.476752][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.487637][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.521493][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.528397][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.537289][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.555721][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.566803][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.606649][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.615725][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.653225][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.666676][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.681158][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.691717][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.723220][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.734855][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.744192][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.751365][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.788381][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.799671][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.808596][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.825077][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.832274][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.850656][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.864675][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.875790][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.882970][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.897397][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.906706][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.916372][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.925444][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.932580][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.941102][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.951448][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.984143][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.000264][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.026298][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.035666][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.044927][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.054719][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.064237][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.073533][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.082687][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.093387][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.102329][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.111247][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.119894][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.129114][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.137691][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.145946][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.167833][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.179517][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.195726][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.207866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.216830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.225360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.234360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.242817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.251049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.262669][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.294767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.304495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.316876][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.322285][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.324004][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.330438][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.348002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.356984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.366361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.375493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.385018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.394750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.403671][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.410806][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.418863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.428026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.437040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.445744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.457017][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.466150][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.476006][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.483162][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.498638][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.516040][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.538706][ T4188] device veth0_vlan entered promiscuous mode [ 71.549521][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 71.569544][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 71.576101][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.579990][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 71.591248][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.591403][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 71.605524][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 71.614006][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.622878][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.632520][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.641479][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.652239][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.661453][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.670757][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.679989][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.688581][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.695732][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.704758][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.714221][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.744569][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.752743][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.765698][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.774678][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.785037][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.794591][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.803758][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.812803][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.823328][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.833336][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.846723][ T4188] device veth1_vlan entered promiscuous mode [ 71.889385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.897989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.907403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.923394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.937327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.953662][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.966063][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.985989][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.017578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.027034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.048529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.057804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.066715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.074826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.086241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.136567][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.182759][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.198649][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.216021][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.240074][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.247996][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.263339][ T4188] device veth0_macvtap entered promiscuous mode [ 72.304238][ T4188] device veth1_macvtap entered promiscuous mode [ 72.330682][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.341320][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.349821][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.360033][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.371116][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.380694][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.415383][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.439222][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.450425][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.459564][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.467100][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.485091][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.498558][ T4194] device veth0_vlan entered promiscuous mode [ 72.507501][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.520492][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.531586][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.540483][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.549448][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.558325][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.567652][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.576239][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.584704][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.592904][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.608013][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.617124][ T4195] device veth0_vlan entered promiscuous mode [ 72.634378][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.645085][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.655259][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.664990][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.687943][ T4194] device veth1_vlan entered promiscuous mode [ 72.697682][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.706614][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.714568][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.750308][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.765168][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.774127][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.790503][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.807499][ T4195] device veth1_vlan entered promiscuous mode [ 72.860166][ T4194] device veth0_macvtap entered promiscuous mode [ 72.873754][ T4194] device veth1_macvtap entered promiscuous mode [ 72.897085][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.907266][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.917428][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.928947][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.938147][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.957103][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.976313][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.994730][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.008517][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.027745][ T4197] device veth0_vlan entered promiscuous mode [ 73.052974][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.067877][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.077480][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.094585][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.106915][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.118580][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.130469][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.150092][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.157966][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.176556][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.187242][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.207302][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.218621][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.230536][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.246442][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.260657][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.268836][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.292245][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.301846][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.312669][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.342190][ T4195] device veth0_macvtap entered promiscuous mode [ 73.350623][ T4197] device veth1_vlan entered promiscuous mode [ 73.381886][ T4195] device veth1_macvtap entered promiscuous mode [ 73.410970][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.422209][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.430932][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.440854][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.453883][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.465087][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.502694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.516991][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.530291][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.541192][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.551957][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.564458][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.593647][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.604315][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.614934][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.624225][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.634894][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.641620][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 73.650050][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.669751][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 73.676324][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.694252][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 73.695176][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.702842][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 73.722648][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.731384][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 73.742612][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.755077][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.765812][ T4197] device veth0_macvtap entered promiscuous mode [ 73.774719][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.784768][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.794509][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.804327][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.814244][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.826069][ T4189] device veth0_vlan entered promiscuous mode [ 73.842969][ T4189] device veth1_vlan entered promiscuous mode [ 73.897581][ T4272] loop0: detected capacity change from 0 to 512 [ 73.900140][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.915771][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.925451][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934745][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.947989][ T4197] device veth1_macvtap entered promiscuous mode [ 73.957363][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.008053][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.022303][ T4272] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nouid32,nombcache,,errors=continue. Quota mode: writeback. [ 74.058397][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.060683][ T4272] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.072534][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.089234][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.099816][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.118115][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.128787][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.140439][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.154771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.170029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.178474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.187670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.202932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.213602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.234667][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.239246][ T4272] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 74.253672][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.266833][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.280265][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.291070][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.303241][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.317556][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.364923][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.373186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.387200][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.401134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.414086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.438105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.452841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.464190][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.478339][ T4278] loop0: detected capacity change from 0 to 256 [ 74.482727][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.493805][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.502609][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.517498][ T4189] device veth0_macvtap entered promiscuous mode [ 74.526830][ T4278] ======================================================= [ 74.526830][ T4278] WARNING: The mand mount option has been deprecated and [ 74.526830][ T4278] and is ignored by this kernel. Remove the mand [ 74.526830][ T4278] option from the mount to silence this warning. [ 74.526830][ T4278] ======================================================= [ 74.609698][ T4189] device veth1_macvtap entered promiscuous mode [ 74.655932][ T4278] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 74.716353][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.742754][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.754215][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.765379][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.776999][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.791870][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.802405][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.818261][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.238968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 75.248946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 75.258944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.268942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.818964][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.828941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.838945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.848946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.858945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.868941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.605674][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 76.611864][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 76.618001][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 76.624471][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 76.630924][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 76.639201][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.676500][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.698691][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.711349][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.719482][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.728158][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.738021][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.747412][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.868737][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.907238][ T4290] loop0: detected capacity change from 0 to 512 [ 76.923998][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.936157][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.946946][ T4290] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.961672][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.972746][ T4290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.984158][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.009496][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.030399][ T4290] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.043909][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.058042][ T4290] EXT4-fs (loop0): 1 truncate cleaned up [ 77.064228][ T4290] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000000,errors=remount-ro,nombcache,. Quota mode: none. [ 77.069290][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.137789][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.169307][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.200656][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.213537][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.226559][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.305208][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.327199][ T4296] loop0: detected capacity change from 0 to 128 [ 77.335951][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.345154][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354483][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.413810][ T4296] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 77.438395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.455482][ T4296] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.536880][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.552102][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.581716][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.607817][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.666385][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.685858][ T4296] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz.0.9: No space for directory leaf checksum. Please run e2fsck -D. [ 77.707337][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.736880][ T4296] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.9: Invalid inode table block 35 in block_group 0 [ 77.794189][ T4296] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 77.830895][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.847371][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.902452][ T4296] EXT4-fs error (device loop0): ext4_add_nondir:2847: inode #13: comm syz.0.9: mark_inode_dirty error [ 77.909562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.982179][ T4300] loop1: detected capacity change from 0 to 128 [ 77.996613][ T4302] loop2: detected capacity change from 0 to 128 [ 78.011074][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.027414][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.057907][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.111585][ T4300] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 78.155285][ T4302] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,nodioread_nolock,,errors=continue. Quota mode: none. [ 78.226364][ T4302] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.277463][ T4300] VFS: Lookup of 'file0' in vfat loop1 would have caused loop [ 78.292626][ T4300] VFS: Lookup of 'file0' in vfat loop1 would have caused loop [ 78.995562][ T4313] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 81.498257][ T4319] loop4: detected capacity change from 0 to 1024 [ 81.583966][ T4319] EXT4-fs (loop4): Ignoring removed bh option [ 81.681596][ T4319] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 81.976898][ T26] audit: type=1800 audit(1779380586.473:2): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 82.030331][ T4315] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 82.789607][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.805412][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.813483][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.791962][ T4337] loop4: detected capacity change from 0 to 128 [ 84.019884][ T4337] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.105449][ T4337] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.708649][ T1106] cfg80211: failed to load regulatory.db [ 87.777756][ T4375] loop3: detected capacity change from 0 to 512 [ 89.335127][ T4377] loop2: detected capacity change from 0 to 512 [ 89.379036][ T4375] EXT4-fs (loop3): orphan cleanup on readonly fs [ 89.426707][ T4375] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 89.436079][ T4375] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 89.456664][ T4375] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.28: attempt to clear invalid blocks 2 len 1 [ 89.513692][ T4375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.28: invalid indirect mapped block 1819239214 (level 0) [ 89.549146][ T1106] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.558218][ T4375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.28: invalid indirect mapped block 1819239214 (level 1) [ 89.639428][ T4375] EXT4-fs (loop3): 1 truncate cleaned up [ 89.655412][ T4375] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 89.758971][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.768440][ T4377] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.826332][ T4377] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.18: inode has both inline data and extents flags [ 89.853873][ T4377] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.18: couldn't read orphan inode 15 (err -117) [ 89.878342][ T4377] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 89.953593][ T4391] process 'syz.3.30' launched './file1' with NULL argv: empty string added [ 90.019030][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 91.396769][ T4377] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 91.408154][ T4380] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 91.478359][ T1106] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 91.512001][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 91.539036][ T21] usb 1-1: device descriptor read/all, error -71 [ 91.613335][ T1106] usb 2-1: Product: syz [ 91.679477][ T4410] loop0: detected capacity change from 0 to 512 [ 91.706188][ T1106] usb 2-1: config 0 descriptor?? [ 91.713502][ T4413] loop1: detected capacity change from 0 to 256 [ 91.754341][ T1106] usb 2-1: can't set config #0, error -71 [ 91.760342][ T4410] EXT4-fs (loop0): Ignoring removed nobh option [ 91.766712][ T4410] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.801376][ T4410] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.814820][ T4410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 91.843121][ T1106] usb 2-1: USB disconnect, device number 2 [ 91.939614][ T4416] ubi0: attaching mtd0 [ 91.969926][ T4410] Quota error (device loop0): write_blk: dquota write failed [ 91.978017][ T4410] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 93.569160][ T4410] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.32: Failed to acquire dquot type 0 [ 93.588381][ T4416] ubi0: scanning is finished [ 93.599355][ T4416] ubi0: empty MTD device detected [ 93.611780][ T4410] EXT4-fs (loop0): 1 truncate cleaned up [ 93.644494][ T4410] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,resgid=0x000000000000ee01,noinit_itable,min_batch_time=0x00000000000000012,errors=continue. Quota mode: writeback. [ 93.801656][ T4416] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 95.764156][ T4429] hub 8-0:1.0: USB hub found [ 95.771571][ T4429] hub 8-0:1.0: 1 port detected [ 95.823875][ T4429] No such timeout policy "syz1" [ 95.842297][ T4429] loop0: detected capacity change from 0 to 16 [ 96.103382][ T4429] erofs: (device loop0): mounted with root inode @ nid 36. [ 96.169089][ T4429] attempt to access beyond end of device [ 96.169089][ T4429] loop0: rw=524288, want=32, limit=16 [ 96.195455][ T4429] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 96.319128][ T4429] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 96.410214][ T26] audit: type=1800 audit(1779380600.713:3): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.38" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 96.608222][ T4429] syz.0.38 (4429) used greatest stack depth: 20912 bytes left [ 96.748816][ T4431] loop0: detected capacity change from 0 to 128 [ 96.915755][ T4431] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.926827][ T4431] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.287144][ T4439] loop2: detected capacity change from 0 to 128 [ 97.579505][ T4439] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.625028][ T4439] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.659050][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.019140][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 98.177258][ T23] usb 1-1: config 0 has an invalid interface number: 70 but max is 0 [ 98.498423][ T23] usb 1-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 98.523697][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.534453][ T23] usb 1-1: config 0 has no interface number 0 [ 98.540888][ T23] usb 1-1: config 0 interface 70 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 98.552662][ T23] usb 1-1: config 0 interface 70 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.568280][ T23] usb 1-1: config 0 interface 70 has no altsetting 0 [ 98.582658][ T1324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.593083][ T1181] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.729189][ T23] usb 1-1: Dual-Role OTG device on HNP port [ 98.761019][ T23] usb 1-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 98.788546][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.799757][ T23] usb 1-1: Product: syz [ 98.803976][ T23] usb 1-1: Manufacturer: syz [ 98.808603][ T23] usb 1-1: SerialNumber: syz [ 98.827718][ T23] usb 1-1: config 0 descriptor?? [ 98.849754][ T4437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.859069][ T4294] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.868679][ T4454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.949481][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 99.099198][ T1324] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.107747][ T1324] usb 2-1: config 0 has no interface number 0 [ 99.114319][ T1324] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.125904][ T23] ti_usb_3410_5052 1-1:0.70: required endpoints missing [ 99.126270][ T1324] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.144853][ T4294] usb 5-1: Using ep0 maxpacket: 8 [ 99.150230][ T1324] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 99.159936][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.175998][ T1324] usb 2-1: config 0 descriptor?? [ 99.183940][ T23] usb 1-1: USB disconnect, device number 4 [ 99.279154][ T4294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.302617][ T4294] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 99.317609][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.343529][ T4294] usb 5-1: config 0 descriptor?? [ 100.498673][ T26] audit: type=1800 audit(1779380604.943:4): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.43" name="/" dev="fuse" ino=4 res=0 errno=0 [ 100.852266][ T4294] logitech 0003:046D:C293.0002: ignoring exceeding usage max [ 100.889835][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 100.916058][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 100.939351][ T1324] uclogic 0003:28BD:0071.0001: pen parameters not found [ 100.954246][ T1324] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 100.971758][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 101.008972][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 101.026553][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 101.040791][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 101.052030][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 101.059727][ T4294] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 101.066955][ T4294] logitech 0003:046D:C293.0002: item fetching failed at offset 42/43 [ 101.078622][ T4294] logitech 0003:046D:C293.0002: parse failed [ 101.085027][ T4294] logitech: probe of 0003:046D:C293.0002 failed with error -22 [ 101.124188][ T4294] usb 5-1: USB disconnect, device number 2 [ 101.212778][ T1324] usb 2-1: USB disconnect, device number 3 [ 102.499418][ T4501] binder: 4498:4501 ioctl c0306201 0 returned -14 [ 102.531189][ T4501] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.895448][ T4517] loop3: detected capacity change from 0 to 128 [ 103.899127][ T1106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.209178][ T4465] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.269288][ T1106] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.289474][ T1106] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.318991][ T1106] usb 1-1: config 220 has no interface number 2 [ 105.325513][ T1106] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.358920][ T1106] usb 1-1: config 220 interface 0 has no altsetting 0 [ 105.369156][ T1106] usb 1-1: config 220 interface 76 has no altsetting 0 [ 105.386413][ T1106] usb 1-1: config 220 interface 1 has no altsetting 0 [ 106.433256][ T4465] usb 5-1: Using ep0 maxpacket: 8 [ 106.489358][ T1106] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.508699][ T1106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.519513][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.529618][ T1106] usb 1-1: Product: syz [ 106.533826][ T1106] usb 1-1: Manufacturer: syz [ 106.538446][ T1106] usb 1-1: SerialNumber: syz [ 106.589242][ T4465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.619008][ T4465] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.669001][ T4465] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 106.669640][ T1106] usb 1-1: can't set config #220, error -71 [ 106.709504][ T4465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.725064][ T1106] usb 1-1: USB disconnect, device number 5 [ 106.747152][ T4465] usb 5-1: config 0 descriptor?? [ 106.779048][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 107.039114][ T4465] usbhid 5-1:0.0: can't add hid device: -71 [ 107.045159][ T4465] usbhid: probe of 5-1:0.0 failed with error -71 [ 107.059285][ T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 107.084539][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.099771][ T4465] usb 5-1: USB disconnect, device number 3 [ 107.119043][ T23] usb 4-1: Product: syz [ 107.123269][ T23] usb 4-1: Manufacturer: syz [ 107.149658][ T23] usb 4-1: SerialNumber: syz [ 107.189784][ T4538] binder: 4537:4538 unknown command 1074553619 [ 107.196011][ T4538] binder: 4537:4538 ioctl c0306201 200000000040 returned -22 [ 107.206560][ T23] usb 4-1: config 0 descriptor?? [ 107.252405][ T23] usb 4-1: can't set config #0, error -71 [ 107.261776][ T23] usb 4-1: USB disconnect, device number 2 [ 107.278828][ T4540] binder: 4537:4540 unknown command 1074553620 [ 107.285485][ T4540] binder: 4537:4540 ioctl c0306201 200000000640 returned -22 [ 107.580291][ T4542] ipt_CLUSTERIP: Please specify destination IP [ 109.245691][ T4548] loop4: detected capacity change from 0 to 512 [ 109.329454][ T4548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.445796][ T4548] EXT4-fs (loop4): 1 truncate cleaned up [ 109.474359][ T4548] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,usrquota,lazytime,nombcache,i_version,,errors=continue. Quota mode: writeback. [ 109.781819][ T4558] loop1: detected capacity change from 0 to 8192 [ 110.693466][ T4580] loop0: detected capacity change from 0 to 2048 [ 110.791872][ T4580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.983151][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.089183][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 112.309536][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.459405][ T4235] usb 4-1: config 7 has an invalid interface descriptor of length 4, skipping [ 112.469035][ T4235] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 112.479909][ T4235] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 112.639091][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.669379][ T4235] usb 4-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 112.706143][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.725428][ T4235] usb 4-1: Product: syz [ 112.735580][ T4235] usb 4-1: Manufacturer: syz [ 112.746415][ T4235] usb 4-1: SerialNumber: syz [ 112.889830][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 113.009290][ T21] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 113.054949][ T4235] usb 4-1: USB disconnect, device number 3 [ 113.163946][ T4618] loop0: detected capacity change from 0 to 164 [ 113.202670][ T21] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 113.244416][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.265265][ T21] usb 2-1: Product: syz [ 113.274442][ T4618] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 113.288337][ T21] usb 2-1: Manufacturer: syz [ 113.293442][ T21] usb 2-1: SerialNumber: syz [ 113.475954][ T4627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 113.661715][ T4633] loop0: detected capacity change from 0 to 1024 [ 113.866158][ T21] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 113.889018][ T4235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.925384][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.943875][ T21] usb 2-1: USB disconnect, device number 4 [ 113.959050][ T1106] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.065986][ T144] hfsplus: b-tree write err: -5, ino 25 [ 114.076086][ T144] hfsplus: b-tree write err: -5, ino 4 [ 114.083031][ T144] hfsplus: b-tree write err: -5, ino 2 [ 114.139002][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 114.379194][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.415608][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.455276][ T4645] fuse: Bad value for 'fd' [ 114.779134][ T4293] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.238925][ T4293] usb 2-1: Using ep0 maxpacket: 32 [ 115.364714][ T4293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.395967][ T4293] usb 2-1: config 0 has no interfaces? [ 115.412442][ T4235] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.416786][ T4293] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.421600][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.443199][ T4235] usb 5-1: config 0 descriptor?? [ 115.480292][ T4235] hub 5-1:0.0: USB hub found [ 115.489131][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.517021][ T4293] usb 2-1: config 0 descriptor?? [ 115.649101][ T1106] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 115.658209][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.675039][ T4648] loop0: detected capacity change from 0 to 1024 [ 115.679940][ T1106] usb 4-1: Product: syz [ 115.685621][ T1106] usb 4-1: Manufacturer: syz [ 115.699228][ T4235] hub 5-1:0.0: 25 ports detected [ 115.709304][ T1106] usb 4-1: SerialNumber: syz [ 115.719274][ T4235] hub 5-1:0.0: insufficient power available to use all downstream ports [ 115.730835][ T4648] EXT4-fs (loop0): Ignoring removed bh option [ 115.797196][ T4643] udc-core: couldn't find an available UDC or it's busy [ 115.812923][ T4643] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.836403][ T4648] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 115.860561][ T4236] usb 2-1: USB disconnect, device number 5 [ 115.886753][ T4648] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.951549][ T4639] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 3) [ 115.968933][ T4639] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 115.988488][ T4639] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.988488][ T4639] [ 116.023928][ T4639] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.041282][ T4639] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.056985][ T4638] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.071851][ T4638] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.093705][ T4638] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.108259][ T4638] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.127407][ T4639] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.142044][ T4638] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.156466][ T4639] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.93: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.209329][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 116.409257][ T4659] blk_update_request: I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 116.437934][ T4659] gfs2: error 10 reading superblock [ 116.443626][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.621336][ T4235] usb 5-1: USB disconnect, device number 4 [ 116.789420][ T4665] loop4: detected capacity change from 0 to 512 [ 116.820285][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 116.854944][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.870818][ T4665] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 116.870947][ T4665] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.887238][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x37, skipping [ 117.099197][ T4236] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=31.68 [ 117.099233][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.099255][ T4236] usb 2-1: Product: syz [ 117.099271][ T4236] usb 2-1: Manufacturer: syz [ 117.099287][ T4236] usb 2-1: SerialNumber: syz [ 117.101281][ T4236] usb 2-1: config 0 descriptor?? [ 117.360891][ T4280] usb 2-1: USB disconnect, device number 6 [ 117.445833][ T4675] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.580027][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 117.625037][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 117.638294][ T4681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'. [ 117.659104][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 117.939634][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 117.969071][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 118.009063][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 118.073938][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 118.902642][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 119.023865][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 119.037965][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 119.050478][ T1106] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 119.062075][ T1106] lan78xx: probe of 4-1:1.0 failed with error -71 [ 119.073847][ T1106] usb 4-1: USB disconnect, device number 4 [ 119.508552][ T4701] loop3: detected capacity change from 0 to 2048 [ 120.276232][ T4701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.287684][ T4701] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh [ 120.296647][ T4701] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 121.766745][ T4712] loop4: detected capacity change from 0 to 1024 [ 121.825861][ T4712] EXT4-fs (loop4): Ignoring removed bh option [ 121.927539][ T4712] EXT4-fs: error -4 creating inode table initialization thread [ 121.956226][ T4712] EXT4-fs (loop4): mount failed [ 122.205053][ T4722] loop3: detected capacity change from 0 to 1024 [ 122.478084][ T4723] ipt_CLUSTERIP: Please specify destination IP [ 123.351260][ T4722] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,journal_dev=0x0000000000000001,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 123.374915][ T4722] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.410195][ T4722] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.121: lblock 0 mapped to illegal pblock 0 (length 1) [ 123.534265][ T4722] EXT4-fs (loop3): Remounting filesystem read-only [ 123.550396][ T4722] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.121: lblock 0 mapped to illegal pblock 0 (length 1) [ 123.635196][ T4722] EXT4-fs (loop3): Remounting filesystem read-only [ 123.719869][ T4722] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 123.889928][ T4722] EXT4-fs (loop3): Remounting filesystem read-only [ 125.488974][ T4236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.859248][ T4236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.887145][ T4236] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.919146][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.947102][ T4236] usb 4-1: config 0 descriptor?? [ 126.001358][ T4236] pwc: Askey VC010 type 2 USB webcam detected. [ 126.219075][ T4236] pwc: send_video_command error -71 [ 126.224429][ T4236] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 126.399830][ T4236] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 126.422192][ T4236] usb 4-1: USB disconnect, device number 5 [ 126.684061][ T4770] loop4: detected capacity change from 0 to 256 [ 126.719004][ T1106] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.459478][ T1106] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.579560][ T1106] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 127.808943][ T1106] usb 2-1: can't read configurations, error -71 [ 127.878352][ T4778] loop4: detected capacity change from 0 to 512 [ 128.896471][ T4778] EXT4-fs (loop4): 1 truncate cleaned up [ 128.902369][ T4778] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 128.951044][ T4778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.140: bg 0: block 465: padding at end of block bitmap is not set [ 129.080933][ T4778] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 129.109003][ T4778] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.109003][ T4778] [ 129.118716][ T4778] EXT4-fs (loop4): Total free blocks count 0 [ 130.579315][ T4778] EXT4-fs (loop4): Free/Dirty block details [ 130.585289][ T4778] EXT4-fs (loop4): free_blocks=0 [ 130.693454][ T4778] EXT4-fs (loop4): dirty_blocks=2 [ 130.720231][ T4778] EXT4-fs (loop4): Block reservation details [ 130.804814][ T4778] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 130.954184][ T4250] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 130.993162][ T4250] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.993162][ T4250] [ 131.474896][ T4813] kvm: pic: non byte read [ 131.480636][ T4294] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.504030][ T4813] kvm: pic: non byte read [ 131.508508][ T4813] kvm: pic: non byte read [ 131.535447][ T4813] kvm: pic: non byte read [ 131.559249][ T4813] kvm: pic: non byte read [ 131.568292][ T4813] kvm: pic: non byte read [ 131.584080][ T4813] kvm: pic: non byte read [ 131.598815][ T4813] kvm: pic: non byte read [ 131.639192][ T4813] kvm: pic: non byte read [ 131.643691][ T4813] kvm: pic: non byte read [ 131.874639][ T4294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.895843][ T4294] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.948976][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.968394][ T4294] usb 5-1: config 0 descriptor?? [ 132.081155][ T4294] pwc: Askey VC010 type 2 USB webcam detected. [ 132.469011][ T4294] pwc: send_video_command error -71 [ 132.479591][ T4294] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 132.487205][ T4294] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 132.752458][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759047][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.794785][ T4815] chnl_net:caif_netlink_parms(): no params data found [ 132.809878][ T4294] usb 5-1: USB disconnect, device number 5 [ 133.127898][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.219326][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.287742][ T4815] device bridge_slave_0 entered promiscuous mode [ 133.325816][ T4834] loop4: detected capacity change from 0 to 256 [ 133.339207][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.365716][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.400021][ T4815] device bridge_slave_1 entered promiscuous mode [ 133.458705][ T4834] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 133.487912][ T4815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.553213][ T4815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.693966][ T4815] team0: Port device team_slave_0 added [ 133.752373][ T4841] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 133.841010][ T4842] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 133.929808][ T4815] team0: Port device team_slave_1 added [ 133.972354][ T4294] Bluetooth: hci5: command 0x0409 tx timeout [ 134.059163][ T1106] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 134.167336][ T4848] loop1: detected capacity change from 0 to 2048 [ 134.559613][ T1106] usb 5-1: config 0 has no interfaces? [ 134.729627][ T1106] usb 5-1: New USB device found, idVendor=17ef, idProduct=3098, bcdDevice=6c.41 [ 134.764635][ T1106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.836673][ T1106] usb 5-1: Product: syz [ 134.863739][ T4848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.873783][ T4848] UDF-fs: error (device loop1): udf_read_inode: (ino 1408) failed !bh [ 134.882129][ T4848] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 134.937538][ T1106] usb 5-1: Manufacturer: syz [ 134.951403][ T1106] usb 5-1: SerialNumber: syz [ 134.960547][ T1106] r8152-cfgselector 5-1: config 0 descriptor?? [ 135.023785][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.049054][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.171516][ T4815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.187672][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.195495][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.219692][ T1106] r8152-cfgselector 5-1: Unknown version 0x0000 [ 135.228895][ T4815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.253493][ T1106] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 135.439956][ T4815] device hsr_slave_0 entered promiscuous mode [ 135.529692][ T4815] device hsr_slave_1 entered promiscuous mode [ 135.557550][ T4815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.569470][ T4815] Cannot create hsr debugfs directory [ 137.191040][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 138.856126][ T4815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.901152][ T4815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.922934][ T4815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.945797][ T4815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.229489][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 139.250186][ T4815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.476468][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.543900][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.559849][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.596048][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.620592][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.656052][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.663349][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.690803][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.701893][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.721811][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.729100][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.751762][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.768444][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.802885][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.815500][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.840204][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.848461][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.913443][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.928154][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.937322][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.959364][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.040295][ T4348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.075704][ T1106] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.113435][ T4815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.139451][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.149694][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.169309][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.207234][ T4348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.309356][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 141.328989][ T1106] usb 4-1: Using ep0 maxpacket: 16 [ 141.337460][ T4348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.449282][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.460248][ T4348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.499356][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.519044][ T1106] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 141.528189][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.572870][ T1106] usb 4-1: config 0 descriptor?? [ 141.650186][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.669320][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.693309][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.179160][ T1106] wacom 0003:056A:0084.0003: unbalanced delimiter at end of report description [ 143.193343][ T1106] wacom 0003:056A:0084.0003: parse failed [ 143.199811][ T1106] wacom: probe of 0003:056A:0084.0003 failed with error -22 [ 143.409970][ T4294] usb 4-1: USB disconnect, device number 6 [ 144.999118][ T4294] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.099285][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.108237][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.253882][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.283901][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.372162][ T4815] device veth0_vlan entered promiscuous mode [ 145.408060][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.503909][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.519472][ T4974] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4975] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4974] [ 145.628581][ T4815] device veth1_vlan entered promiscuous mode [ 145.853884][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.863262][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.074209][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.087680][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.119807][ T4815] device veth0_macvtap entered promiscuous mode [ 146.152638][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.689618][ T4815] device veth1_macvtap entered promiscuous mode [ 146.735612][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.756606][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.774026][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.808620][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.864804][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.894653][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.939021][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.978248][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.016839][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.046796][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.078564][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.119062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.127963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.224285][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.266459][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.347972][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.363723][ T4995] input: syz0 as /devices/virtual/input/input5 [ 147.418054][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.472330][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.514077][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.559995][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.602127][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.644026][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.675200][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.707620][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.784311][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.828350][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.868308][ T4815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.905014][ T4815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.918496][ T4815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.936326][ T4815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.316345][ T5012] 9pnet: p9_client_clunk (5012): Trying to clunk with invalid fid [ 148.364731][ T5012] CPU: 1 PID: 5012 Comm: syz.1.201 Not tainted syzkaller #0 [ 148.372180][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.382307][ T5012] Call Trace: [ 148.385624][ T5012] [ 148.388580][ T5012] dump_stack_lvl+0x188/0x250 [ 148.393300][ T5012] ? show_regs_print_info+0x20/0x20 [ 148.398555][ T5012] ? load_image+0x400/0x400 [ 148.403096][ T5012] ? v9fs_fid_find+0x2d1/0x320 [ 148.407904][ T5012] p9_client_clunk+0x2b3/0x380 [ 148.412700][ T5012] v9fs_statfs+0x1b7/0x380 [ 148.417149][ T5012] ? slab_free_freelist_hook+0xea/0x170 [ 148.422777][ T5012] ? v9fs_drop_inode+0x130/0x130 [ 148.427760][ T5012] ? rcu_is_watching+0x11/0xa0 [ 148.432596][ T5012] user_statfs+0x1fc/0x5c0 [ 148.437058][ T5012] ? vfs_statfs+0x2c0/0x2c0 [ 148.441613][ T5012] __x64_sys_statfs+0x11d/0x260 [ 148.446499][ T5012] ? fd_statfs+0x390/0x390 [ 148.450950][ T5012] ? __context_tracking_exit+0x4c/0x80 [ 148.456461][ T5012] ? __lock_acquire+0x7d10/0x7d10 [ 148.461556][ T5012] ? lockdep_hardirqs_on+0x94/0x140 [ 148.466863][ T5012] do_syscall_64+0x4c/0xa0 [ 148.471290][ T5012] ? clear_bhb_loop+0x30/0x80 [ 148.475974][ T5012] ? clear_bhb_loop+0x30/0x80 [ 148.480661][ T5012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.486566][ T5012] RIP: 0033:0x7f43dddeae59 [ 148.490989][ T5012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.510598][ T5012] RSP: 002b:00007f43dc044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 148.519023][ T5012] RAX: ffffffffffffffda RBX: 00007f43de063fa0 RCX: 00007f43dddeae59 [ 148.527029][ T5012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 148.535008][ T5012] RBP: 00007f43dde80d6f R08: 0000000000000000 R09: 0000000000000000 [ 148.543023][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.551001][ T5012] R13: 00007f43de064038 R14: 00007f43de063fa0 R15: 00007ffc5b02e238 [ 148.559004][ T5012] [ 148.711366][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.740634][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.812957][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.873942][ T5025] loop4: detected capacity change from 0 to 512 [ 150.148220][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.170547][ T5025] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.189825][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.223130][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.242631][ T5025] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.205: inode has both inline data and extents flags [ 150.332659][ T5033] loop1: detected capacity change from 0 to 512 [ 150.372131][ T5025] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.205: couldn't read orphan inode 15 (err -117) [ 150.458775][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 150.474428][ T5033] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.569289][ T5033] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.763357][ T5033] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 152.210762][ T5025] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 152.259911][ T5042] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 152.837736][ T4348] device hsr_slave_0 left promiscuous mode [ 152.869901][ T4348] device hsr_slave_1 left promiscuous mode [ 152.876799][ T5076] loop1: detected capacity change from 0 to 512 [ 152.910518][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.936321][ T5078] loop4: detected capacity change from 0 to 512 [ 152.952922][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.974475][ T5076] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.215: bad orphan inode 15 [ 153.190374][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.197865][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.206686][ T5076] ext4_test_bit(bit=14, block=5) = 0 [ 153.215846][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 153.265808][ T5078] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.216: bad orphan inode 15 [ 153.278179][ T4348] device bridge_slave_1 left promiscuous mode [ 153.290845][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.349131][ T5031] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 153.383787][ T4348] device bridge_slave_0 left promiscuous mode [ 153.398076][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.412901][ T5078] ext4_test_bit(bit=14, block=5) = 0 [ 153.418267][ T5078] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 153.501789][ T4348] device veth1_macvtap left promiscuous mode [ 153.508350][ T4348] device veth0_macvtap left promiscuous mode [ 153.612616][ T4348] device veth1_vlan left promiscuous mode [ 153.618794][ T4348] device veth0_vlan left promiscuous mode [ 154.734996][ T4294] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 155.004434][ T5093] fuse: Bad value for 'fd' [ 155.449325][ T4294] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 155.489719][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.499302][ T4294] usb 2-1: Product: syz [ 155.503529][ T4294] usb 2-1: Manufacturer: syz [ 155.664866][ T4294] usb 2-1: SerialNumber: syz [ 156.594904][ T4294] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 156.639099][ T4294] usb 2-1: USB disconnect, device number 9 [ 156.724667][ T5104] loop1: detected capacity change from 0 to 16 [ 156.789648][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 156.807627][ T5104] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.891589][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 156.991483][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.122014][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.339184][ T26] audit: type=1800 audit(1779380662.843:5): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.224" name="/" dev="fuse" ino=4 res=0 errno=0 [ 158.555441][ T4348] bond0 (unregistering): Released all slaves [ 158.578310][ T5121] loop3: detected capacity change from 0 to 512 [ 159.479474][ T5121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 159.673738][ T5121] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.749059][ T5121] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 159.844609][ T5121] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 159.883479][ T5134] loop5: detected capacity change from 0 to 512 [ 159.909383][ T5121] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.228: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 159.949199][ T5134] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 159.959058][ T5134] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 159.959807][ T4294] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.968806][ T5134] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 159.995208][ T5121] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.228: couldn't read orphan inode 13 (err -117) [ 160.028762][ T5134] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 160.036887][ T5134] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 160.040460][ T5121] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 160.045373][ T5134] EXT4-fs (loop5): failed to initialize system zone (-117) [ 160.070950][ T5134] EXT4-fs (loop5): mount failed [ 160.449006][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 161.201971][ T4236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.337822][ T4294] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.919044][ T4236] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 161.940480][ T4236] usb 4-1: can't read configurations, error -71 [ 161.949110][ T4294] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 161.977811][ T4294] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 162.138176][ T5147] loop3: detected capacity change from 0 to 1024 [ 162.271028][ T4294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.308894][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.316966][ T4294] usb 2-1: Product: syz [ 162.383556][ T4294] usb 2-1: Manufacturer: syz [ 162.418977][ T4294] usb 2-1: SerialNumber: syz [ 162.465942][ T5147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.749185][ T4294] cdc_ncm 2-1:1.0: bind() failure [ 162.758304][ T4294] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 162.822118][ T4294] cdc_ncm 2-1:1.1: bind() failure [ 162.879302][ T4294] usb 2-1: USB disconnect, device number 10 [ 165.513387][ T5175] loop4: detected capacity change from 0 to 2048 [ 165.738679][ T5175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.789976][ T5175] UDF-fs: error (device loop4): udf_read_inode: (ino 1408) failed !bh [ 166.788967][ T5175] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 167.459025][ T4293] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.899190][ T4293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.919684][ T5204] netlink: 56 bytes leftover after parsing attributes in process `syz.5.235'. [ 167.949054][ T4293] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 167.979929][ T4293] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 168.050527][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.092231][ T4293] usb 5-1: config 0 descriptor?? [ 169.111740][ T5225] binder: 5223:5225 unknown command 1074553619 [ 169.117982][ T5225] binder: 5223:5225 ioctl c0306201 200000000040 returned -22 [ 169.321851][ T5233] binder: 5223:5233 unknown command 1074553620 [ 169.387052][ T5235] fuse: Bad value for 'fd' [ 169.479340][ T5233] binder: 5223:5233 ioctl c0306201 200000000640 returned -22 [ 171.058844][ T4293] Bluetooth: Can't get version to change to load ram patch err [ 171.066496][ T4293] Bluetooth: Loading sysconfig file failed [ 171.073164][ T4293] ath3k: probe of 5-1:0.0 failed with error -71 [ 171.093078][ T4293] usb 5-1: USB disconnect, device number 7 [ 171.313464][ T5244] loop1: detected capacity change from 0 to 2048 [ 171.366048][ T5247] loop3: detected capacity change from 0 to 512 [ 171.420669][ T5244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.462187][ T5244] UDF-fs: error (device loop1): udf_read_inode: (ino 1408) failed !bh [ 171.479185][ T5244] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 171.504946][ T5249] loop5: detected capacity change from 0 to 1024 [ 171.598191][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000077b2,grpquota,,errors=continue. Quota mode: writeback. [ 171.779560][ T5249] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.809171][ T5259] loop1: detected capacity change from 0 to 512 [ 171.819066][ T5247] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.198189][ T5259] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 172.209977][ T5259] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 172.219880][ T5259] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 172.306177][ T5259] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 172.314267][ T5259] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 172.322545][ T5259] EXT4-fs (loop1): failed to initialize system zone (-117) [ 172.329959][ T5259] EXT4-fs (loop1): mount failed [ 172.351042][ T5270] EXT4-fs (loop3): shut down requested (2) [ 173.591460][ T5278] loop1: detected capacity change from 0 to 512 [ 173.714882][ T5278] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 173.790933][ T5278] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.263: attempt to clear invalid blocks 1024 len 1 [ 173.821074][ T5285] loop3: detected capacity change from 0 to 512 [ 173.828287][ T5278] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.263: invalid indirect mapped block 1819239214 (level 0) [ 173.874428][ T5289] binder: 5288:5289 unknown command 1074553619 [ 173.881047][ T5278] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.263: invalid indirect mapped block 33554432 (level 2) [ 173.901042][ T5289] binder: 5288:5289 ioctl c0306201 200000000040 returned -22 [ 173.919694][ T5278] EXT4-fs (loop1): 1 truncate cleaned up [ 173.925436][ T5278] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,noblock_validity,nodelalloc,abort,max_batch_time=0x00000000000000e8,nodiscard,,errors=continue. Quota mode: none. [ 173.956185][ T5290] binder: 5288:5290 unknown command 1074553620 [ 174.013495][ T5290] binder: 5288:5290 ioctl c0306201 200000000640 returned -22 [ 174.026397][ T5285] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.262: iget: bad i_size value: 38620345925642 [ 174.124958][ T5285] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.262: couldn't read orphan inode 15 (err -117) [ 174.192576][ T5285] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 175.460332][ T5300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.262: bg 0: block 5: invalid block bitmap [ 175.538776][ T5302] loop5: detected capacity change from 0 to 1024 [ 175.577389][ T5300] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 356 with error 28 [ 175.637863][ T5302] EXT4-fs (loop5): Ignoring removed bh option [ 175.685749][ T5300] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.685749][ T5300] [ 175.752238][ T5302] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 175.808021][ T5300] EXT4-fs (loop3): Total free blocks count 0 [ 175.817140][ T5300] EXT4-fs (loop3): Free/Dirty block details [ 175.824290][ T5300] EXT4-fs (loop3): free_blocks=0 [ 175.831024][ T5300] EXT4-fs (loop3): dirty_blocks=356 [ 175.836370][ T5300] EXT4-fs (loop3): Block reservation details [ 175.842785][ T5300] EXT4-fs (loop3): i_reserved_data_blocks=356 [ 175.950672][ T26] audit: type=1800 audit(1779380680.453:6): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.269" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 175.984402][ T5310] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 176.260141][ T5315] loop3: detected capacity change from 0 to 512 [ 176.311011][ T5315] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.362034][ T5315] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 176.436790][ T5315] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 176.457813][ T5315] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 176.552997][ T5325] loop5: detected capacity change from 0 to 512 [ 176.571480][ T5315] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 176.579636][ T5315] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 176.588449][ T5315] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.679045][ T5325] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 176.713474][ T5315] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.270: bad orphan inode 13 [ 176.729012][ T5325] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 176.752672][ T5315] ext4_test_bit(bit=12, block=1) = 0 [ 176.758250][ T5315] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 176.773650][ T5325] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 176.844081][ T5325] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 176.938955][ T5325] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 176.966225][ T5325] EXT4-fs (loop5): failed to initialize system zone (-117) [ 176.979043][ T5325] EXT4-fs (loop5): mount failed [ 178.082085][ T5350] loop4: detected capacity change from 0 to 128 [ 179.849657][ T5350] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 179.922817][ T5350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.988889][ C0] sched: RT throttling activated [ 184.227232][ T5384] Invalid ELF header magic: != ELF [ 185.076619][ T5378] loop4: detected capacity change from 0 to 1024 [ 185.671169][ T5391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.287'. [ 185.699081][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 185.708458][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 185.784672][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 185.850170][ T5396] loop4: detected capacity change from 0 to 256 [ 185.925466][ T5396] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 186.036900][ T5396] exFAT-fs (loop4): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 1088, unilen : 257 > 255 [ 191.176566][ T5452] Invalid ELF header magic: != ELF [ 192.080665][ T1106] Bluetooth: hci2: command 0x0406 tx timeout [ 192.107422][ T1106] Bluetooth: hci1: command 0x0406 tx timeout [ 192.119072][ T1106] Bluetooth: hci3: command 0x0406 tx timeout [ 192.144380][ T1106] Bluetooth: hci4: command 0x0406 tx timeout [ 192.364256][ T5456] loop4: detected capacity change from 0 to 8 [ 192.480109][ T5456] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.497893][ T5456] SQUASHFS error: Failed to read block 0x9b: -5 [ 192.520081][ T5456] SQUASHFS error: Unable to read metadata cache entry [99] [ 192.559410][ T5456] SQUASHFS error: Unable to read inode 0x127 [ 194.903785][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.910206][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.667896][ T5500] loop3: detected capacity change from 0 to 256 [ 196.734436][ T5500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 196.968799][ T5504] 9pnet: p9_client_clunk (5504): Trying to clunk with invalid fid [ 196.985517][ T5502] attempt to access beyond end of device [ 196.985517][ T5502] loop3: rw=2049, want=34225520826, limit=256 [ 197.005364][ T5504] CPU: 0 PID: 5504 Comm: syz.5.314 Not tainted syzkaller #0 [ 197.012737][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.022940][ T5504] Call Trace: [ 197.026226][ T5504] [ 197.029163][ T5504] dump_stack_lvl+0x188/0x250 [ 197.033869][ T5504] ? show_regs_print_info+0x20/0x20 [ 197.039071][ T5504] ? load_image+0x400/0x400 [ 197.043586][ T5504] ? v9fs_fid_find+0x2d1/0x320 [ 197.048360][ T5504] p9_client_clunk+0x2b3/0x380 [ 197.053137][ T5504] v9fs_statfs+0x1b7/0x380 [ 197.057561][ T5504] ? slab_free_freelist_hook+0xea/0x170 [ 197.063111][ T5504] ? v9fs_drop_inode+0x130/0x130 [ 197.068055][ T5504] ? rcu_is_watching+0x11/0xa0 [ 197.072838][ T5504] user_statfs+0x1fc/0x5c0 [ 197.077274][ T5504] ? vfs_statfs+0x2c0/0x2c0 [ 197.081787][ T5504] __x64_sys_statfs+0x11d/0x260 [ 197.086677][ T5504] ? fd_statfs+0x390/0x390 [ 197.091132][ T5504] ? __context_tracking_exit+0x4c/0x80 [ 197.096603][ T5504] ? __lock_acquire+0x7d10/0x7d10 [ 197.101658][ T5504] ? lockdep_hardirqs_on+0x94/0x140 [ 197.106864][ T5504] do_syscall_64+0x4c/0xa0 [ 197.111284][ T5504] ? clear_bhb_loop+0x30/0x80 [ 197.115964][ T5504] ? clear_bhb_loop+0x30/0x80 [ 197.120642][ T5504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.126552][ T5504] RIP: 0033:0x7f1387461e59 [ 197.130997][ T5504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.150621][ T5504] RSP: 002b:00007f13856bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 197.159055][ T5504] RAX: ffffffffffffffda RBX: 00007f13876dafa0 RCX: 00007f1387461e59 [ 197.167034][ T5504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 197.175008][ T5504] RBP: 00007f13874f7d6f R08: 0000000000000000 R09: 0000000000000000 [ 197.182983][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.190986][ T5504] R13: 00007f13876db038 R14: 00007f13876dafa0 R15: 00007fff24e882f8 [ 197.198991][ T5504] [ 197.202078][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.217318][ T5502] Buffer I/O error on dev loop3, logical block 34225520825, lost async page write [ 197.243418][ T5502] attempt to access beyond end of device [ 197.243418][ T5502] loop3: rw=2049, want=34225520827, limit=256 [ 198.184956][ T5502] Buffer I/O error on dev loop3, logical block 34225520826, lost async page write [ 198.244672][ T5502] attempt to access beyond end of device [ 198.244672][ T5502] loop3: rw=2049, want=34225520828, limit=256 [ 198.344497][ T5502] Buffer I/O error on dev loop3, logical block 34225520827, lost async page write [ 198.555519][ T5524] loop1: detected capacity change from 0 to 1024 [ 198.816359][ T5520] loop5: detected capacity change from 0 to 2048 [ 198.923430][ T5520] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.983872][ T5520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.999130][ T5567] loop5: detected capacity change from 0 to 128 [ 203.439314][ T5575] fuse: Bad value for 'fd' [ 205.369254][ T4286] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 205.599451][ T5582] loop1: detected capacity change from 0 to 512 [ 205.609027][ T4286] usb 6-1: Using ep0 maxpacket: 32 [ 205.739121][ T4286] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.778336][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,inode_readahead_blks=0x0000000000010000,,errors=continue. Quota mode: writeback. [ 205.799206][ T5582] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.819028][ T4286] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 205.829008][ T4286] usb 6-1: can't read configurations, error -71 [ 205.838883][ T5582] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 206.238060][ T5605] xt_bpf: check failed: parse error [ 207.568631][ T5623] binder_alloc: 5622: binder_alloc_buf, no vma [ 209.732181][ T5656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 209.763396][ T5656] netlink: 48 bytes leftover after parsing attributes in process `syz.2.350'. [ 209.810810][ T26] audit: type=1326 audit(1779380714.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.350" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b7e1ace59 code=0x0 [ 214.914407][ T5722] fuse: Bad value for 'fd' [ 215.910471][ T5724] loop4: detected capacity change from 0 to 16 [ 215.957549][ T5726] loop3: detected capacity change from 0 to 512 [ 215.974442][ T5724] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 216.235724][ T5734] loop1: detected capacity change from 0 to 1024 [ 216.322046][ T5726] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.362: inode has both inline data and extents flags [ 216.396593][ T5726] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.362: couldn't read orphan inode 15 (err -117) [ 216.467715][ T5734] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.564120][ T5726] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.001721][ T5760] loop4: detected capacity change from 0 to 128 [ 217.024411][ T5759] loop1: detected capacity change from 0 to 1024 [ 218.178491][ T5759] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.232057][ T5759] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 218.318378][ T5759] EXT4-fs error (device loop1): __ext4_iget:4919: inode #8: block 1803188595: comm syz.1.368: invalid block [ 218.373902][ T5759] EXT4-fs (loop1): no journal found [ 218.409039][ T5759] EXT4-fs (loop1): can't get journal size [ 218.439180][ T5759] EXT4-fs error (device loop1): __ext4_iget:4919: inode #8: block 1803188595: comm syz.1.368: invalid block [ 218.591948][ T5759] EXT4-fs (loop1): failed to initialize system zone (-117) [ 218.599661][ T5759] EXT4-fs (loop1): mount failed [ 219.789320][ T5778] fuse: Bad value for 'fd' [ 222.595936][ T5799] loop3: detected capacity change from 0 to 1024 [ 222.794070][ T5799] EXT4-fs (loop3): Ignoring removed bh option [ 222.942953][ T5799] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 223.255090][ T26] audit: type=1800 audit(1779380727.753:8): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.375" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 223.277201][ T5799] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 224.456392][ T5846] fuse: Bad value for 'fd' [ 225.497137][ T5859] loop4: detected capacity change from 0 to 1024 [ 225.585466][ T5859] EXT4-fs (loop4): Ignoring removed nobh option [ 225.601044][ T5859] EXT4-fs (loop4): inline encryption not supported [ 225.731751][ T5859] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.752408][ T5859] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 225.752408][ T5859] [ 225.856637][ T5865] fuse: Bad value for 'fd' [ 227.451050][ T5874] loop1: detected capacity change from 0 to 512 [ 227.456484][ T5878] binder: BINDER_SET_CONTEXT_MGR already set [ 227.465768][ T5878] binder: 5877:5878 ioctl 4018620d 200000000480 returned -16 [ 227.521651][ T5878] binder: 5877:5878 unknown command 1074553619 [ 227.563300][ T5874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 227.609196][ T5882] binder: 5877:5882 unknown command 1074553620 [ 227.615433][ T5882] binder: 5877:5882 ioctl c0306201 200000000640 returned -22 [ 227.780319][ T5874] EXT4-fs (loop1): 1 truncate cleaned up [ 227.786047][ T5874] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.789575][ T5878] binder: 5877:5878 ioctl c0306201 200000000040 returned -22 [ 227.871671][ T5894] fuse: Bad value for 'fd' [ 230.190613][ T5874] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full [ 230.225996][ T5890] loop3: detected capacity change from 0 to 1024 [ 230.374672][ T5890] EXT4-fs (loop3): Ignoring removed bh option [ 230.631716][ T5890] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 230.752941][ T5916] loop4: detected capacity change from 0 to 512 [ 230.807132][ T5916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.822881][ T7] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 230.872535][ T5916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 230.883407][ T5916] System zones: 1-12 [ 230.898560][ T5916] EXT4-fs (loop4): 1 truncate cleaned up [ 230.913385][ T5916] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 232.999536][ T7] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 233.011021][ T7] usb 2-1: config 0 has no interface number 0 [ 233.176828][ T5937] loop3: detected capacity change from 0 to 256 [ 233.204811][ T7] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 233.350026][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.359209][ T7] usb 2-1: Product: syz [ 233.366076][ T7] usb 2-1: Manufacturer: syz [ 233.374130][ T7] usb 2-1: SerialNumber: syz [ 233.384175][ T7] usb 2-1: config 0 descriptor?? [ 233.453161][ T5941] fuse: Bad value for 'fd' [ 234.339173][ T7] asix: probe of 2-1:0.251 failed with error -71 [ 234.379139][ T7] usb 2-1: USB disconnect, device number 11 [ 234.599122][ T4279] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.906250][ T5960] loop1: detected capacity change from 0 to 1024 [ 234.946046][ T5960] EXT4-fs (loop1): Ignoring removed bh option [ 235.855997][ T4279] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.890101][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.566081][ T4279] usb 4-1: config 0 descriptor?? [ 236.990617][ T4279] usb 4-1: can't set config #0, error -71 [ 237.009520][ T4279] usb 4-1: USB disconnect, device number 10 [ 237.095808][ T5960] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 237.274086][ T5976] loop3: detected capacity change from 0 to 512 [ 237.287417][ T26] audit: type=1800 audit(1779380741.783:9): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 237.314127][ T5960] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 237.353039][ T5976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.398673][ T5976] EXT4-fs (loop3): 1 truncate cleaned up [ 237.407022][ T5976] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 237.792795][ T5987] syz.4.425 uses obsolete (PF_INET,SOCK_PACKET) [ 237.811639][ T5987] loop4: detected capacity change from 0 to 1024 [ 237.950351][ T5987] attempt to access beyond end of device [ 237.950351][ T5987] loop4: rw=0, want=393348, limit=1024 [ 238.010709][ T5987] attempt to access beyond end of device [ 238.010709][ T5987] loop4: rw=2049, want=393222, limit=1024 [ 238.054106][ T5987] Buffer I/O error on dev loop4, logical block 196610, lost async page write [ 238.084992][ T5987] attempt to access beyond end of device [ 238.084992][ T5987] loop4: rw=2049, want=393342, limit=1024 [ 238.288222][ T5992] loop3: detected capacity change from 0 to 2048 [ 238.355509][ T5992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.366439][ T5992] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh [ 238.374972][ T5992] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 238.669708][ T6003] fuse: Bad value for 'fd' [ 241.335883][ T6018] loop4: detected capacity change from 0 to 1024 [ 242.549135][ T6018] EXT4-fs (loop4): Ignoring removed bh option [ 242.690428][ T6033] loop5: detected capacity change from 0 to 256 [ 242.706107][ T6018] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 242.774656][ T26] audit: type=1800 audit(1779380747.273:10): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.432" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 242.778597][ T6018] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 243.220335][ T6036] loop4: detected capacity change from 0 to 2048 [ 243.234362][ T6036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.244214][ T6036] UDF-fs: error (device loop4): udf_read_inode: (ino 1408) failed !bh [ 243.252598][ T6036] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 244.495240][ T6047] loop5: detected capacity change from 0 to 2048 [ 244.634036][ T6047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.876577][ T6056] loop3: detected capacity change from 0 to 256 [ 250.557793][ T6089] loop4: detected capacity change from 0 to 2048 [ 250.684974][ T6089] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.949301][ T6098] 9pnet: p9_client_clunk (6098): Trying to clunk with invalid fid [ 250.957192][ T6098] CPU: 0 PID: 6098 Comm: syz.4.460 Not tainted syzkaller #0 [ 250.964529][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.974621][ T6098] Call Trace: [ 250.977930][ T6098] [ 250.980893][ T6098] dump_stack_lvl+0x188/0x250 [ 250.985620][ T6098] ? show_regs_print_info+0x20/0x20 [ 250.990857][ T6098] ? load_image+0x400/0x400 [ 250.995399][ T6098] ? v9fs_fid_find+0x2d1/0x320 [ 251.000210][ T6098] p9_client_clunk+0x2b3/0x380 [ 251.005038][ T6098] v9fs_statfs+0x1b7/0x380 [ 251.009510][ T6098] ? slab_free_freelist_hook+0xea/0x170 [ 251.015105][ T6098] ? v9fs_drop_inode+0x130/0x130 [ 251.020096][ T6098] ? rcu_is_watching+0x11/0xa0 [ 251.024933][ T6098] user_statfs+0x1fc/0x5c0 [ 251.029397][ T6098] ? vfs_statfs+0x2c0/0x2c0 [ 251.033953][ T6098] __x64_sys_statfs+0x11d/0x260 [ 251.038950][ T6098] ? fd_statfs+0x390/0x390 [ 251.043398][ T6098] ? __context_tracking_exit+0x4c/0x80 [ 251.048896][ T6098] ? __lock_acquire+0x7d10/0x7d10 [ 251.053983][ T6098] ? lockdep_hardirqs_on+0x94/0x140 [ 251.059224][ T6098] do_syscall_64+0x4c/0xa0 [ 251.063680][ T6098] ? clear_bhb_loop+0x30/0x80 [ 251.068398][ T6098] ? clear_bhb_loop+0x30/0x80 [ 251.073119][ T6098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.079058][ T6098] RIP: 0033:0x7f71f6c90e59 [ 251.083514][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.103157][ T6098] RSP: 002b:00007f71f4eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 251.111619][ T6098] RAX: ffffffffffffffda RBX: 00007f71f6f09fa0 RCX: 00007f71f6c90e59 [ 251.119642][ T6098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 251.127650][ T6098] RBP: 00007f71f6d26d6f R08: 0000000000000000 R09: 0000000000000000 [ 251.135663][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.143686][ T6098] R13: 00007f71f6f0a038 R14: 00007f71f6f09fa0 R15: 00007ffc9c56d608 [ 251.151719][ T6098] [ 256.030390][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.036752][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.324940][ T6122] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 257.439284][ T6122] Error parsing options; rc = [-22] [ 257.704384][ T6126] loop3: detected capacity change from 0 to 8192 [ 258.802151][ T4238] Bluetooth: hci5: command 0x0406 tx timeout [ 259.008417][ T6140] loop1: detected capacity change from 0 to 1024 [ 259.105923][ T6140] hfsplus: invalid length 32517 has been corrected to 255 [ 259.413174][ T4497] hfsplus: b-tree write err: -5, ino 25 [ 259.462043][ T4497] hfsplus: b-tree write err: -5, ino 4 [ 259.468050][ T4497] hfsplus: b-tree write err: -5, ino 2 [ 261.373912][ T6154] loop4: detected capacity change from 0 to 256 [ 261.458398][ T6154] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18227a4b, utbl_chksum : 0xe619d30d) [ 263.223463][ T6174] loop3: detected capacity change from 0 to 2048 [ 263.324001][ T6174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.693995][ T6179] loop4: detected capacity change from 0 to 256 [ 263.980941][ T6185] loop1: detected capacity change from 0 to 1024 [ 264.048764][ T6185] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.177078][ T6191] loop4: detected capacity change from 0 to 1024 [ 267.079445][ T6211] loop5: detected capacity change from 0 to 512 [ 267.292325][ T6211] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.394322][ T6211] EXT4-fs (loop5): 1 truncate cleaned up [ 267.414414][ T6211] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.351670][ T6222] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.492: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 269.380745][ T6225] loop4: detected capacity change from 0 to 512 [ 269.435377][ T6225] EXT4-fs (loop4): Unrecognized mount option "dioread_nolock.dont_appraise" or missing value [ 270.093853][ T6222] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.492: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 270.131630][ T6232] loop1: detected capacity change from 0 to 256 [ 270.248320][ T6232] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18227a4b, utbl_chksum : 0xe619d30d) [ 270.298903][ T1346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 270.559351][ T1346] usb 5-1: Using ep0 maxpacket: 32 [ 270.699115][ T1346] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 271.542288][ T1346] usb 5-1: config 0 has no interface number 0 [ 271.548473][ T1346] usb 5-1: config 0 interface 184 has no altsetting 0 [ 271.605637][ T6241] binder: 6240:6241 unknown command 1074553620 [ 271.670525][ T6241] binder: 6240:6241 ioctl c0306201 200000000640 returned -22 [ 271.719014][ T1346] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 271.728169][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.560948][ T6248] loop3: detected capacity change from 0 to 8 [ 272.662346][ T6248] SQUASHFS error: lzo decompression failed, data probably corrupt [ 272.670304][ T6248] SQUASHFS error: Failed to read block 0x91: -5 [ 272.676551][ T6248] SQUASHFS error: Unable to read metadata cache entry [8f] [ 272.683810][ T6248] SQUASHFS error: Unable to read inode 0x11f [ 272.706502][ T1346] usb 5-1: Product: syz [ 272.723138][ T1346] usb 5-1: Manufacturer: syz [ 272.736565][ T1346] usb 5-1: SerialNumber: syz [ 272.763976][ T1346] usb 5-1: config 0 descriptor?? [ 272.911529][ T1346] smsc75xx v1.0.0 [ 272.971073][ T6252] loop1: detected capacity change from 0 to 128 [ 273.177480][ T6256] loop3: detected capacity change from 0 to 128 [ 273.818961][ T1346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 273.834744][ T6252] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.839273][ T1346] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 274.322708][ T1346] usb 5-1: USB disconnect, device number 8 [ 274.351716][ T6252] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.902435][ T4357] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.599267][ T6295] loop5: detected capacity change from 0 to 2048 [ 279.615430][ T6297] loop1: detected capacity change from 0 to 512 [ 279.686919][ T6297] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 279.708768][ T6297] UDF-fs: Scanning with blocksize 512 failed [ 279.733089][ T6297] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 279.753479][ T6297] UDF-fs: Scanning with blocksize 1024 failed [ 279.862286][ T6297] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 279.881171][ T1346] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 279.909170][ T1346] Bluetooth: hci4: Injecting HCI hardware error event [ 279.921985][ T6297] UDF-fs: Scanning with blocksize 2048 failed [ 279.924857][ T6295] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 279.950909][ T4200] Bluetooth: hci4: hardware error 0x00 [ 279.974421][ T26] audit: type=1800 audit(1779380784.473:11): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.517" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 280.004399][ T6297] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 280.017113][ T6295] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 280.069448][ T6295] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 280.091519][ T6297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.119119][ T6295] EXT4-fs (loop5): This should not happen!! Data will be lost [ 280.119119][ T6295] [ 280.152348][ T6310] loop4: detected capacity change from 0 to 256 [ 280.156202][ T6295] EXT4-fs (loop5): Total free blocks count 0 [ 280.192471][ T6295] EXT4-fs (loop5): Free/Dirty block details [ 280.276777][ T6295] EXT4-fs (loop5): free_blocks=2415919104 [ 280.286934][ T6295] EXT4-fs (loop5): dirty_blocks=16 [ 280.303193][ T6295] EXT4-fs (loop5): Block reservation details [ 280.318696][ T6295] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 280.367663][ T6310] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18227a4b, utbl_chksum : 0xe619d30d) [ 280.421909][ T6317] binder: 6316:6317 unknown command 1074553620 [ 280.428142][ T6317] binder: 6316:6317 ioctl c0306201 200000000640 returned -22 [ 280.473332][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 280.507976][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 280.507976][ T9] [ 280.535474][ T6315] loop3: detected capacity change from 0 to 2048 [ 281.618015][ T4180] loop3: p1 < > p4 [ 281.649869][ T6337] 9pnet: p9_client_clunk (6337): Trying to clunk with invalid fid [ 281.664685][ T4180] loop3: p4 size 8388608 extends beyond EOD, truncated [ 281.690691][ T6337] CPU: 0 PID: 6337 Comm: syz.1.531 Not tainted syzkaller #0 [ 281.698061][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.708179][ T6337] Call Trace: [ 281.711500][ T6337] [ 281.714466][ T6337] dump_stack_lvl+0x188/0x250 [ 281.719254][ T6337] ? show_regs_print_info+0x20/0x20 [ 281.724501][ T6337] ? load_image+0x400/0x400 [ 281.729063][ T6337] ? v9fs_fid_find+0x2d1/0x320 [ 281.733881][ T6337] p9_client_clunk+0x2b3/0x380 [ 281.738690][ T6337] v9fs_statfs+0x1b7/0x380 [ 281.743154][ T6337] ? slab_free_freelist_hook+0xea/0x170 [ 281.748751][ T6337] ? v9fs_drop_inode+0x130/0x130 [ 281.753752][ T6337] ? rcu_is_watching+0x11/0xa0 [ 281.758569][ T6337] user_statfs+0x1fc/0x5c0 [ 281.763037][ T6337] ? vfs_statfs+0x2c0/0x2c0 [ 281.767597][ T6337] __x64_sys_statfs+0x11d/0x260 [ 281.772492][ T6337] ? fd_statfs+0x390/0x390 [ 281.776958][ T6337] ? __context_tracking_exit+0x4c/0x80 [ 281.782564][ T6337] ? __lock_acquire+0x7d10/0x7d10 [ 281.787657][ T6337] ? lockdep_hardirqs_on+0x94/0x140 [ 281.792911][ T6337] do_syscall_64+0x4c/0xa0 [ 281.797373][ T6337] ? clear_bhb_loop+0x30/0x80 [ 281.802099][ T6337] ? clear_bhb_loop+0x30/0x80 [ 281.806819][ T6337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.812758][ T6337] RIP: 0033:0x7f43dddeae59 [ 281.817205][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.836825][ T6337] RSP: 002b:00007f43dc044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 281.845339][ T6337] RAX: ffffffffffffffda RBX: 00007f43de063fa0 RCX: 00007f43dddeae59 [ 281.853319][ T6337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 281.861297][ T6337] RBP: 00007f43dde80d6f R08: 0000000000000000 R09: 0000000000000000 [ 281.869298][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.877295][ T6337] R13: 00007f43de064038 R14: 00007f43de063fa0 R15: 00007ffc5b02e238 [ 281.885322][ T6337] [ 281.929663][ T6351] loop5: detected capacity change from 0 to 8 [ 281.986528][ T6315] loop3: p1 < > p4 [ 282.011014][ T6315] loop3: p4 size 8388608 extends beyond EOD, truncated [ 282.132281][ T6351] SQUASHFS error: zlib decompression failed, data probably corrupt [ 282.180126][ T6351] SQUASHFS error: Failed to read block 0x4de: -5 [ 282.194547][ T6351] SQUASHFS error: Failed to read block 0x4e2: -5 [ 282.219640][ T6351] SQUASHFS error: Failed to read block 0x9ca: -5 [ 282.239425][ T6351] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 283.086375][ T6351] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 283.098979][ T6351] SQUASHFS error: Failed to read block 0x535f2: -5 [ 283.113137][ T26] audit: type=1800 audit(1779380787.613:12): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.534" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 283.266227][ T1346] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 284.182956][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 284.210786][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 284.279014][ T1346] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 284.406664][ T1346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 4 [ 284.761806][ T1346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1023 [ 285.031634][ T1346] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 285.202076][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.236798][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 285.248942][ T1346] usb 5-1: Product: syz [ 285.253406][ T1346] usb 5-1: Manufacturer: syz [ 285.258044][ T1346] usb 5-1: SerialNumber: syz [ 285.265751][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 285.342900][ T6384] loop4: detected capacity change from 0 to 256 [ 285.381807][ T1346] usb 5-1: config 0 descriptor?? [ 285.414656][ T1346] usb 5-1: can't set config #0, error -71 [ 285.431147][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 285.447107][ T1346] usb 5-1: USB disconnect, device number 9 [ 285.463670][ T6384] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.494518][ T6384] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 285.570367][ T6386] [ 285.572780][ T6386] ============================= [ 285.577653][ T6386] WARNING: suspicious RCU usage [ 285.594087][ T6384] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 285.639090][ T6386] syzkaller #0 Not tainted [ 285.650981][ T6386] ----------------------------- [ 285.689013][ T6386] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 285.749035][ T6386] [ 285.749035][ T6386] other info that might help us debug this: [ 285.749035][ T6386] [ 285.795770][ T6386] [ 285.795770][ T6386] rcu_scheduler_active = 2, debug_locks = 1 [ 285.842555][ T6386] 1 lock held by syz.3.543/6386: [ 285.869087][ T6386] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 285.899076][ T6386] [ 285.899076][ T6386] stack backtrace: [ 285.906694][ T6386] CPU: 0 PID: 6386 Comm: syz.3.543 Not tainted syzkaller #0 [ 285.914041][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.924139][ T6386] Call Trace: [ 285.927453][ T6386] [ 285.930418][ T6386] dump_stack_lvl+0x188/0x250 [ 285.935133][ T6386] ? load_image+0x400/0x400 [ 285.939671][ T6386] ? show_regs_print_info+0x20/0x20 [ 285.944913][ T6386] ? lockdep_rcu_suspicious+0x110/0x180 [ 285.950498][ T6386] ? local_bh_enable+0x20/0x20 [ 285.955312][ T6386] rhltable_lookup+0x7a9/0x7c0 [ 285.960131][ T6386] ? local_bh_enable+0x20/0x20 [ 285.964944][ T6386] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 285.970971][ T6386] ? release_firmware_map_entry+0x190/0x190 [ 285.976906][ T6386] ? lock_chain_count+0x20/0x20 [ 285.981780][ T6386] ? mr_mfc_find_parent+0x190/0x190 [ 285.986991][ T6386] ? local_bh_enable+0x20/0x20 [ 285.991759][ T6386] ? preempt_schedule+0xbc/0xd0 [ 285.996617][ T6386] ? ipmr_mfc_add+0x212d/0x2d40 [ 286.001498][ T6386] ? preempt_schedule+0xbc/0xd0 [ 286.006367][ T6386] ? schedule_preempt_disabled+0x20/0x20 [ 286.012019][ T6386] ? lock_chain_count+0x20/0x20 [ 286.016878][ T6386] mr_mfc_find_any_parent+0xb6/0x1e0 [ 286.022178][ T6386] ? local_bh_enable+0x20/0x20 [ 286.026954][ T6386] ip_mr_forward+0x24c/0xf90 [ 286.031577][ T6386] ipmr_mfc_add+0x23cc/0x2d40 [ 286.036295][ T6386] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 286.041244][ T6386] ? __lock_acquire+0x7d10/0x7d10 [ 286.046312][ T6386] ip_mroute_setsockopt+0xeaf/0x1250 [ 286.051628][ T6386] ? ipmr_rule_default+0x70/0x70 [ 286.056670][ T6386] ? __might_sleep+0xf0/0xf0 [ 286.061265][ T6386] ip_setsockopt+0x568/0x3130 [ 286.065956][ T6386] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 286.071334][ T6386] ? aa_sk_perm+0x7dc/0x910 [ 286.075874][ T6386] ? aa_af_perm+0x340/0x340 [ 286.080384][ T6386] ? __fget_files+0x40f/0x480 [ 286.085073][ T6386] ? aa_sock_opt_perm+0x74/0x100 [ 286.090021][ T6386] ? sock_common_setsockopt+0x32/0xb0 [ 286.095453][ T6386] ? raw_setsockopt+0xc5/0x180 [ 286.100233][ T6386] ? sock_common_recvmsg+0x1c0/0x1c0 [ 286.105547][ T6386] __sys_setsockopt+0x2bf/0x3d0 [ 286.110427][ T6386] __x64_sys_setsockopt+0xb1/0xc0 [ 286.115487][ T6386] do_syscall_64+0x4c/0xa0 [ 286.119905][ T6386] ? clear_bhb_loop+0x30/0x80 [ 286.124589][ T6386] ? clear_bhb_loop+0x30/0x80 [ 286.129274][ T6386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.135169][ T6386] RIP: 0033:0x7f3a28324e59 [ 286.139592][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.159204][ T6386] RSP: 002b:00007f3a2657e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.167626][ T6386] RAX: ffffffffffffffda RBX: 00007f3a2859dfa0 RCX: 00007f3a28324e59 [ 286.175610][ T6386] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 286.183588][ T6386] RBP: 00007f3a283bad6f R08: 000000000000003c R09: 0000000000000000 [ 286.191600][ T6386] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 286.199585][ T6386] R13: 00007f3a2859e038 R14: 00007f3a2859dfa0 R15: 00007fff4a3437d8 [ 286.207577][ T6386] [ 286.259105][ T6386] [ 286.261619][ T6386] ============================= [ 286.291420][ T6386] WARNING: suspicious RCU usage [ 286.321748][ T6386] syzkaller #0 Not tainted [ 286.337226][ T6386] ----------------------------- [ 286.353284][ T6386] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 286.376900][ T6386] [ 286.376900][ T6386] other info that might help us debug this: [ 286.376900][ T6386] [ 286.403023][ T6386] [ 286.403023][ T6386] rcu_scheduler_active = 2, debug_locks = 1 [ 286.422649][ T6386] 1 lock held by syz.3.543/6386: [ 286.437584][ T6386] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 286.471876][ T6386] [ 286.471876][ T6386] stack backtrace: [ 286.487014][ T6386] CPU: 1 PID: 6386 Comm: syz.3.543 Not tainted syzkaller #0 [ 286.494377][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.504485][ T6386] Call Trace: [ 286.507797][ T6386] [ 286.510767][ T6386] dump_stack_lvl+0x188/0x250 [ 286.515499][ T6386] ? load_image+0x400/0x400 [ 286.520041][ T6386] ? show_regs_print_info+0x20/0x20 [ 286.525371][ T6386] ? lockdep_rcu_suspicious+0x110/0x180 [ 286.530963][ T6386] ? local_bh_enable+0x20/0x20 [ 286.535774][ T6386] rhltable_lookup+0x52a/0x7c0 [ 286.540581][ T6386] ? local_bh_enable+0x20/0x20 [ 286.545494][ T6386] ? mr_mfc_find_parent+0x190/0x190 [ 286.550737][ T6386] ? local_bh_enable+0x20/0x20 [ 286.555537][ T6386] ? preempt_schedule+0xbc/0xd0 [ 286.560432][ T6386] ? ipmr_mfc_add+0x212d/0x2d40 [ 286.565326][ T6386] ? preempt_schedule+0xbc/0xd0 [ 286.570223][ T6386] ? schedule_preempt_disabled+0x20/0x20 [ 286.575892][ T6386] ? lock_chain_count+0x20/0x20 [ 286.580789][ T6386] mr_mfc_find_any_parent+0xb6/0x1e0 [ 286.586129][ T6386] ? local_bh_enable+0x20/0x20 [ 286.590941][ T6386] ip_mr_forward+0x24c/0xf90 [ 286.595596][ T6386] ipmr_mfc_add+0x23cc/0x2d40 [ 286.600335][ T6386] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 286.605316][ T6386] ? __lock_acquire+0x7d10/0x7d10 [ 286.610405][ T6386] ip_mroute_setsockopt+0xeaf/0x1250 [ 286.615735][ T6386] ? ipmr_rule_default+0x70/0x70 [ 286.620743][ T6386] ? __might_sleep+0xf0/0xf0 [ 286.625371][ T6386] ip_setsockopt+0x568/0x3130 [ 286.630099][ T6386] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 286.635506][ T6386] ? aa_sk_perm+0x7dc/0x910 [ 286.640048][ T6386] ? aa_af_perm+0x340/0x340 [ 286.644582][ T6386] ? __fget_files+0x40f/0x480 [ 286.649298][ T6386] ? aa_sock_opt_perm+0x74/0x100 [ 286.654275][ T6386] ? sock_common_setsockopt+0x32/0xb0 [ 286.659683][ T6386] ? raw_setsockopt+0xc5/0x180 [ 286.664490][ T6386] ? sock_common_recvmsg+0x1c0/0x1c0 [ 286.669815][ T6386] __sys_setsockopt+0x2bf/0x3d0 [ 286.674710][ T6386] __x64_sys_setsockopt+0xb1/0xc0 [ 286.679781][ T6386] do_syscall_64+0x4c/0xa0 [ 286.684231][ T6386] ? clear_bhb_loop+0x30/0x80 [ 286.688952][ T6386] ? clear_bhb_loop+0x30/0x80 [ 286.693664][ T6386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.699600][ T6386] RIP: 0033:0x7f3a28324e59 [ 286.704042][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.723688][ T6386] RSP: 002b:00007f3a2657e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.732153][ T6386] RAX: ffffffffffffffda RBX: 00007f3a2859dfa0 RCX: 00007f3a28324e59 [ 286.740163][ T6386] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 286.748172][ T6386] RBP: 00007f3a283bad6f R08: 000000000000003c R09: 0000000000000000 [ 286.756175][ T6386] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 286.764185][ T6386] R13: 00007f3a2859e038 R14: 00007f3a2859dfa0 R15: 00007fff4a3437d8 [ 286.772210][ T6386] [ 287.658363][ T6386] [ 287.668408][ T6386] ============================= [ 287.690386][ T6386] WARNING: suspicious RCU usage [ 287.695303][ T6386] syzkaller #0 Not tainted [ 287.700137][ T6386] ----------------------------- [ 287.709910][ T6386] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 287.718712][ T6386] [ 287.718712][ T6386] other info that might help us debug this: [ 287.718712][ T6386] [ 287.730680][ T6386] [ 287.730680][ T6386] rcu_scheduler_active = 2, debug_locks = 1 [ 287.739168][ T6386] 1 lock held by syz.3.543/6386: [ 287.744176][ T6386] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 287.755646][ T6386] [ 287.755646][ T6386] stack backtrace: [ 287.762105][ T6386] CPU: 0 PID: 6386 Comm: syz.3.543 Not tainted syzkaller #0 [ 287.769441][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.779543][ T6386] Call Trace: [ 287.782858][ T6386] [ 287.785826][ T6386] dump_stack_lvl+0x188/0x250 [ 287.790546][ T6386] ? load_image+0x400/0x400 [ 287.795092][ T6386] ? show_regs_print_info+0x20/0x20 [ 287.800349][ T6386] ? lockdep_rcu_suspicious+0x110/0x180 [ 287.805946][ T6386] ? local_bh_enable+0x20/0x20 [ 287.810790][ T6386] rhltable_lookup+0x61e/0x7c0 [ 287.815620][ T6386] ? local_bh_enable+0x20/0x20 [ 287.820441][ T6386] ? mr_mfc_find_parent+0x190/0x190 [ 287.825697][ T6386] ? local_bh_enable+0x20/0x20 [ 287.830513][ T6386] ? preempt_schedule+0xbc/0xd0 [ 287.835413][ T6386] ? ipmr_mfc_add+0x212d/0x2d40 [ 287.840316][ T6386] ? preempt_schedule+0xbc/0xd0 [ 287.845208][ T6386] ? schedule_preempt_disabled+0x20/0x20 [ 287.850884][ T6386] ? lock_chain_count+0x20/0x20 [ 287.855792][ T6386] mr_mfc_find_any_parent+0xb6/0x1e0 [ 287.861123][ T6386] ? local_bh_enable+0x20/0x20 [ 287.865949][ T6386] ip_mr_forward+0x24c/0xf90 [ 287.870595][ T6386] ipmr_mfc_add+0x23cc/0x2d40 [ 287.875331][ T6386] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 287.880324][ T6386] ? __lock_acquire+0x7d10/0x7d10 [ 287.885417][ T6386] ip_mroute_setsockopt+0xeaf/0x1250 [ 287.890758][ T6386] ? ipmr_rule_default+0x70/0x70 [ 287.895754][ T6386] ? __might_sleep+0xf0/0xf0 [ 287.900384][ T6386] ip_setsockopt+0x568/0x3130 [ 287.905116][ T6386] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 287.910528][ T6386] ? aa_sk_perm+0x7dc/0x910 [ 287.915076][ T6386] ? aa_af_perm+0x340/0x340 [ 287.919618][ T6386] ? __fget_files+0x40f/0x480 [ 287.924340][ T6386] ? aa_sock_opt_perm+0x74/0x100 [ 287.929322][ T6386] ? sock_common_setsockopt+0x32/0xb0 [ 287.934735][ T6386] ? raw_setsockopt+0xc5/0x180 [ 287.939569][ T6386] ? sock_common_recvmsg+0x1c0/0x1c0 [ 287.944909][ T6386] __sys_setsockopt+0x2bf/0x3d0 [ 287.949808][ T6386] __x64_sys_setsockopt+0xb1/0xc0 [ 287.954882][ T6386] do_syscall_64+0x4c/0xa0 [ 287.959362][ T6386] ? clear_bhb_loop+0x30/0x80 [ 287.964079][ T6386] ? clear_bhb_loop+0x30/0x80 [ 287.968802][ T6386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.974737][ T6386] RIP: 0033:0x7f3a28324e59 [ 287.979192][ T6386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.998930][ T6386] RSP: 002b:00007f3a2657e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.007384][ T6386] RAX: ffffffffffffffda RBX: 00007f3a2859dfa0 RCX: 00007f3a28324e59 [ 288.015407][ T6386] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 288.023429][ T6386] RBP: 00007f3a283bad6f R08: 000000000000003c R09: 0000000000000000 [ 288.031445][ T6386] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 288.039459][ T6386] R13: 00007f3a2859e038 R14: 00007f3a2859dfa0 R15: 00007fff4a3437d8 [ 288.047492][ T6386]