last executing test programs: 5m42.958156014s ago: executing program 1 (id=2): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2ea, &(0x7f0000000700)="$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") setresuid(0x0, 0xee01, 0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r0, 0x0, 0x0) 5m42.69689353s ago: executing program 1 (id=6): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) 5m41.631839215s ago: executing program 1 (id=7): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@noinline_dentry}, {@alloc_mode_def}, {@six_active_logs}, {@quota}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 5m37.896442514s ago: executing program 1 (id=15): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000200)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 5m35.728337138s ago: executing program 1 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 5m33.889011681s ago: executing program 1 (id=24): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 5m18.668318476s ago: executing program 32 (id=24): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 12.625988577s ago: executing program 5 (id=941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) connect$unix(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f002) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 10.455814273s ago: executing program 5 (id=947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="13", 0x1}], 0x1}}], 0x1, 0x20004840) 9.108426122s ago: executing program 0 (id=951): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0xb43d, 0x0, 0x7, 0x11f}, &(0x7f0000000440)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0xc, 0x0, @fd=r1, 0x0, 0x0, 0x54c, 0x8, 0x1, {0x0, 0x0, r2}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.728291773s ago: executing program 4 (id=954): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x28}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xffff, 0x100000001, 0x4}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000200)={0x0, 0x0}) 7.198740787s ago: executing program 3 (id=956): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x300, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 7.188520018s ago: executing program 5 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) 7.059060569s ago: executing program 4 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x12040, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 6.963983406s ago: executing program 2 (id=959): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 5.536486512s ago: executing program 5 (id=960): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x10, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pwritev(r2, 0x0, 0x0, 0x4, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x64, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x8c0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv6_newroute={0x28, 0x18, 0x1, 0x70bd2a, 0x21dfdbfc, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x2, 0xc8, 0x1, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x1a, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c0d0}, 0x40c4) 5.012440474s ago: executing program 3 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) 4.960974528s ago: executing program 2 (id=962): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000500)={@loopback, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1804"], 0x18}}], 0x1, 0x20000844) 4.923152991s ago: executing program 0 (id=963): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) close(r3) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0) listen(r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.604467147s ago: executing program 2 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x300, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0x103, 0x193, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d55", 0x2, 0x0, 0x10000}, 0x50) 4.542596872s ago: executing program 2 (id=965): unshare(0x24020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000540)) 2.96016768s ago: executing program 4 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 2.837293291s ago: executing program 0 (id=967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="13", 0x1}], 0x1}}], 0x1, 0x20004840) 2.836716751s ago: executing program 5 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x12040, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.805113693s ago: executing program 2 (id=969): sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) write$char_usb(r3, &(0x7f0000000040), 0x0) 2.804446803s ago: executing program 3 (id=970): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 2.496251298s ago: executing program 3 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) 1.259198658s ago: executing program 0 (id=972): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='jfs\x00', 0x1000040, 0x0) 1.24686303s ago: executing program 5 (id=973): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0xb43d, 0x0, 0x7, 0x11f}, &(0x7f0000000440)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0xc, 0x0, @fd=r1, 0x0, 0x0, 0x54c, 0x8, 0x1, {0x0, 0x0, r2}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 450.559794ms ago: executing program 4 (id=974): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r1, 0x106, 0x66a, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x20001, 0x140) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000002000000000000000000024000300a0cb879a47f5bc7a0000003fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) 445.307614ms ago: executing program 3 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) socket$nl_netfilter(0x10, 0x3, 0xc) 324.252654ms ago: executing program 2 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x12040, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 232.561572ms ago: executing program 4 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x11, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x8a, &(0x7f00000001c0)=""/138, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2}, 0x94) 188.855855ms ago: executing program 0 (id=978): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 150.883118ms ago: executing program 3 (id=979): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x10, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) pwritev(r2, 0x0, 0x0, 0x4, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x64, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x8c0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv6_newroute={0x28, 0x18, 0x1, 0x70bd2a, 0x21dfdbfc, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x2, 0xc8, 0x1, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x1a, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c0d0}, 0x40c4) 64.101035ms ago: executing program 4 (id=980): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 0s ago: executing program 0 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.257927][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.265625][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.274379][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.283918][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.293182][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.300358][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.308517][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.318710][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.327881][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.337194][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.346211][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.353434][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.362737][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.371921][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.403607][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.415252][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.427357][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.434933][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.444274][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.453458][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.462926][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.473215][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.508845][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.525777][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.537577][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.546806][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.556742][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.567214][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.577860][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.587066][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.619098][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.627970][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.638698][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.649808][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.660854][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.670341][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.679304][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.688712][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.698101][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.707249][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.716000][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.743115][ T4183] device veth0_vlan entered promiscuous mode [ 72.753230][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.763698][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.775145][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.787097][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.799407][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.812994][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.849646][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.868047][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.886432][ T4183] device veth1_vlan entered promiscuous mode [ 72.900479][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.909717][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.919569][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.944239][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.986217][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.015748][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.031780][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.064404][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.081828][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.092448][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.101995][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.112463][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.151796][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.159992][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.177924][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.208112][ T4183] device veth0_macvtap entered promiscuous mode [ 73.231255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.251171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.277036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.298237][ T4183] device veth1_macvtap entered promiscuous mode [ 73.343153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.368412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.390874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.422110][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.437142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.449646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.459217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.468853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.486994][ T4189] device veth0_vlan entered promiscuous mode [ 73.499422][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.512740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.525398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.537881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.548271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.558786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.568685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.583376][ T4189] device veth1_vlan entered promiscuous mode [ 73.594163][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.617598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.627477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.638959][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.655294][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.665176][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.698038][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.747804][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.762815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.773128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.783228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.795363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.867782][ T4182] device veth0_vlan entered promiscuous mode [ 73.893805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.910229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.923675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.932207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.942726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.952479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.962592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.971395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.979763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.989024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.004110][ T4191] device veth0_vlan entered promiscuous mode [ 74.018551][ T4182] device veth1_vlan entered promiscuous mode [ 74.045908][ T4191] device veth1_vlan entered promiscuous mode [ 74.065382][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.074911][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.084767][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.096007][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.104764][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.114860][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.126665][ T4189] device veth0_macvtap entered promiscuous mode [ 74.151156][ T4247] Bluetooth: hci4: command 0x040f tx timeout [ 74.157867][ T4247] Bluetooth: hci3: command 0x040f tx timeout [ 74.164695][ T4247] Bluetooth: hci2: command 0x040f tx timeout [ 74.177219][ T4247] Bluetooth: hci1: command 0x040f tx timeout [ 74.180263][ T4189] device veth1_macvtap entered promiscuous mode [ 74.208070][ T4191] device veth0_macvtap entered promiscuous mode [ 74.227486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.236337][ T4247] Bluetooth: hci0: command 0x040f tx timeout [ 74.240254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.254143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.263359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.273554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.283500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.303607][ T4194] device veth0_vlan entered promiscuous mode [ 74.315194][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.325182][ T4191] device veth1_macvtap entered promiscuous mode [ 74.325248][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.347942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.357763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.368299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.376615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.385146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.419762][ T4182] device veth0_macvtap entered promiscuous mode [ 74.436528][ T4194] device veth1_vlan entered promiscuous mode [ 74.446456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.459163][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.463481][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.479606][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.488951][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.498850][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.508776][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.517174][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.529884][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.542825][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.557185][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.582391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.592990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.604914][ T4182] device veth1_macvtap entered promiscuous mode [ 74.625664][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.638648][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.650581][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.662344][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.675751][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.691345][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.703730][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.724326][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.754582][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.766601][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.777859][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.789657][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.802626][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.815749][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.828023][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.837146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.846945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.856591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.867558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.878774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.889069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.898386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.907402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.918807][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.929957][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.941010][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.954003][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.965775][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.978099][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987504][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.997788][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.006992][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052016][ T4194] device veth0_macvtap entered promiscuous mode [ 75.071541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.082661][ T4298] loop1: detected capacity change from 0 to 64 [ 75.097106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.121822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.135920][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.147268][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.156729][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.167068][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.181632][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.228854][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.248880][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.262077][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.277248][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.291123][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.304386][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.326658][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.336712][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.349289][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.361702][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.373442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.383292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.393614][ T4194] device veth1_macvtap entered promiscuous mode [ 75.555491][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.569975][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.580873][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.586890][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.592735][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.610819][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.622020][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.634468][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.646133][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.664754][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.681971][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.705680][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.739342][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.765720][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.781821][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.802338][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.814499][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.825700][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.839380][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.864268][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.877076][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.893783][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.908084][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.921863][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.943340][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.955732][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.984208][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.999766][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.011321][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.021418][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.045688][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.060337][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.100243][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.132442][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.143337][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.180353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.182312][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.202866][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.237266][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.248152][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 76.263676][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 76.271725][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.276715][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 76.292368][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 76.306729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.317228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 76.329806][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 76.365443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.398747][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.429602][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.466554][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.489336][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.518970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.567569][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.581214][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.587524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.663786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 76.710856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.801440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.929305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.030816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.236443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.265989][ T4310] loop6: detected capacity change from 0 to 7 [ 77.339293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.350562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.360701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.476340][ T4200] Dev loop6: unable to read RDB block 7 [ 77.534225][ T4200] loop6: unable to read partition table [ 77.631285][ T4200] loop6: partition table beyond EOD, truncated [ 77.645210][ T4310] Dev loop6: unable to read RDB block 7 [ 77.690785][ T4310] loop6: unable to read partition table [ 77.697212][ T4310] loop6: partition table beyond EOD, truncated [ 77.759157][ T4310] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.991206][ T4322] loop4: detected capacity change from 0 to 32768 [ 78.410749][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.740512][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 78.870903][ T1108] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.890338][ T1108] usb 4-1: config 0 has no interface number 0 [ 79.115062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.164071][ T1108] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 79.699958][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.728781][ T1108] usb 4-1: Product: syz [ 79.738522][ T1108] usb 4-1: Manufacturer: syz [ 79.743875][ T1108] usb 4-1: SerialNumber: syz [ 79.807317][ T1108] usb 4-1: config 0 descriptor?? [ 79.888009][ T1108] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 80.282176][ T4345] loop2: detected capacity change from 0 to 2048 [ 80.904917][ T1108] gspca_spca1528: reg_w err -110 [ 80.940147][ T1108] spca1528: probe of 4-1:0.1 failed with error -110 [ 81.098700][ T1108] usb 4-1: USB disconnect, device number 2 [ 81.098717][ T4345] NILFS (loop2): invalid segment: Magic number mismatch [ 81.180817][ T4345] NILFS (loop2): trying rollback from an earlier position [ 82.335891][ T4345] NILFS (loop2): recovery complete [ 82.378860][ T4360] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.618346][ T4376] loop4: detected capacity change from 0 to 4096 [ 84.935157][ T4376] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 85.418547][ T4315] ntfs3: loop4: ntfs3_write_inode r=9 failed, -22. [ 85.436465][ T4182] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 85.462752][ T4182] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 86.989454][ T4410] loop4: detected capacity change from 0 to 32768 [ 87.006867][ T4411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.019451][ T4411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 87.605704][ T7] cfg80211: failed to load regulatory.db [ 87.765053][ T4392] loop3: detected capacity change from 0 to 32768 [ 87.881469][ T4410] XFS (loop4): Mounting V5 Filesystem [ 88.189173][ T4410] XFS (loop4): Ending clean mount [ 88.270769][ T4410] XFS (loop4): Quotacheck needed: Please wait. [ 88.966441][ T4427] tipc: Started in network mode [ 89.002730][ T4427] tipc: Node identity 2ec5e637b85, cluster identity 4711 [ 89.016556][ T4427] tipc: Enabled bearer , priority 0 [ 89.024157][ T4410] XFS (loop4): Quotacheck: Done. [ 89.073678][ T4427] device syzkaller0 entered promiscuous mode [ 89.156826][ T4427] tipc: Resetting bearer [ 89.769747][ T4425] tipc: Resetting bearer [ 89.864447][ T4425] tipc: Disabling bearer [ 92.327866][ T4182] XFS (loop4): Unmounting Filesystem [ 92.583873][ T4447] loop3: detected capacity change from 0 to 4096 [ 92.641539][ T4447] ntfs3: Unknown parameter 'nocase' [ 92.919456][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 92.965193][ T4451] netlink: 'syz.2.42': attribute type 7 has an invalid length. [ 92.973996][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 93.346673][ T4457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.360035][ T4457] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.013104][ T4260] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.268487][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 94.551819][ T4260] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 94.572275][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.600525][ T4260] usb 4-1: Product: syz [ 94.605333][ T4260] usb 4-1: Manufacturer: syz [ 94.613919][ T4260] usb 4-1: SerialNumber: syz [ 94.839238][ T4260] usb 4-1: config 0 descriptor?? [ 94.893702][ T4260] gspca_main: se401-2.14.0 probing 047d:5003 [ 96.307963][ T4260] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 96.316202][ T4260] se401: probe of 4-1:0.0 failed with error -110 [ 97.307356][ T4184] usb 4-1: USB disconnect, device number 3 [ 97.478465][ T4478] tipc: Started in network mode [ 97.498997][ T4478] tipc: Node identity 26e16d48777d, cluster identity 4711 [ 97.507426][ T4478] tipc: Enabled bearer , priority 0 [ 97.525099][ T4478] device syzkaller0 entered promiscuous mode [ 97.554426][ T4478] tipc: Resetting bearer [ 97.565351][ T4477] tipc: Resetting bearer [ 97.644496][ T4477] tipc: Disabling bearer [ 97.703283][ T4482] raw_sendmsg: syz.4.51 forgot to set AF_INET. Fix it! [ 98.096875][ T4493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.158782][ T4495] loop2: detected capacity change from 0 to 256 [ 98.256146][ T4378] ODEBUG: Out of memory. ODEBUG disabled [ 99.327980][ T4495] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.347980][ T4495] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 99.394339][ T4495] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.129750][ T4511] loop4: detected capacity change from 0 to 64 [ 100.423998][ T4514] tipc: Enabled bearer , priority 0 [ 100.462810][ T4514] device syzkaller0 entered promiscuous mode [ 100.514425][ T4514] tipc: Resetting bearer [ 100.574307][ T4513] tipc: Resetting bearer [ 100.623495][ T4513] tipc: Disabling bearer [ 103.263035][ T4304] Bluetooth: hci5: command 0x0409 tx timeout [ 103.319674][ T4183] syz-executor (4183) used greatest stack depth: 21184 bytes left [ 103.505992][ T4518] loop4: detected capacity change from 0 to 32768 [ 103.544726][ T4515] chnl_net:caif_netlink_parms(): no params data found [ 103.704110][ T4429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.289659][ T4551] loop2: detected capacity change from 0 to 128 [ 104.366642][ T4429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.378591][ T4293] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.409534][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.417774][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.426145][ T4515] device bridge_slave_0 entered promiscuous mode [ 104.435618][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.442888][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.451803][ T4515] device bridge_slave_1 entered promiscuous mode [ 104.479609][ T4551] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.500895][ T4515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.533460][ T4551] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.571405][ T4515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.347629][ T4260] Bluetooth: hci5: command 0x041b tx timeout [ 105.479382][ T4429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.553413][ T4566] tipc: Started in network mode [ 105.566986][ T4566] tipc: Node identity da03cbb76ff9, cluster identity 4711 [ 105.574863][ T4566] tipc: Enabled bearer , priority 0 [ 105.597369][ T4293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.617768][ T4293] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.636247][ T4429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.661077][ T4515] team0: Port device team_slave_0 added [ 105.670324][ T4562] device syzkaller0 entered promiscuous mode [ 105.708215][ T4515] team0: Port device team_slave_1 added [ 105.755488][ T4562] tipc: Resetting bearer [ 105.807658][ T4293] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.832112][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.852065][ T4561] tipc: Resetting bearer [ 105.861184][ T4293] usb 1-1: Product: syz [ 105.865584][ T4293] usb 1-1: Manufacturer: syz [ 105.877857][ T4561] tipc: Disabling bearer [ 105.900921][ T4293] usb 1-1: SerialNumber: syz [ 105.911983][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.928623][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.995004][ T4515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.063511][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.084644][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.115005][ T4572] 9pnet: Insufficient options for proto=fd [ 106.172938][ T4515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.277155][ T4293] usb 1-1: 0:2 : does not exist [ 106.941512][ T4293] usb 1-1: USB disconnect, device number 2 [ 107.043757][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.084038][ T4515] device hsr_slave_0 entered promiscuous mode [ 107.120475][ T4515] device hsr_slave_1 entered promiscuous mode [ 107.177848][ T4515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.185880][ T4515] Cannot create hsr debugfs directory [ 107.427022][ T4304] Bluetooth: hci5: command 0x040f tx timeout [ 108.798578][ T4515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.961030][ T4515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.725322][ T4260] Bluetooth: hci5: command 0x0419 tx timeout [ 109.833456][ T4515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.859147][ T4607] loop3: detected capacity change from 0 to 64 [ 109.883643][ T4515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.041865][ T4607] attempt to access beyond end of device [ 110.041865][ T4607] loop3: rw=34817, want=69, limit=64 [ 110.096734][ T4607] attempt to access beyond end of device [ 110.096734][ T4607] loop3: rw=34817, want=74, limit=64 [ 110.156049][ T4607] attempt to access beyond end of device [ 110.156049][ T4607] loop3: rw=34817, want=844, limit=64 [ 110.478081][ T4429] device hsr_slave_0 left promiscuous mode [ 110.528585][ T4429] device hsr_slave_1 left promiscuous mode [ 110.597849][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.605746][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.645375][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 110.658668][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.681915][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.726733][ T4429] device bridge_slave_1 left promiscuous mode [ 110.734595][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.825997][ T4429] device bridge_slave_0 left promiscuous mode [ 110.873759][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.074441][ T4628] loop3: detected capacity change from 0 to 128 [ 111.129083][ T4628] ======================================================= [ 111.129083][ T4628] WARNING: The mand mount option has been deprecated and [ 111.129083][ T4628] and is ignored by this kernel. Remove the mand [ 111.129083][ T4628] option from the mount to silence this warning. [ 111.129083][ T4628] ======================================================= [ 111.191979][ T4628] hpfs: hpfs_map_sector(): read error [ 111.198150][ T4628] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 111.233250][ T4628] hpfs: hpfs_map_sector(): read error [ 111.827106][ T4429] device veth1_macvtap left promiscuous mode [ 111.833754][ T4429] device veth0_macvtap left promiscuous mode [ 111.917766][ T4429] device veth1_vlan left promiscuous mode [ 111.923987][ T4429] device veth0_vlan left promiscuous mode [ 114.563804][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 114.590785][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 114.624741][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 114.641022][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.658992][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.732883][ T4429] bond0 (unregistering): Released all slaves [ 114.813874][ T4515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.846148][ T4647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.95'. [ 114.896183][ T4647] device team_slave_0 entered promiscuous mode [ 114.903041][ T4647] device team_slave_1 entered promiscuous mode [ 114.977493][ T4658] loop3: detected capacity change from 0 to 4096 [ 115.013378][ T4658] ntfs3: Unknown parameter ' [ 115.013378][ T4658] ' [ 115.029427][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.045409][ T4660] loop2: detected capacity change from 0 to 128 [ 115.252756][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.280554][ T4660] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.644827][ T4660] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.869346][ T4672] Zero length message leads to an empty skb [ 117.002773][ T4515] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.024533][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.035276][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.048595][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.055817][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.770595][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.785036][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.870593][ T4678] loop4: detected capacity change from 0 to 8 [ 117.893864][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.924456][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.931778][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.950455][ T4678] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 117.963216][ T4200] udevd[4200]: incorrect cramfs checksum on /dev/loop4 [ 118.120985][ T4683] process 'syz.4.105' launched './file2' with NULL argv: empty string added [ 118.140889][ T4683] cramfs: Error -5 while decompressing! [ 118.147176][ T4683] cramfs: ffffffff961e6028(26)->ffff88805c6d3000(4096) [ 118.155515][ T4683] cramfs: Error -3 while decompressing! [ 118.161263][ T4683] cramfs: ffffffff961e6042(26)->ffff88805c6cd000(4096) [ 118.168833][ T4683] cramfs: Error -3 while decompressing! [ 118.182555][ T4683] cramfs: ffffffff961e605c(16)->ffff88805e80c000(4096) [ 118.203455][ T4683] cramfs: Error -5 while decompressing! [ 118.211204][ T4683] cramfs: ffffffff961e6028(26)->ffff88805c6d3000(4096) [ 118.555720][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 118.616191][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.665957][ T4516] udevd[4516]: incorrect cramfs checksum on /dev/loop4 [ 118.726901][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.778013][ T4516] udevd[4516]: incorrect cramfs checksum on /dev/loop4 [ 118.826068][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.863555][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.903333][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.953229][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.002001][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.023873][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.034578][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.042716][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 119.072083][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.090363][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 119.102969][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.153410][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.321824][ T23] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 119.342252][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.386132][ T23] usb 1-1: Product: syz [ 119.411273][ T23] usb 1-1: Manufacturer: syz [ 119.434904][ T23] usb 1-1: SerialNumber: syz [ 119.529949][ T23] usb 1-1: config 0 descriptor?? [ 120.405706][ T4685] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.423709][ T4685] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.465615][ T4515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.472907][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.506257][ T23] usb 1-1: ucan: probing device on interface #0 [ 120.512680][ T23] usb 1-1: ucan: invalid EP count (1) [ 120.529850][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.539773][ T23] usb 1-1: ucan: probe failed; try to update the device firmware [ 120.676007][ T4724] loop2: detected capacity change from 0 to 128 [ 120.695334][ T4265] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.726949][ T4724] hpfs: hpfs_map_sector(): read error [ 120.732834][ T4724] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 120.763579][ T4724] hpfs: hpfs_map_sector(): read error [ 121.035537][ T4265] usb 5-1: Using ep0 maxpacket: 16 [ 121.155571][ T4265] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 121.231490][ T4265] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.545418][ T4265] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.587884][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.591745][ T4732] loop2: detected capacity change from 0 to 512 [ 121.624374][ T4265] usb 5-1: Product: syz [ 121.641918][ T4265] usb 5-1: Manufacturer: syz [ 121.663025][ T4265] usb 5-1: SerialNumber: syz [ 121.798267][ T4293] usb 1-1: USB disconnect, device number 3 [ 121.863007][ T4732] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.117: casefold flag without casefold feature [ 122.015350][ T4265] usb 5-1: 0:2 : does not exist [ 122.043234][ T4732] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.117: couldn't read orphan inode 15 (err -117) [ 122.090925][ T4265] usb 5-1: USB disconnect, device number 2 [ 122.119331][ T4732] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.228089][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.274757][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.374008][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.391885][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.393354][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.457363][ T4515] device veth0_vlan entered promiscuous mode [ 122.474647][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.512085][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.565769][ T4515] device veth1_vlan entered promiscuous mode [ 122.653422][ T4759] loop0: detected capacity change from 0 to 128 [ 123.653565][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.705858][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.719908][ T4759] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.746695][ T4759] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.767031][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.847915][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.899284][ T4515] device veth0_macvtap entered promiscuous mode [ 123.967631][ T4515] device veth1_macvtap entered promiscuous mode [ 124.016427][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.133261][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.165173][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.211711][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.261348][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.309592][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.375491][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.402846][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.453274][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.522649][ T4515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.580783][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.602274][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.652751][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.725304][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.764928][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.816525][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.872098][ T4795] loop2: detected capacity change from 0 to 256 [ 124.894746][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.954694][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.026850][ T4515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.074691][ T4515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.096273][ T4515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.106728][ T4803] 9pnet: Insufficient options for proto=fd [ 125.125511][ T4515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.146613][ T4515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.166565][ T4515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.186795][ T4515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.523182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.561063][ T4808] loop3: detected capacity change from 0 to 16 [ 125.626394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.638360][ T4808] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.712373][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.732430][ T4802] attempt to access beyond end of device [ 125.732430][ T4802] loop3: rw=524288, want=7864336, limit=16 [ 125.749567][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.777960][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.794904][ T4802] attempt to access beyond end of device [ 125.794904][ T4802] loop3: rw=0, want=7864336, limit=16 [ 125.857678][ T26] audit: type=1800 audit(1754417867.859:2): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.129" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 125.923970][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.953885][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.986435][ T4802] syz.3.129 (4802) used greatest stack depth: 20624 bytes left [ 126.000468][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.013719][ T4817] capability: warning: `syz.2.133' uses deprecated v2 capabilities in a way that may be insecure [ 129.442760][ T4857] loop4: detected capacity change from 0 to 128 [ 129.524951][ T4857] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.640988][ T4857] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.220494][ T4881] ALSA: mixer_oss: invalid OSS volume 'LI' [ 130.850264][ T4895] loop2: detected capacity change from 0 to 64 [ 131.002388][ T4892] loop3: detected capacity change from 0 to 32768 [ 131.138457][ T4899] loop0: detected capacity change from 0 to 128 [ 131.172010][ T4892] (syz.3.149,4892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 131.187711][ T4892] (syz.3.149,4892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.209324][ T4892] (syz.3.149,4892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.355699][ T4892] (syz.3.149,4892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 131.387133][ T4892] JBD2: Ignoring recovery information on journal [ 131.483246][ T4899] hpfs: hpfs_map_sector(): read error [ 131.489165][ T4899] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 131.522275][ T4899] hpfs: hpfs_map_sector(): read error [ 131.851773][ T4892] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 131.876968][ T4355] (kworker/u4:10,4355,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 132.003075][ T26] audit: type=1326 audit(1754418129.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4890 comm="syz.3.149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7209d4b69 code=0x0 [ 132.133332][ T4905] (syz.3.149,4905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 132.838446][ T4905] (syz.3.149,4905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x2e880d5e. Applying ECC. [ 132.956294][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963142][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.045646][ T4905] (syz.3.149,4905,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x960d5e93 [ 133.059098][ T4905] (syz.3.149,4905,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 133.133798][ T4905] (syz.3.149,4905,0):ocfs2_quota_read:201 ERROR: status = -5 [ 133.171119][ T4905] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 133.183569][ T4905] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 133.420787][ T4905] (syz.3.149,4905,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 133.437239][ T4905] (syz.3.149,4905,0):ocfs2_mknod:314 ERROR: status = -5 [ 133.449945][ T4905] (syz.3.149,4905,0):ocfs2_mknod:502 ERROR: status = -5 [ 134.357732][ T4905] (syz.3.149,4905,1):ocfs2_create:676 ERROR: status = -5 [ 134.606613][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 135.462198][ T4957] loop2: detected capacity change from 0 to 128 [ 135.518386][ T4957] hpfs: hpfs_map_sector(): read error [ 135.518484][ T4957] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 135.538084][ T4957] hpfs: hpfs_map_sector(): read error [ 137.008911][ T4953] loop4: detected capacity change from 0 to 1024 [ 137.085485][ T4953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.120937][ T4979] tipc: Started in network mode [ 139.178915][ T4979] tipc: Node identity 1ebdb975b18, cluster identity 4711 [ 139.244972][ T4979] tipc: Enabled bearer , priority 0 [ 139.339169][ T4984] device syzkaller0 entered promiscuous mode [ 139.492301][ T4988] tipc: Resetting bearer [ 139.513190][ T4173] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.564370][ T4988] tipc: Disabling bearer [ 139.701256][ T4995] loop5: detected capacity change from 0 to 128 [ 139.722740][ T4995] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.775159][ T4995] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.883179][ T4173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.937855][ T4173] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.990585][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.111057][ T4173] usb 5-1: config 0 descriptor?? [ 140.175051][ T4968] loop3: detected capacity change from 0 to 40427 [ 140.186347][ T4173] pwc: Askey VC010 type 2 USB webcam detected. [ 140.324596][ T4968] F2FS-fs (loop3): Invalid segment/section count (24 != 1 * 1) [ 140.361948][ T4968] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.413694][ T4968] F2FS-fs (loop3): invalid crc value [ 140.458381][ T4968] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.612912][ T4173] pwc: recv_control_msg error -32 req 02 val 2b00 [ 140.672913][ T4173] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.722952][ T4173] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.762918][ T4173] pwc: recv_control_msg error -32 req 04 val 1000 [ 140.803046][ T4173] pwc: recv_control_msg error -32 req 04 val 1300 [ 140.842939][ T4173] pwc: recv_control_msg error -32 req 04 val 1400 [ 140.852606][ T5015] 9pnet: Insufficient options for proto=fd [ 140.883296][ T4173] pwc: recv_control_msg error -32 req 02 val 2000 [ 140.944527][ T4173] pwc: recv_control_msg error -32 req 02 val 2100 [ 141.002932][ T4173] pwc: recv_control_msg error -32 req 04 val 1500 [ 141.062892][ T4173] pwc: recv_control_msg error -32 req 02 val 2500 [ 141.112918][ T4173] pwc: recv_control_msg error -32 req 02 val 2400 [ 141.185426][ T4173] pwc: recv_control_msg error -32 req 02 val 2600 [ 141.243016][ T4173] pwc: recv_control_msg error -32 req 02 val 2900 [ 141.399756][ T5022] loop2: detected capacity change from 0 to 32768 [ 141.673165][ T4173] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.053220][ T4173] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.121231][ T4173] pwc: Registered as video103. [ 142.153822][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 142.186743][ T4173] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 142.228700][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 142.317250][ T4173] usb 5-1: USB disconnect, device number 3 [ 144.150928][ T5051] tipc: Enabled bearer , priority 0 [ 144.236882][ T5051] device syzkaller0 entered promiscuous mode [ 144.328610][ T5049] tipc: Resetting bearer [ 144.368790][ T5049] tipc: Disabling bearer [ 144.478060][ T5063] loop0: detected capacity change from 0 to 512 [ 144.569282][ T5063] EXT4-fs (loop0): Ignoring removed bh option [ 144.603965][ T5063] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 144.689121][ T5063] EXT4-fs (loop0): 1 truncate cleaned up [ 144.705787][ T5063] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 144.951409][ T5074] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 146.809182][ T5111] loop4: detected capacity change from 0 to 128 [ 147.228315][ T5116] tipc: Enabled bearer , priority 0 [ 147.429269][ T5111] hpfs: hpfs_map_sector(): read error [ 147.435244][ T5111] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 147.479379][ T5111] hpfs: hpfs_map_sector(): read error [ 147.640346][ T5119] device syzkaller0 entered promiscuous mode [ 147.708550][ T5113] tipc: Resetting bearer [ 147.803511][ T5113] tipc: Disabling bearer [ 147.908053][ T5124] loop2: detected capacity change from 0 to 512 [ 147.997436][ T5124] EXT4-fs (loop2): Ignoring removed bh option [ 148.080808][ T5124] EXT4-fs error (device loop2): __ext4_iget:4894: inode #15: block 1803188595: comm syz.2.200: invalid block [ 148.098364][ T5124] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.200: couldn't read orphan inode 15 (err -117) [ 148.113819][ T5124] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 148.142172][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 148.782716][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.940642][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.481914][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.509154][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.548657][ T23] usb 5-1: Product: syz [ 149.578910][ T23] usb 5-1: Manufacturer: syz [ 149.599169][ T23] usb 5-1: SerialNumber: syz [ 150.631885][ T23] usb 5-1: 0:2 : does not exist [ 150.671831][ T23] usb 5-1: USB disconnect, device number 4 [ 151.674350][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.936745][ T5192] overlayfs: failed to resolve './file1': -2 [ 153.311799][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 153.435969][ T5194] loop4: detected capacity change from 0 to 128 [ 155.766795][ T5194] hpfs: hpfs_map_sector(): read error [ 155.781497][ T5194] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 155.917549][ T5194] hpfs: hpfs_map_sector(): read error [ 157.400520][ T5218] loop5: detected capacity change from 0 to 32768 [ 158.099922][ T5218] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.217 (5218) [ 158.159465][ T5218] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 158.169168][ T5218] BTRFS info (device loop5): using free space tree [ 158.176613][ T5218] BTRFS info (device loop5): has skinny extents [ 158.820844][ T4173] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.233292][ T4173] usb 1-1: Using ep0 maxpacket: 16 [ 159.339258][ T5218] BTRFS info (device loop5): enabling ssd optimizations [ 159.358212][ T4173] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 159.400155][ T4173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.590778][ T4173] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.743767][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.752484][ T4173] usb 1-1: Product: syz [ 159.756954][ T4173] usb 1-1: Manufacturer: syz [ 159.762409][ T4173] usb 1-1: SerialNumber: syz [ 160.749869][ T5282] overlayfs: failed to resolve './file1': -2 [ 161.010286][ C0] sched: RT throttling activated [ 161.110514][ T4173] usb 1-1: 0:2 : does not exist [ 161.227041][ T4173] usb 1-1: USB disconnect, device number 4 [ 161.531101][ T4581] udevd[4581]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.812450][ T5298] loop0: detected capacity change from 0 to 128 [ 161.908285][ T5298] hpfs: hpfs_map_sector(): read error [ 161.914625][ T5298] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 161.944920][ T5298] hpfs: hpfs_map_sector(): read error [ 165.611962][ T5336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'. [ 166.640526][ T5348] overlayfs: failed to resolve './file1': -2 [ 167.379645][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.521611][ T5346] loop3: detected capacity change from 0 to 262144 [ 167.566599][ T5346] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.239 (5346) [ 167.647231][ T5362] loop4: detected capacity change from 0 to 128 [ 167.705276][ T5362] hpfs: hpfs_map_sector(): read error [ 167.711500][ T5362] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 167.742259][ T5362] hpfs: hpfs_map_sector(): read error [ 168.069845][ T5346] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 168.080243][ T5346] BTRFS info (device loop3): using free space tree [ 168.087349][ T5346] BTRFS info (device loop3): has skinny extents [ 168.094263][ T5346] BTRFS info (device loop3): flagging fs with big metadata feature [ 168.299579][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 168.424507][ T1108] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 169.092527][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.770907][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.848990][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.126622][ T1108] usb 1-1: Product: syz [ 170.150822][ T1108] usb 1-1: Manufacturer: syz [ 170.155491][ T1108] usb 1-1: SerialNumber: syz [ 170.414439][ T1108] usb 1-1: can't set config #1, error -71 [ 170.440921][ T1108] usb 1-1: USB disconnect, device number 5 [ 170.755029][ T5346] BTRFS error (device loop3): open_ctree failed: -12 [ 171.165073][ T4516] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by udevd (4516) [ 171.443304][ T5436] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 171.453752][ T5436] ALSA: mixer_oss: invalid OSS volume 'LI' [ 171.866763][ T5449] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 172.622300][ T5454] loop5: detected capacity change from 0 to 512 [ 172.758800][ T5454] EXT4-fs (loop5): Ignoring removed bh option [ 172.854945][ T5454] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 173.427441][ T5454] EXT4-fs (loop5): 1 truncate cleaned up [ 173.543284][ T5454] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 174.636215][ T5477] loop2: detected capacity change from 0 to 1024 [ 174.839609][ T5477] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 174.936655][ T5486] loop5: detected capacity change from 0 to 128 [ 175.230503][ T5486] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.821688][ T5486] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.855414][ T5504] loop0: detected capacity change from 0 to 256 [ 176.195635][ T5506] 9pnet: Insufficient options for proto=fd [ 176.832291][ T5519] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 176.842989][ T5519] ALSA: mixer_oss: invalid OSS volume 'LI' [ 177.155468][ T5529] loop4: detected capacity change from 0 to 512 [ 177.228602][ T5529] EXT4-fs (loop4): Ignoring removed bh option [ 177.428782][ T5529] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 177.614694][ T5529] EXT4-fs (loop4): 1 truncate cleaned up [ 177.630938][ T5529] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 178.902682][ T5558] loop5: detected capacity change from 0 to 128 [ 180.177715][ T5558] hpfs: hpfs_map_sector(): read error [ 180.183325][ T5558] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 180.215422][ T5558] hpfs: hpfs_map_sector(): read error [ 181.106700][ T5571] loop5: detected capacity change from 0 to 128 [ 181.191069][ T5571] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.305681][ T5571] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.666350][ T5581] 9pnet: Insufficient options for proto=fd [ 182.280859][ T5585] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 182.292241][ T5585] ALSA: mixer_oss: invalid OSS volume 'LI' [ 182.377362][ T5587] tipc: Enabled bearer , priority 0 [ 182.513468][ T5587] tipc: Resetting bearer [ 182.559071][ T5586] tipc: Disabling bearer [ 183.699819][ T5612] loop5: detected capacity change from 0 to 512 [ 183.733686][ T5612] EXT4-fs (loop5): Ignoring removed bh option [ 183.771992][ T5612] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 184.858463][ T5612] EXT4-fs (loop5): 1 truncate cleaned up [ 184.886291][ T5630] loop3: detected capacity change from 0 to 128 [ 184.923741][ T5612] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 184.965759][ T5630] hpfs: hpfs_map_sector(): read error [ 184.971808][ T5630] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 185.005127][ T5630] hpfs: hpfs_map_sector(): read error [ 186.015227][ T5644] loop4: detected capacity change from 0 to 128 [ 186.073524][ T5644] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.174808][ T5644] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.265314][ T5652] loop3: detected capacity change from 0 to 256 [ 186.598760][ T5654] 9pnet: Insufficient options for proto=fd [ 187.279107][ T5663] tipc: Enabled bearer , priority 0 [ 187.290806][ T5663] tipc: Resetting bearer [ 187.300237][ T5662] tipc: Disabling bearer [ 190.439227][ T5715] loop5: detected capacity change from 0 to 128 [ 190.514689][ T5715] hpfs: hpfs_map_sector(): read error [ 190.520655][ T5715] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 190.564422][ T5715] hpfs: hpfs_map_sector(): read error [ 191.204497][ T5718] loop2: detected capacity change from 0 to 512 [ 191.316926][ T5718] EXT4-fs (loop2): Ignoring removed bh option [ 191.346990][ T4184] Bluetooth: hci3: command 0x0406 tx timeout [ 191.363767][ T4184] Bluetooth: hci2: command 0x0406 tx timeout [ 191.399519][ T4184] Bluetooth: hci0: command 0x0406 tx timeout [ 191.423883][ T5718] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 191.436045][ T4184] Bluetooth: hci4: command 0x0406 tx timeout [ 191.480229][ T5724] loop5: detected capacity change from 0 to 128 [ 191.514228][ T5718] EXT4-fs (loop2): 1 truncate cleaned up [ 191.524963][ T5718] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 191.553580][ T5724] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.587182][ T5724] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.076965][ T5735] 9pnet: Insufficient options for proto=fd [ 193.948735][ T5743] tipc: Enabled bearer , priority 0 [ 193.987524][ T5743] tipc: Resetting bearer [ 194.039029][ T5740] tipc: Disabling bearer [ 194.198425][ T5758] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 194.241967][ T5758] ALSA: mixer_oss: invalid OSS volume 'LI' [ 194.388005][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.409118][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.279238][ T5765] loop2: detected capacity change from 0 to 512 [ 195.323272][ T5768] loop4: detected capacity change from 0 to 128 [ 195.356633][ T5768] hpfs: hpfs_map_sector(): read error [ 195.362344][ T5768] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 195.398960][ T5768] hpfs: hpfs_map_sector(): read error [ 195.513417][ T5765] EXT4-fs (loop2): Ignoring removed bh option [ 195.630028][ T5765] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 196.011033][ T5765] EXT4-fs (loop2): 1 truncate cleaned up [ 196.096296][ T5765] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 196.149596][ T5774] loop0: detected capacity change from 0 to 256 [ 197.398559][ T5788] loop4: detected capacity change from 0 to 128 [ 197.447317][ T5788] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.519842][ T5788] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.907784][ T5793] 9pnet: Insufficient options for proto=fd [ 199.446632][ T5808] device syzkaller0 entered promiscuous mode [ 200.545851][ T5818] loop5: detected capacity change from 0 to 128 [ 200.823812][ T5818] hpfs: hpfs_map_sector(): read error [ 200.829911][ T5818] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 200.869238][ T5818] hpfs: hpfs_map_sector(): read error [ 201.117579][ T5819] loop0: detected capacity change from 0 to 512 [ 201.225660][ T5819] EXT4-fs (loop0): Ignoring removed bh option [ 201.242881][ T5819] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 201.317831][ T5824] loop5: detected capacity change from 0 to 128 [ 201.385675][ T5824] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.478407][ T5819] EXT4-fs (loop0): 1 truncate cleaned up [ 201.484298][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 201.726631][ T5824] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.064747][ T5835] 9pnet: Insufficient options for proto=fd [ 203.743694][ T5848] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 203.767080][ T5848] ALSA: mixer_oss: invalid OSS volume 'LI' [ 203.866362][ T5851] loop0: detected capacity change from 0 to 256 [ 204.281686][ T5856] device syzkaller0 entered promiscuous mode [ 205.427218][ T5866] loop2: detected capacity change from 0 to 128 [ 205.552679][ T5866] hpfs: hpfs_map_sector(): read error [ 205.558353][ T5866] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 205.592089][ T5866] hpfs: hpfs_map_sector(): read error [ 207.335633][ T5887] loop5: detected capacity change from 0 to 512 [ 207.350233][ T5890] loop2: detected capacity change from 0 to 256 [ 207.510322][ T5887] EXT4-fs (loop5): Ignoring removed bh option [ 207.621944][ T5887] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 207.931073][ T5887] EXT4-fs (loop5): 1 truncate cleaned up [ 208.128503][ T5887] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 209.169936][ T5914] device syzkaller0 entered promiscuous mode [ 209.458103][ T5917] loop4: detected capacity change from 0 to 128 [ 209.529145][ T5917] hpfs: hpfs_map_sector(): read error [ 209.535212][ T5917] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 209.569194][ T5917] hpfs: hpfs_map_sector(): read error [ 211.836809][ T5944] loop4: detected capacity change from 0 to 256 [ 211.966307][ T5945] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 211.986500][ T5945] ALSA: mixer_oss: invalid OSS volume 'LI' [ 212.861689][ T5955] loop4: detected capacity change from 0 to 512 [ 212.982770][ T5955] EXT4-fs (loop4): Ignoring removed bh option [ 213.030111][ T5955] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 213.061357][ T5955] EXT4-fs (loop4): 1 truncate cleaned up [ 213.068102][ T5955] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 214.370640][ T5976] device syzkaller0 entered promiscuous mode [ 214.486785][ T5978] loop5: detected capacity change from 0 to 128 [ 217.421408][ T5994] loop0: detected capacity change from 0 to 256 [ 218.398881][ T6008] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 218.414922][ T6008] ALSA: mixer_oss: invalid OSS volume 'LI' [ 219.295379][ T6020] loop0: detected capacity change from 0 to 512 [ 219.376717][ T6020] EXT4-fs (loop0): Ignoring removed bh option [ 219.393393][ T6020] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 219.451235][ T6020] EXT4-fs (loop0): 1 truncate cleaned up [ 219.485448][ T6020] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 220.278099][ T6033] loop2: detected capacity change from 0 to 128 [ 220.349627][ T6033] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.429004][ T6033] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.864470][ T6039] 9pnet: Insufficient options for proto=fd [ 221.555653][ T6045] loop4: detected capacity change from 0 to 128 [ 221.804144][ T6045] hpfs: hpfs_map_sector(): read error [ 221.823040][ T6045] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 222.184178][ T6045] hpfs: hpfs_map_sector(): read error [ 222.333317][ T6056] loop3: detected capacity change from 0 to 256 [ 223.075614][ T6069] device syzkaller0 entered promiscuous mode [ 224.882580][ T6090] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 224.893225][ T6090] ALSA: mixer_oss: invalid OSS volume 'LI' [ 224.959264][ T6092] loop3: detected capacity change from 0 to 128 [ 225.024266][ T6092] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.077955][ T6092] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.440562][ T6096] 9pnet: Insufficient options for proto=fd [ 226.367715][ T6103] loop3: detected capacity change from 0 to 128 [ 227.151479][ T6103] hpfs: hpfs_map_sector(): read error [ 227.157362][ T6103] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 227.193662][ T6103] hpfs: hpfs_map_sector(): read error [ 227.478083][ T5302] Bluetooth: hci5: command 0x0406 tx timeout [ 227.598877][ T6106] loop0: detected capacity change from 0 to 256 [ 229.715155][ T6136] loop3: detected capacity change from 0 to 128 [ 229.763297][ T6136] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.798539][ T6136] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.257492][ T6145] 9pnet: Insufficient options for proto=fd [ 232.532864][ T6162] loop3: detected capacity change from 0 to 256 [ 233.108407][ T6171] loop0: detected capacity change from 0 to 512 [ 233.232155][ T6171] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 233.286611][ T6171] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 233.321674][ T6171] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.397818][ T6171] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.435: Allocating blocks 41-42 which overlap fs metadata [ 233.508678][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 233.526791][ T6171] Quota error (device loop0): write_blk: dquota write failed [ 233.601606][ T6171] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 233.650810][ T6171] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 233.701567][ T6171] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.435: Failed to acquire dquot type 1 [ 233.734144][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 233.755044][ T6171] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 233.824504][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 233.887036][ T6179] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 233.897157][ T6179] ALSA: mixer_oss: invalid OSS volume 'LI' [ 233.992901][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #12: comm syz.0.435: corrupted inode contents [ 234.052153][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.095289][ T6171] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #12: comm syz.0.435: mark_inode_dirty error [ 234.160648][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.197630][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #12: comm syz.0.435: corrupted inode contents [ 234.274783][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.319659][ T6171] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.435: mark_inode_dirty error [ 234.361419][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.368262][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #12: comm syz.0.435: corrupted inode contents [ 234.426121][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.451808][ T6171] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 234.490445][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.499870][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #12: comm syz.0.435: corrupted inode contents [ 234.515640][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.522809][ T6171] EXT4-fs error (device loop0): ext4_truncate:4273: inode #12: comm syz.0.435: mark_inode_dirty error [ 234.536531][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.543800][ T6171] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 234.588750][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 234.597084][ T6171] EXT4-fs (loop0): 1 truncate cleaned up [ 234.603403][ T6171] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,jqfmt=vfsv1,nodelalloc,errors=remount-ro,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002. Quota mode: writeback. [ 234.793500][ T6171] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.435: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 234.857054][ T6171] EXT4-fs (loop0): Remounting filesystem read-only [ 235.161824][ T6193] loop2: detected capacity change from 0 to 128 [ 235.191202][ T6193] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 235.274960][ T6193] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 235.607162][ T6201] 9pnet: Insufficient options for proto=fd [ 236.850648][ T6212] loop5: detected capacity change from 0 to 256 [ 236.869004][ T6213] loop2: detected capacity change from 0 to 512 [ 236.929442][ T6213] EXT4-fs (loop2): Ignoring removed bh option [ 237.162073][ T6213] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 237.237777][ T6213] EXT4-fs (loop2): 1 truncate cleaned up [ 237.253343][ T6213] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 237.494895][ T6224] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 237.505190][ T6224] ALSA: mixer_oss: invalid OSS volume 'LI' [ 239.019239][ T6246] loop3: detected capacity change from 0 to 128 [ 239.059758][ T6246] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.553819][ T6246] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.929459][ T6250] 9pnet: Insufficient options for proto=fd [ 241.652566][ T6266] loop3: detected capacity change from 0 to 764 [ 241.654817][ T6268] loop5: detected capacity change from 0 to 256 [ 242.584211][ T6274] loop0: detected capacity change from 0 to 1024 [ 242.910041][ T6274] hfsplus: keylen 65060 too large [ 242.915799][ T6274] hfsplus: keylen 65060 too large [ 244.950678][ T6300] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 244.961138][ T6300] ALSA: mixer_oss: invalid OSS volume 'LI' [ 246.373082][ T6313] overlayfs: overlapping lowerdir path [ 246.520747][ T6313] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 248.215930][ T5429] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.853950][ T5429] usb 6-1: Using ep0 maxpacket: 16 [ 250.949514][ T5429] usb 6-1: device descriptor read/all, error -71 [ 251.193787][ T6351] overlayfs: overlapping lowerdir path [ 251.229430][ T6351] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 252.915147][ T6361] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 254.402300][ T6381] tipc: Enabled bearer , priority 0 [ 254.435487][ T6381] tipc: Resetting bearer [ 254.471050][ T6380] tipc: Disabling bearer [ 255.813204][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820289][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.982257][ T6405] loop4: detected capacity change from 0 to 128 [ 257.119571][ T5429] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 257.181050][ T6405] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.244574][ T6409] overlayfs: overlapping lowerdir path [ 257.278956][ T6409] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 258.321214][ T6405] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.558704][ T5429] usb 3-1: Using ep0 maxpacket: 16 [ 259.071103][ T5429] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 259.083323][ T5429] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.952584][ T6426] loop5: detected capacity change from 0 to 128 [ 259.978559][ T5429] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.001946][ T5429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.016039][ T5429] usb 3-1: Product: syz [ 260.038498][ T5429] usb 3-1: can't set config #1, error -71 [ 260.089230][ T5429] usb 3-1: USB disconnect, device number 2 [ 260.099742][ T6426] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.111089][ T6426] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.758328][ T5429] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 261.422416][ T6444] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 261.673710][ T6451] mmap: syz.4.515 (6451) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 261.719016][ T5429] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.742158][ T5429] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.766114][ T5429] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 261.786379][ T5429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.804084][ T5429] usb 6-1: config 0 descriptor?? [ 262.998395][ T5429] usb 6-1: string descriptor 0 read error: -71 [ 263.037348][ T5429] usb 6-1: USB disconnect, device number 4 [ 264.264824][ T6472] loop2: detected capacity change from 0 to 128 [ 264.335663][ T6472] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.402249][ T6472] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.557860][ T4304] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 264.807970][ T4304] usb 4-1: Using ep0 maxpacket: 16 [ 265.098132][ T4304] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 265.152888][ T4304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.200449][ T6479] loop5: detected capacity change from 0 to 128 [ 265.312337][ T6479] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.347990][ T4304] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.459343][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.486174][ T4304] usb 4-1: Product: syz [ 265.491525][ T6479] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.506685][ T4304] usb 4-1: Manufacturer: syz [ 265.512390][ T4304] usb 4-1: SerialNumber: syz [ 266.429903][ T4304] usb 4-1: 0:2 : does not exist [ 266.875570][ T6498] loop4: detected capacity change from 0 to 128 [ 268.843326][ T6498] hpfs: hpfs_map_sector(): read error [ 268.849659][ T6498] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 268.889344][ T6498] hpfs: hpfs_map_sector(): read error [ 269.190464][ T4304] usb 4-1: USB disconnect, device number 4 [ 270.277732][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.023632][ T6530] loop4: detected capacity change from 0 to 764 [ 273.445716][ T6544] Symlink component flag not implemented [ 273.452997][ T6544] Symlink component flag not implemented (101) [ 273.961845][ T6545] loop5: detected capacity change from 0 to 128 [ 274.168872][ T6545] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.226857][ T5427] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 274.264360][ T6545] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.306697][ T4184] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 274.616806][ T5427] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.643372][ T5427] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.666632][ T4184] usb 3-1: Using ep0 maxpacket: 16 [ 275.017171][ T4184] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 275.099931][ T4184] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.517130][ T4184] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.523248][ T5427] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.536009][ T5427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.548461][ T4184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.561005][ T5427] usb 1-1: SerialNumber: syz [ 275.583261][ T4184] usb 3-1: Product: syz [ 275.588695][ T4184] usb 3-1: Manufacturer: syz [ 275.591075][ T6558] tipc: Enabled bearer , priority 0 [ 275.598738][ T4184] usb 3-1: SerialNumber: syz [ 275.606285][ T6558] tipc: Resetting bearer [ 275.617200][ T6557] tipc: Disabling bearer [ 275.786251][ T6562] 9pnet: Insufficient options for proto=fd [ 276.051925][ T4184] usb 3-1: 0:2 : does not exist [ 276.294505][ T5427] usb 1-1: 0:2 : does not exist [ 276.295965][ T4184] usb 3-1: USB disconnect, device number 3 [ 276.406239][ T6570] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 276.429949][ T6570] ALSA: mixer_oss: invalid OSS volume 'LI' [ 277.060550][ T6572] loop0: detected capacity change from 0 to 128 [ 277.148663][ T6575] netlink: 88 bytes leftover after parsing attributes in process `syz.2.552'. [ 277.159945][ T5427] usb 1-1: USB disconnect, device number 6 [ 278.112989][ T4581] udevd[4581]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 278.157809][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.162457][ T6594] loop2: detected capacity change from 0 to 128 [ 279.306745][ T6594] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.393073][ T6594] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.466605][ T6594] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.558: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 279.556676][ T6594] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 281.672471][ T6619] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 281.687091][ T6619] ALSA: mixer_oss: invalid OSS volume 'LI' [ 283.218721][ T26] audit: type=1326 audit(1754418793.203:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dba765b69 code=0x7ffc0000 [ 283.245667][ T5427] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 283.462790][ T26] audit: type=1326 audit(1754418793.233:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f3dba765b69 code=0x7ffc0000 [ 283.491098][ T26] audit: type=1326 audit(1754418793.233:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dba765b69 code=0x7ffc0000 [ 283.636568][ T5427] usb 4-1: Using ep0 maxpacket: 16 [ 283.766436][ T5427] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 284.229429][ T5427] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.321230][ T6634] loop5: detected capacity change from 0 to 128 [ 284.416149][ T5427] usb 4-1: string descriptor 0 read error: -71 [ 284.432568][ T5427] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.436932][ T6634] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.462106][ T6637] loop3: detected capacity change from 0 to 2048 [ 284.506303][ T5427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.510941][ T6634] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.560921][ T5427] usb 4-1: can't set config #1, error -71 [ 284.755469][ T5427] usb 4-1: USB disconnect, device number 5 [ 285.228680][ T6643] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.692172][ T6637] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 15 [ 285.718642][ T6637] Remounting filesystem read-only [ 287.296296][ T6665] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 287.315277][ T6665] ALSA: mixer_oss: invalid OSS volume 'LI' [ 288.676112][ T6679] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.687693][ T6679] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 288.797933][ T5419] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 289.518542][ T5419] usb 1-1: Using ep0 maxpacket: 16 [ 289.955230][ T5419] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 290.006298][ T5419] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.316660][ T5419] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.353135][ T5419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.445780][ T6696] loop5: detected capacity change from 0 to 128 [ 290.462799][ T5419] usb 1-1: Product: syz [ 290.477419][ T5419] usb 1-1: Manufacturer: syz [ 290.482347][ T5419] usb 1-1: SerialNumber: syz [ 290.540577][ T6696] hpfs: hpfs_map_sector(): read error [ 290.546358][ T6696] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 290.558723][ T6696] hpfs: hpfs_map_sector(): read error [ 291.584766][ T5419] usb 1-1: 0:2 : does not exist [ 291.645555][ T5419] usb 1-1: USB disconnect, device number 7 [ 291.917357][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.987667][ T6707] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 291.998107][ T6707] ALSA: mixer_oss: invalid OSS volume 'LI' [ 293.071665][ T6717] loop2: detected capacity change from 0 to 128 [ 293.237079][ T6717] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.299535][ T6717] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 298.109828][ T6753] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 298.132955][ T6753] ALSA: mixer_oss: invalid OSS volume 'LI' [ 299.034127][ T4304] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.874999][ T4227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.988639][ T4304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.988668][ T4304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.993097][ T6767] loop3: detected capacity change from 0 to 512 [ 300.093658][ T4304] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.093690][ T4304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.093711][ T4304] usb 5-1: SerialNumber: syz [ 300.120049][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 300.163625][ T6767] EXT4-fs (loop3): Ignoring removed bh option [ 300.212164][ T6769] loop0: detected capacity change from 0 to 1024 [ 300.250070][ T6767] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 300.273834][ T4227] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 300.302319][ T6769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.358390][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.503693][ T6767] EXT4-fs (loop3): 1 truncate cleaned up [ 300.575752][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 300.653973][ T4227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.695053][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.779590][ T4227] usb 3-1: Product: syz [ 300.826087][ T4227] usb 3-1: Manufacturer: syz [ 300.869576][ T4227] usb 3-1: SerialNumber: syz [ 300.886313][ T4304] usb 5-1: 0:2 : does not exist [ 301.066470][ T4304] usb 5-1: USB disconnect, device number 5 [ 301.213576][ T4227] usb 3-1: 0:2 : does not exist [ 301.465058][ T4227] usb 3-1: USB disconnect, device number 4 [ 301.586327][ T6782] usb usb1: usbfs: process 6782 (syz.0.608) did not claim interface 0 before use [ 301.612641][ T6778] loop4: detected capacity change from 0 to 128 [ 301.630091][ T6778] hpfs: hpfs_map_sector(): read error [ 301.636009][ T6778] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 301.648529][ T6778] hpfs: hpfs_map_sector(): read error [ 301.704842][ T4200] udevd[4200]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 301.784749][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.789376][ T6787] loop4: detected capacity change from 0 to 128 [ 301.878996][ T6787] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.329000][ T6787] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.098050][ T6803] tipc: Enabling of bearer rejected, failed to enable media [ 303.420423][ T6794] loop5: detected capacity change from 0 to 32768 [ 303.516962][ T6794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.614 (6794) [ 303.562492][ T6820] 9pnet: Insufficient options for proto=fd [ 303.812000][ T6794] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 303.944358][ T6794] BTRFS info (device loop5): using free space tree [ 304.021661][ T6794] BTRFS info (device loop5): has skinny extents [ 305.200741][ T6848] bridge0: port 3(netdevsim0) entered blocking state [ 305.210364][ T6848] bridge0: port 3(netdevsim0) entered disabled state [ 305.229909][ T6848] device netdevsim0 entered promiscuous mode [ 305.241939][ T6848] bridge0: port 3(netdevsim0) entered blocking state [ 305.249375][ T6848] bridge0: port 3(netdevsim0) entered forwarding state [ 305.953218][ T6853] overlayfs: failed to resolve './file0': -2 [ 306.809075][ T6794] BTRFS error (device loop5): open_ctree failed: -12 [ 307.613778][ T4516] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4516) [ 307.890676][ T6866] loop3: detected capacity change from 0 to 256 [ 308.680162][ T6870] tipc: Enabling of bearer rejected, failed to enable media [ 310.373235][ T6895] overlayfs: failed to resolve './file0': -2 [ 311.913836][ T6900] loop0: detected capacity change from 0 to 128 [ 311.937198][ T6900] hpfs: hpfs_map_sector(): read error [ 311.942792][ T6900] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 311.955646][ T6900] hpfs: hpfs_map_sector(): read error [ 313.106096][ T6911] loop4: detected capacity change from 0 to 128 [ 313.152804][ T6911] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.189878][ T6911] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 313.530127][ T6918] 9pnet: Insufficient options for proto=fd [ 314.047562][ T6914] loop0: detected capacity change from 0 to 1024 [ 314.169526][ T6914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.378811][ T6919] tipc: Enabling of bearer rejected, failed to enable media [ 315.658530][ T6937] nvme_fabrics: missing parameter 'transport=%s' [ 315.665900][ T6937] nvme_fabrics: missing parameter 'nqn=%s' [ 317.302610][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.314679][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.398379][ T6967] loop0: detected capacity change from 0 to 128 [ 317.592540][ T6967] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.677553][ T6967] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.811381][ T4304] Bluetooth: hci5: command 0x0405 tx timeout [ 318.045307][ T6979] 9pnet: Insufficient options for proto=fd [ 318.283297][ T5420] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 318.673460][ T6978] loop2: detected capacity change from 0 to 1024 [ 318.745486][ T6978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.001478][ T5420] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 319.010433][ T5420] usb 4-1: config 0 has no interface number 0 [ 319.019373][ T5420] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 319.029994][ T5420] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.241419][ T5420] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 319.296916][ T5420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.144688][ T5420] usb 4-1: Product: syz [ 320.149138][ T5420] usb 4-1: Manufacturer: syz [ 320.154257][ T5420] usb 4-1: SerialNumber: syz [ 320.165523][ T5420] usb 4-1: config 0 descriptor?? [ 320.181421][ T6976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 320.243257][ T5420] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 320.328581][ T5420] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 320.385999][ T6992] loop2: detected capacity change from 0 to 8 [ 320.508380][ T6992] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 320.529815][ T4581] udevd[4581]: incorrect cramfs checksum on /dev/loop2 [ 320.648670][ T6998] cramfs: Error -5 while decompressing! [ 320.654777][ T6998] cramfs: ffffffff961ea028(26)->ffff888072000000(4096) [ 320.662501][ T6998] cramfs: Error -3 while decompressing! [ 320.668541][ T6998] cramfs: ffffffff961ea042(26)->ffff888072001000(4096) [ 320.676288][ T6998] cramfs: Error -3 while decompressing! [ 320.682456][ T6998] cramfs: ffffffff961ea05c(16)->ffff88807298c000(4096) [ 320.691917][ T6998] cramfs: Error -5 while decompressing! [ 320.702436][ T6998] cramfs: ffffffff961ea028(26)->ffff888072000000(4096) [ 321.256071][ T4184] usb 4-1: USB disconnect, device number 6 [ 321.267238][ T4184] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 321.279230][ T4184] cyberjack 4-1:0.69: device disconnected [ 322.606794][ T7016] loop4: detected capacity change from 0 to 128 [ 322.997939][ T7016] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.149109][ T7016] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.210172][ T7021] loop5: detected capacity change from 0 to 256 [ 323.622163][ T7026] 9pnet: Insufficient options for proto=fd [ 326.304191][ T7039] loop4: detected capacity change from 0 to 8 [ 326.360386][ T4304] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 326.402014][ T7039] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 326.403754][ T7044] loop3: detected capacity change from 0 to 1024 [ 326.481501][ T4516] udevd[4516]: incorrect cramfs checksum on /dev/loop4 [ 326.555544][ T7046] cramfs: Error -5 while decompressing! [ 326.561594][ T7046] cramfs: ffffffff961e6028(26)->ffff888052a8d000(4096) [ 326.568907][ T7046] cramfs: Error -3 while decompressing! [ 326.574715][ T7046] cramfs: ffffffff961e6042(26)->ffff88807263e000(4096) [ 326.582086][ T7046] cramfs: Error -3 while decompressing! [ 326.587860][ T7046] cramfs: ffffffff961e605c(16)->ffff888072730000(4096) [ 326.595716][ T7046] cramfs: Error -5 while decompressing! [ 326.606270][ T7046] cramfs: ffffffff961e6028(26)->ffff888052a8d000(4096) [ 326.650300][ T4304] usb 3-1: Using ep0 maxpacket: 16 [ 326.655482][ T7044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.205710][ T4516] udevd[4516]: incorrect cramfs checksum on /dev/loop4 [ 327.230355][ T4304] usb 3-1: device descriptor read/all, error -71 [ 328.986633][ T7070] loop3: detected capacity change from 0 to 128 [ 329.042721][ T7070] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.095613][ T7070] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.503444][ T7072] 9pnet: Insufficient options for proto=fd [ 329.819930][ T5424] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 329.874746][ T7084] loop4: detected capacity change from 0 to 1024 [ 329.982475][ T7084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.159997][ T4227] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 330.190347][ T5424] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.330084][ T5424] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 330.357857][ T5424] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 330.382632][ T5424] usb 6-1: Manufacturer: syz [ 330.388105][ T5424] usb 6-1: SerialNumber: syz [ 330.419918][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 330.450603][ T5424] usb 6-1: config 0 descriptor?? [ 330.540153][ T4227] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 330.576278][ T4227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.731049][ T5420] usb 6-1: USB disconnect, device number 5 [ 330.760453][ T4227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.784797][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.804925][ T4227] usb 1-1: Product: syz [ 330.809470][ T4227] usb 1-1: Manufacturer: syz [ 330.831073][ T4227] usb 1-1: SerialNumber: syz [ 331.380050][ T4227] usb 1-1: 0:2 : does not exist [ 331.592561][ T4227] usb 1-1: USB disconnect, device number 8 [ 331.687317][ T7109] loop5: detected capacity change from 0 to 512 [ 331.715248][ T7109] EXT4-fs (loop5): Ignoring removed bh option [ 331.722538][ T7109] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 331.804886][ T7109] EXT4-fs (loop5): 1 truncate cleaned up [ 331.811347][ T7109] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 331.831662][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.416596][ T7122] loop4: detected capacity change from 0 to 1024 [ 332.448146][ T7124] loop0: detected capacity change from 0 to 128 [ 332.501554][ T7124] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.611903][ T7124] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.647099][ T7122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.972909][ T7126] 9pnet: Insufficient options for proto=fd [ 333.058369][ T7128] loop4: detected capacity change from 0 to 128 [ 333.158820][ T7128] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.319868][ T7128] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.071386][ T7154] loop4: detected capacity change from 0 to 764 [ 336.161463][ T7165] loop3: detected capacity change from 0 to 512 [ 336.198403][ T7165] EXT4-fs (loop3): Ignoring removed bh option [ 336.242171][ T7165] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 336.420333][ T7165] EXT4-fs (loop3): 1 truncate cleaned up [ 336.428796][ T7165] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 336.467762][ T7168] loop0: detected capacity change from 0 to 1024 [ 336.506956][ T7168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.835302][ T7214] loop3: detected capacity change from 0 to 1024 [ 341.077061][ T7214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.880032][ T7245] loop3: detected capacity change from 0 to 128 [ 344.410528][ T7245] hpfs: hpfs_map_sector(): read error [ 344.428356][ T7245] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 346.167157][ T7245] hpfs: hpfs_map_sector(): read error [ 346.548560][ T7273] loop2: detected capacity change from 0 to 512 [ 346.785352][ T7273] EXT4-fs (loop2): Ignoring removed bh option [ 346.811231][ T7279] loop5: detected capacity change from 0 to 256 [ 347.020016][ T7273] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 347.409969][ T7273] EXT4-fs (loop2): 1 truncate cleaned up [ 347.415776][ T7273] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 349.397589][ T5420] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 349.657535][ T5420] usb 3-1: Using ep0 maxpacket: 32 [ 349.939172][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.755'. [ 350.008043][ T5420] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 350.074280][ T5420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.558098][ T5420] usb 3-1: Product: syz [ 350.572822][ T5420] usb 3-1: Manufacturer: syz [ 350.627940][ T5420] usb 3-1: SerialNumber: syz [ 350.668507][ T5420] usb 3-1: config 0 descriptor?? [ 350.739884][ T5420] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 351.377496][ T5420] gspca_stk1135: reg_w 0x2 err -110 [ 351.384202][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.415033][ T5420] gspca_stk1135: Sensor write failed [ 351.430101][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.453072][ T5420] gspca_stk1135: Sensor write failed [ 351.457880][ T7331] loop4: detected capacity change from 0 to 512 [ 351.466347][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.490500][ T5420] gspca_stk1135: Sensor read failed [ 351.495795][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.512521][ T7331] EXT4-fs (loop4): Ignoring removed bh option [ 351.527863][ T5420] gspca_stk1135: Sensor read failed [ 351.540445][ T5420] gspca_stk1135: Detected sensor type unknown (0x0) [ 351.542027][ T7331] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 351.557075][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.577259][ T5420] gspca_stk1135: Sensor read failed [ 351.582927][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.597285][ T5420] gspca_stk1135: Sensor read failed [ 351.603056][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.617254][ T5420] gspca_stk1135: Sensor write failed [ 351.622617][ T7331] EXT4-fs (loop4): 1 truncate cleaned up [ 351.622935][ T5420] gspca_stk1135: serial bus timeout: status=0x00 [ 351.652839][ T5420] gspca_stk1135: Sensor write failed [ 351.665965][ T5420] stk1135: probe of 3-1:0.0 failed with error -110 [ 351.673383][ T7331] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 352.124678][ T7323] loop0: detected capacity change from 0 to 32768 [ 352.132776][ T5420] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.217429][ T26] audit: type=1800 audit(1754418862.242:7): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.759" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 352.417184][ T5420] usb 6-1: Using ep0 maxpacket: 16 [ 352.650337][ T5420] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 353.109318][ T5420] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.210849][ T4184] usb 3-1: USB disconnect, device number 7 [ 353.670592][ T5420] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.883443][ T5420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.036992][ T5420] usb 6-1: Product: syz [ 354.041632][ T5420] usb 6-1: Manufacturer: syz [ 354.046472][ T5420] usb 6-1: SerialNumber: syz [ 354.504493][ T7363] loop0: detected capacity change from 0 to 256 [ 354.565254][ T7363] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.791791][ T5420] usb 6-1: 0:2 : does not exist [ 355.843192][ T5420] usb 6-1: USB disconnect, device number 6 [ 355.972411][ T7365] loop2: detected capacity change from 0 to 4096 [ 356.001039][ T7370] loop4: detected capacity change from 0 to 128 [ 356.039200][ T7379] loop5: detected capacity change from 0 to 512 [ 356.061524][ T7370] hpfs: hpfs_map_sector(): read error [ 356.076024][ T7370] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 356.095427][ T7365] ntfs3: loop2: ino=3, Correct links count -> 2. [ 356.106398][ T7370] hpfs: hpfs_map_sector(): read error [ 356.125613][ T7379] EXT4-fs (loop5): Ignoring removed bh option [ 356.248914][ T7379] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 356.398550][ T7379] EXT4-fs (loop5): 1 truncate cleaned up [ 356.406322][ T7379] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 356.496191][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.813563][ T7409] loop4: detected capacity change from 0 to 1024 [ 358.131567][ T7409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.159790][ T7409] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.215865][ T7409] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.781: lblock 0 mapped to illegal pblock 0 (length 6) [ 358.304400][ T7409] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.358763][ T7422] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 3: comm syz.4.781: lblock 3 mapped to illegal pblock 3 (length 3) [ 358.394427][ T7422] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 358.416707][ T5414] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 358.439526][ T7422] EXT4-fs (loop4): This should not happen!! Data will be lost [ 358.439526][ T7422] [ 358.533506][ T4446] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 358.610987][ T7429] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 358.621018][ T7429] ALSA: mixer_oss: invalid OSS volume 'LI' [ 358.652742][ T4446] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 358.666239][ T4446] EXT4-fs (loop4): This should not happen!! Data will be lost [ 358.666239][ T4446] [ 358.676581][ T5414] usb 3-1: Using ep0 maxpacket: 16 [ 358.998439][ T5414] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 359.014466][ T5414] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.947127][ T5414] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.981228][ T5414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.073872][ T5414] usb 3-1: Product: syz [ 360.084016][ T5414] usb 3-1: Manufacturer: syz [ 360.119069][ T5414] usb 3-1: SerialNumber: syz [ 360.467488][ T5414] usb 3-1: 0:2 : does not exist [ 360.961474][ T5414] usb 3-1: USB disconnect, device number 8 [ 361.537185][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.181927][ T7495] loop3: detected capacity change from 0 to 128 [ 364.946436][ T5427] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 365.738811][ T7495] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.785951][ T7495] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.837660][ T5427] usb 6-1: Using ep0 maxpacket: 16 [ 365.864394][ T7516] loop2: detected capacity change from 0 to 256 [ 366.042970][ T7520] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 366.053281][ T7520] ALSA: mixer_oss: invalid OSS volume 'LI' [ 366.127705][ T5427] usb 6-1: unable to read config index 0 descriptor/all [ 366.138928][ T5427] usb 6-1: can't read configurations, error -71 [ 368.446214][ T7538] loop3: detected capacity change from 0 to 1024 [ 368.568212][ T7538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.220408][ T7550] loop2: detected capacity change from 0 to 128 [ 370.466205][ T7550] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.481591][ T7550] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 371.120173][ T7550] 9pnet: Insufficient options for proto=fd [ 371.443612][ T7547] loop4: detected capacity change from 0 to 1024 [ 371.617013][ T7547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.834810][ T2281] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 374.224860][ T2281] usb 1-1: Using ep0 maxpacket: 16 [ 374.294880][ T21] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 374.322672][ T7582] tipc: Started in network mode [ 374.322798][ T7582] tipc: Node identity f664b23e3c66, cluster identity 4711 [ 374.323205][ T7582] tipc: Enabled bearer , priority 0 [ 374.344826][ T2281] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 374.344873][ T2281] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.421047][ T7584] loop5: detected capacity change from 0 to 1024 [ 374.489372][ T7582] tipc: Resetting bearer [ 374.524835][ T2281] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.534485][ T2281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.554081][ T7584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.654772][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.658400][ T7581] tipc: Disabling bearer [ 375.131882][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.143293][ T2281] usb 1-1: Product: syz [ 375.147827][ T2281] usb 1-1: Manufacturer: syz [ 375.152460][ T2281] usb 1-1: SerialNumber: syz [ 375.157532][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.169523][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.184432][ T21] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 375.194757][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.207977][ T21] usb 3-1: config 0 descriptor?? [ 375.414800][ T2281] usb 1-1: 0:2 : does not exist [ 375.651732][ T2281] usb 1-1: USB disconnect, device number 9 [ 376.853969][ T21] hid-generic 0003:1E71:2019.0001: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0 [ 376.951674][ T21] usb 3-1: USB disconnect, device number 9 [ 377.045426][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.239924][ T7611] fido_id[7611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 378.150399][ T7631] device syzkaller0 entered promiscuous mode [ 378.507802][ T7638] loop4: detected capacity change from 0 to 1024 [ 378.564630][ T5414] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 378.610070][ T7638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.679646][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.697084][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.914312][ T5414] usb 4-1: Using ep0 maxpacket: 16 [ 379.034550][ T5414] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 379.108657][ T5414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.374530][ T5414] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.400692][ T5414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.442040][ T5414] usb 4-1: Product: syz [ 379.463081][ T5414] usb 4-1: Manufacturer: syz [ 379.478481][ T5414] usb 4-1: SerialNumber: syz [ 380.376651][ T5414] usb 4-1: 0:2 : does not exist [ 380.543854][ T5414] usb 4-1: USB disconnect, device number 7 [ 383.910758][ T7683] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 383.924491][ T7683] ALSA: mixer_oss: invalid OSS volume 'LI' [ 384.030906][ T7687] device syzkaller0 entered promiscuous mode [ 387.287510][ T7718] loop3: detected capacity change from 0 to 256 [ 388.124164][ T7734] device syzkaller0 entered promiscuous mode [ 389.930110][ T7762] loop5: detected capacity change from 0 to 256 [ 389.940791][ T7762] exfat: Unknown parameter 'keep_last_dots' [ 390.548735][ T7761] loop4: detected capacity change from 0 to 128 [ 390.563924][ T7761] hpfs: hpfs_map_sector(): read error [ 390.569620][ T7761] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 390.581941][ T7761] hpfs: hpfs_map_sector(): read error [ 390.867976][ T7769] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 390.878826][ T7769] ALSA: mixer_oss: invalid OSS volume 'LI' [ 392.057795][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 392.145585][ T7792] device syzkaller0 entered promiscuous mode [ 394.211158][ T7833] device syzkaller0 entered promiscuous mode [ 395.130235][ T146] block nbd4: Receive control failed (result -11) [ 395.394955][ T7837] block nbd4: shutting down sockets [ 395.606876][ T7846] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 395.620477][ T7846] ALSA: mixer_oss: invalid OSS volume 'LI' [ 395.749848][ T7852] loop4: detected capacity change from 0 to 256 [ 397.974421][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 398.919109][ T7889] device syzkaller0 entered promiscuous mode [ 401.580700][ T7906] loop3: detected capacity change from 0 to 128 [ 401.628000][ T7918] loop2: detected capacity change from 0 to 256 [ 401.900868][ T7906] hpfs: hpfs_map_sector(): read error [ 401.911794][ T7906] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 401.945279][ T7906] hpfs: hpfs_map_sector(): read error [ 402.613830][ T7928] device syzkaller0 entered promiscuous mode [ 406.113882][ T7966] loop5: detected capacity change from 0 to 1024 [ 406.900787][ T7966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.265849][ T8007] loop4: detected capacity change from 0 to 512 [ 409.329223][ T8007] EXT4-fs (loop4): Ignoring removed bh option [ 409.349518][ T8007] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 409.407958][ T8007] EXT4-fs (loop4): 1 truncate cleaned up [ 409.416090][ T8007] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 411.097599][ T8026] loop2: detected capacity change from 0 to 256 [ 412.018271][ T8023] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 412.030595][ T8023] netlink: 224 bytes leftover after parsing attributes in process `syz.3.956'. [ 415.206906][ T8054] device syzkaller0 entered promiscuous mode [ 417.336045][ T8078] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.580253][ T8078] blk_update_request: I/O error, dev loop0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.619370][ T8078] Mount JFS Failure: -5 [ 417.681542][ T8078] jfs_mount failed w/return code = -5 [ 417.945646][ T8094] loop4: detected capacity change from 0 to 64 [ 417.986479][ T8098] INFO: trying to register non-static key. [ 417.992811][ T8098] The code is fine but needs lockdep annotation, or maybe [ 418.000316][ T8098] you didn't initialize this object before use? [ 418.007435][ T8098] turning off the locking correctness validator. [ 418.014493][ T8098] CPU: 0 PID: 8098 Comm: syz.3.979 Not tainted 5.15.189-syzkaller #0 [ 418.023181][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.033400][ T8098] Call Trace: [ 418.036891][ T8098] [ 418.040044][ T8098] dump_stack_lvl+0x168/0x230 [ 418.045172][ T8098] ? show_regs_print_info+0x20/0x20 [ 418.050570][ T8098] ? load_image+0x3b0/0x3b0 [ 418.055385][ T8098] ? cpumask_next+0xb3/0xd0 [ 418.059945][ T8098] ? __is_module_percpu_address+0x2a7/0x410 [ 418.065988][ T8098] ? is_kernel_percpu_address+0x143/0x160 [ 418.072298][ T8098] assign_lock_key+0x1e0/0x1f0 [ 418.077445][ T8098] ? SOFTIRQ_verbose+0x10/0x10 [ 418.082884][ T8098] ? mark_lock+0x94/0x320 [ 418.088488][ T8098] register_lock_class+0x20e/0x880 [ 418.093858][ T8098] ? is_dynamic_key+0x1f0/0x1f0 [ 418.099349][ T8098] ? rcu_lock_release+0x5/0x20 [ 418.104942][ T8098] __lock_acquire+0x160/0x7c60 [ 418.110365][ T8098] ? mark_lock+0x94/0x320 [ 418.115438][ T8098] ? __lock_acquire+0x12d9/0x7c60 [ 418.122345][ T8098] ? unwind_get_return_address+0x49/0x80 [ 418.129038][ T8098] ? arch_stack_walk+0xf2/0x140 [ 418.133959][ T8098] ? verify_lock_unused+0x140/0x140 [ 418.139466][ T8098] ? verify_lock_unused+0x140/0x140 [ 418.145327][ T8098] ? stack_trace_save+0x98/0xe0 [ 418.150486][ T8098] ? stack_trace_snprint+0xf0/0xf0 [ 418.155770][ T8098] ? verify_lock_unused+0x140/0x140 [ 418.161402][ T8098] lock_acquire+0x197/0x3f0 [ 418.165954][ T8098] ? gsmld_write+0x57/0x120 [ 418.170924][ T8098] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.177534][ T8098] ? read_lock_is_recursive+0x10/0x10 [ 418.183055][ T8098] ? _copy_from_iter+0x90f/0x1150 [ 418.188476][ T8098] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 418.194397][ T8098] ? lockdep_hardirqs_off+0x70/0x100 [ 418.201125][ T8098] _raw_spin_lock_irqsave+0xa4/0xf0 [ 418.206663][ T8098] ? gsmld_write+0x57/0x120 [ 418.211217][ T8098] ? _raw_spin_lock+0x40/0x40 [ 418.216383][ T8098] ? __virt_addr_valid+0x3c6/0x470 [ 418.221709][ T8098] gsmld_write+0x57/0x120 [ 418.226278][ T8098] file_tty_write+0x557/0x910 [ 418.231088][ T8098] ? gsmld_read+0x10/0x10 [ 418.238856][ T8101] loop5: detected capacity change from 0 to 128 [ 418.239446][ T8098] do_iter_readv_writev+0x497/0x600 [ 418.252766][ T8098] ? generic_file_rw_checks+0x280/0x280 [ 418.259157][ T8101] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 418.259329][ T8098] ? common_file_perm+0x171/0x1c0 [ 418.277303][ T8098] ? fsnotify_perm+0x5d/0x560 [ 418.282197][ T8098] ? security_file_permission+0x75/0xa0 [ 418.287976][ T8098] do_iter_write+0x205/0x7b0 [ 418.292702][ T8098] ? memset+0x1e/0x40 [ 418.297255][ T8098] ? iov_iter_bvec+0xb4/0x170 [ 418.302392][ T8098] iter_file_splice_write+0x65f/0xc40 [ 418.308708][ T8098] ? splice_from_pipe+0x150/0x150 [ 418.314149][ T8098] ? common_file_perm+0x171/0x1c0 [ 418.319380][ T8098] ? fsnotify_perm+0x5d/0x560 [ 418.324109][ T8098] ? security_file_permission+0x75/0xa0 [ 418.330019][ T8098] ? splice_from_pipe+0x150/0x150 [ 418.335065][ T8098] do_splice+0xe65/0x1640 [ 418.340113][ T8098] ? __fget_files+0x40f/0x480 [ 418.345144][ T8098] ? wait_for_space+0x2c0/0x2c0 [ 418.350555][ T8098] ? __fdget+0x18b/0x210 [ 418.355081][ T8098] __se_sys_splice+0x327/0x410 [ 418.360575][ T8098] ? __x64_sys_splice+0xf0/0xf0 [ 418.365718][ T8098] ? __x64_sys_splice+0x1d/0xf0 [ 418.371049][ T8098] do_syscall_64+0x4c/0xa0 [ 418.376204][ T8098] ? clear_bhb_loop+0x30/0x80 [ 418.381085][ T8098] ? clear_bhb_loop+0x30/0x80 [ 418.386385][ T8098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.392829][ T8098] RIP: 0033:0x7fc7209d4b69 [ 418.397451][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.418178][ T8098] RSP: 002b:00007fc71e81b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 418.427557][ T8098] RAX: ffffffffffffffda RBX: 00007fc720bfc080 RCX: 00007fc7209d4b69 [ 418.436011][ T8098] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 418.444401][ T8098] RBP: 00007fc720a57df1 R08: 000200000000622c R09: 0000000000000000 [ 418.454711][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.465112][ T8098] R13: 0000000000000001 R14: 00007fc720bfc080 R15: 00007ffebe205f28 [ 418.474410][ T8098] [ 418.501324][ T8101] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 418.763910][ T8105] bridge0: port 3(netdevsim0) entered blocking state [ 418.770655][ T8104] 9pnet: Insufficient options for proto=fd [ 418.772748][ T8105] bridge0: port 3(netdevsim0) entered disabled state [ 418.773739][ T8105] device netdevsim0 entered promiscuous mode [ 418.796567][ T8105] bridge0: port 3(netdevsim0) entered blocking state [ 418.803832][ T8105] bridge0: port 3(netdevsim0) entered forwarding state [ 419.018740][ T8107] loop4: detected capacity change from 0 to 512 [ 419.151400][ T8107] EXT4-fs (loop4): Test dummy encryption mode enabled [ 419.177688][ T8107] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 419.198691][ T8107] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 419.217148][ T8107] EXT4-fs (loop4): 1 truncate cleaned up [ 419.230593][ T8107] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.