last executing test programs: 1m32.109184006s ago: executing program 2 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61"], 0x0, 0x60}, 0x28) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1m30.23373729s ago: executing program 2 (id=1903): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000640)={[{@debug}, {@delalloc}, {@grpjquota}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@data_err_abort}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r3 = socket(0x10, 0x3, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r4 = socket$inet(0x2, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16], 0x5, 0x1548, &(0x7f0000004240)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJKkkSU4JSZJXEhJDSNKQhOQwJDGE5DAxaZzP50NCk6RJkpCckvW/Jubz9lX/eg9f3uud+3dd+7Lu2Xutfe/nnr2ftfdjnm+6DavdpE6NRkQE/xK88E8CAMQCwCAAyAsAAQBUiKsQl7k+p8SEf20n7N/rgeTLnQG7nLj+2RvXP3vj+mdvXP/sjeufvXH9szeuf/bG9WcsO9s8vdBVvGTfhZ//ZzvpY/+nye///0Uyyoz7Ym2Za7oDxPx8Cv4JMf/XObH/aHz+/9cK/sxGXP/sjeufXf3JCQL7r8bnf3aQ43fXcP2zN64/Y9nZ5X7+fLkXiPyHvQZHcl4ozF91/IwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2F/gtL9EAUBW+3LnxRhjjDHGGGOMsX8fn+NyZ8AYY4wxxhhjjLH/ewgCJCgIIAZyQCzkhFwgAOBKyAN5IQJXQRxcDfngGsgPBaAgFIJ4KAxFQIMBCwQhFIViEIVroThcByWgJJSC0uCgDJSF66Ec3ADl4UaoADdBRbgZKkFlqAJV4RaoBrdCdbgNasDtUBNqQW2oA3dAXbgT6sFdUB/uhgZwD9wL90FDuB8awQPQGB6EJvAQNIWHoRk0hxbQElr9U/2fg17wPPSGPpAAfaEfvAD9YQAMhBdhELwEg+FlGAKvQCIMhWHwKgyH12AEvA4jYRSMhjdgDLwJY2EcjIcJkAQTYRK8BZPhbZgC78BUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU0uGzf7D/qf/VvzsCAgoUqFBhDMZgLMZiLsyFuTE35sE8GMEIxmEc5sN8mB/zY0EsiPEYj0WwCBo0SEhYFItiFKNYHItjCSyBpbAUOnRYFstiObwBy2N5rIAVsCJWxEpYGStjVayK1bAaVsfqWANrYE2sibWxNt6Bd2BfrIf1sD7WxwbYIOvxFDbCRtgYG2MTbIJNsSk2w2bYAltgK2yFrbE1tsE22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xa7YDbthd+yBPTKeywH4PD6PfbCm6Iv9sB/2x8QcA/FFfBFfwsH4Mr6Mr2AiDsVh+Cq+iq/hCDyJI3EUjsbRWE28iWNxHJKYgEmYhJNwEk7GyZiZ6Ds4DZNxOs7AGTgTZ+EsfA/n4Pv4Ps7DebgAUzAFF+IiTMVUXIynMA2X4FJchstxBS7HVbgaV+FaXIdrcQNuwE24CbfgFtyG23AH7sCPUQHgJ7gH92AipmM67sN9uB/34wE8gBmYgQfxIB7CQ3gYD+MRPIJH8Rgex2N4Ak/gSTyFp/E0nsWzeA6fif+q8ccl1ySCyKSEEjEiRsSKWJFL5BK5RW6RR+QRERERcSJO5BP5RH6RXxQUBUW8iBdFRBFhhBEkwhgAEFERFcVFcVFClBClRCnhhBNlRVlRTpQT5UV5UUHcJCqKm0UlUVm0dVVFVVFNtHPVxW2ihqghaopaoraoI+qIuqKuqCfqifqivmggGoh7xX2ioeiLA/EBkVmZJmIoNhXDsJloLuTFK1hrMQLbiLainXhMjMKR2EG0dh3Fk6KTGIudxd/EOHxadBUTsJt4VnQXPURP8ZzoJdq43qKPmIJ9RT8xDfuLAWKgeFHMxFriPZyTs7Z4RSSKoWKYeFUswNfECPG6GClGidHiDTFGvCnGinFivJggksREMUm8JSaLt4UQ74ipYppIFtPFDPGumClmidniPTFHvC/minlivlggUsQHYqFYJFLFh2Kx+EikiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYquIhe1ih9gpPha7xCdit9gj9opPRbr4TOwTn4v94gtxQHwpMsRX4qD4WhwS34jD4ltxRHwnjopj4rj4XpwQP4iT4pQ4Lc6Is+JHcU78JM4LL0CiFFJKJQMZI3PIWJlT5pJXyNwyuPjqXiXj5NUyn7xG5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyWllcXidLyJKylCwtnSwjy8rrZTl5gywvb5QV5E2yorxZVpKVZRVZVd4iq8lbJUQu7KOmrCVryzryDpkAd8p68i5ZX94tG8h75L3yPtlQ3i8byQdkY/mgbCIfkk3lw7KZbC5byJaylXxEtpaPyjayrWwnH5Pt5eOyg3xCdpRPyk7SX/wVeVp2lc/IbvJZ2V32kD3lT/K89LK37COhL8h+8gXZXw6QA2MBQL4kB8uX5RD5ikyUQ+Uw+aocLl+TI+TrcqQcJUfLN+QY+aYcK8fJ8XKCTJIT5ST5lpws35ZT5Dtyqpwmk+V0OVAO+nmk2VL+Yf+3fqP/kJ/3vklullvkVrlNbpc75E75sdwld8ndcrfcK/fKdJku98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA1AoRJKKqUCFaNyqFiVU+VSV6jc6kqVR+VVEXWVilNXq3zqGpVfFVAFVSEVrwqrIkoro6wiFaqiqpiKqmvx4i+MKqVKK6fKqLLq+p/7Z33E8Af9VXF1nSqhSv6if1Z+Cb+TXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVEfVUXVSnVRn1Vl1UV1UV9VVdVPdVHfVXfVUPVUv1Uv1Vr1VgkpQ/dQLqr8aoAaqF9Ug9ZIarAarIWqISlSJapgapoar4WqEGqFGqpFqtBqtxqgxaqwaq8ar8SpJJalJapKarCarKWqKmqqmqmSVrGaoGWqmmqlmq9lqjpqj5qq5ar6ar1JUilqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3WK32qv2qnSVrvapfWq/2q8OqAMqQ2Wog+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcE+QPCgQFg0JBfFA4KBLowAQ2EBdrGw2uDYoH1wUlgpJBqaB04IIyQdng+qBccENQPrgxqBDcFFQMbg4qBZWDKkHV4JagWnBrUD24LagR3B7UDGoFtYM6wR1B3eDOoF4sBPWDu4MGwT3BvcF9QcPg/qBR8EDQOHgwaBI8FDQNHg6aBc2DFkHLoNU/M35w1++M7/3JAo+63rqPTtB9dT/9gu6vB+iB+kU9SL+kB+uX9RD9ik7UQ/Uw/aoerl/TI/TreqQepUfrN/QY/aYeq8fp8XqCTtIT9ST9lp6s39ZT9Dt6qp6mk/V0PUO/q2fqWXq2fk/P0e/ruXqenq8X6BT9gV6oF+lU/aFerD/SaXqJXqqX6eV6hV6pV+nVeo1eq9fp9XqD3qg36c16i96qt+nteofeqT/Wu/Qnerfeo/fqT3W6/kzv05/r/foLfUB/qTP0V/qg/lof0t/ow/pbfUR/p4/qY/q4/l6f0D/ok/qUPq3P6LP6R31O/6TPa585uc98ezfKKBNjYkysiTW5TC5THnKbPCaPiZiIiTNxJp/JZ/Kb/KagKWjiTbwpYoqYTGTIFDVFTdRETXFT3JQwJUwpU8o440xZU9aUM+VMeVPeVDAVTEVT0VQylUwVU8XcYm4xt5pbzW3mNnO7ud3UMrVMHVPH1DV1TT1Tz9Q39U0D08Dca+41DU1D08g0Mo1NY9PENDFNTVPTzDQzLUwL08q0Mq1Na9PGtDHtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13Uw30910Nz1NT9PL9DK9TW+TYBJMP9PP9Df9zUAz0Awyg8xgM9gMMUNMokk0w8wwM9wMNyPMCDPSjDKjMy9y5k0z1owz480Ek2SSzCQzyUw2k80UM8VMNVNNskk2M8wMM9PMNLPNbDPHzDFzzVwz38w3KSbFLDQLTapJNYvNYpNm0sxSs9QsN8vNSrPSrDarzVqz1qyH9Waj2Wg2m81mq9lqtpvtZqfZaXaZXWa32W32mr0m3aSbfWaf2W/2mwPmgMkwGeagOWgOmUPmsDlsjpgj5qg5ao6b4+aEOWFOmpPmtDltzpoCF98vvcm6mOe2V9o8Nq+NtTltLnuFvRBnzbwK2yJW2/y2gC1oC9l4eyE21toStqQtZUtbZ8vYsvb6X8WVbGVbxVa1t9hq9lZb/VdxXXunrWfvsvXt3baOveMXcQN7j82cnTREBLDNbWPb0jaxD9mm9mHbzDa3LWxL294+bjvYJ2xH+6TtZJ/6VbzQLrKr7Rq71q6zu+0ee9qesYfsN/as/dH2tn3sIPuSHWxftkPsKzbRDv1VPNq+YcfYN+1YO86OtxN+FU+102yynW5n2HftTDvrV3GK/cDOsal2rp1n59sFP8eZOaXaD+1i+5FNswEstcvscrvCrrSrsnL1ee0Gu9FusrvsJ3ar3Wa32x12Z1Y57B67135q0+1n9qD92u63X9gD9rDNsF/9HGce32H7rT1iv7NH7TF73H5vT9gfVFbvzGP/3v5kz1tvgZCAJCkKKIZyUCzlpFx0BeWmKykP5aUIXUVxdDXlo2soPxWgglSI4qkwFSFNhiwRhVSUilGUrqWs9EpRaXJUhsrS9VSObqDydCNVoJuoIt1MlagyVaGqdAtVo1upOt1GNeh2qkm1qDbVoTuoLt1J9eguqk93UwO6h+6l+6gh3U+N6AFqTA9SE3qImtLD1IyaUwtqSa3oEWpNj1Ibakvt6DFqT49TB3qCOtKT1Imeos70N+pCT1NXeoa60bPUnXpQT3qOetHz1Jv6UAL1pX70AvWnATSQXqRB9BINppdpCL1CiTSUhtGrNJxeoxH0Oo2kUTSa3qAx9CaNpXE0niZQEk2kSfQWTaa3aQq9Q1NpGiXTdJpB79JMmkWz6T2aQ+/TXJpH82kBpdAHtJAWUSp9SIvpI0qjJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQTvpY9pFn9Bu2kN76VNKp88I6XPaT1/QAfqSMugrOkhf0yH6hg7Tt74PfUdH6Rgdp+/pBP1AJ+kUnaYzdJZ+pHP0E50nTxBiKEIZqjAIY8IcYWyYM8wVXhHmDq8M84R5w0h4VRgXXh3mC68J84cFwoJhoTA+LBwWCXVoQhtSGIZFw2JhNLw2LB5eF5YIS4alwtKhC8uEZcPrw3LhDWH58MawQnhTWDG8OawUVg4furtqeEtYLbw1rB7eFtYIbw9rhrXC2mGd8I6wbnhnWC+8K6wf3h2WD+8J7w3vCxuG94eNwgfCxuGDYZPwobBp+HDYLGwetghbhq3CR8LW4aNhm7Bt2C58LGwfPh52CJ8IO4ZPhp3Cp35ef8+i31+fEPYN+4UvhC+E3t8l50cXRFOiH0QXRhdFU6MfRhdHP4qmRZdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vkwMcOuGkUy5wMS6Hi3U5XS53hcvtrnR5XF4XcVe5OHe1y+eucfldAVfQFXLxrrAr4rQzzjpyoSvqirmou9YVd9e5Eq6kK+VKO+fKuLKupWvlWrnW7lHXxrV17dxj7jH3uHvcPeGecE+6Tu4p19n9zXVxT7uu7hn3jHvWdXc9XE/3nOvlJua5cE4muH7O5+jv+ruBbqAb5Aa5wW6wG+KGuESX6Ia5YW64G+5GuBFupBvpRrvRbowb48a6sW68G++SXJKb5Ca5yW6ym+KmuKluqkt2yW6Gm+Fmupmu2qwLe5nr5rr5br5LcSluocucM6a6xW6xS3Npbqlb6pa75W6lW+lWu9VurVvr1rv1bqPb6Da7zW6r2+q2u+1up9vpdrldbrfPe2FQl+72uX1uv9vvDrgvXYb7yh10X7tD7ht32H3rjrjv3FF3zB1337sT7gd30p1yp90Zd9b96M65n9x5511SZGJkUuStyOTI25EpkXciUyPTIsmR6ZEZkXcjMyOzIrMj70XmRN6PzI3Mi8yPLIikRD6ILIwsiqRGPowsjnwUSYssiSyNLIssj6yIeF94a+iL+mI+6q/1xf11voQv6Uv50t75Mr6sv96X8zf48v5GX8Hf5Cv6m30lX9lX8Q/7Zr65b+Fb+lb+Ed/aP+rb+La+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/8338U/7bv6Z3w3/6zv7nv4nv4538s/73v7Pj7B9/X9/Au+vx/gB/oX/SD/kh/sX/ZD/Cs+0Q/1w/yrfrh/zY/wr/uRfpQfHfOGH5N1iwwTfJKf6Cf5t/xk/7af4t/xU/00n+yn+xn+XT/Tz/Kz/Xt+jn/fz/Xz/Hy/wKf4D/xCv8in+g/9Yv+RT/NLsh4q+5V+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/id/mO/y3/id/s9fq//1Kf7z/w+/7nf77/wB/yXPsN/5Q/6r/0h/40/7L/1R/x3/qg/5o/77/0J/4M/6U/50/6MP+t/9Of8T/48/80aY4wxxtifMvFSU/xyzYUnQH1/o4/4u437AcCV2wpl/P36zBnl+vwX2gNEfPsIADzZp9sDWUvNmgkJCRe3TZMQFJsHkPVJUKYYuBQvgXbwOHSEtlDuN/MfIHqcpT8YP3oTQK6/6xMLl+JL438OgAm/Mf4jj41eWDE8Hff/GX8eQIlil/rkhEvxEmj38/OVtlD+d/Iv0PoP8s/5RRJAm7/rkxsuxZfyLwuPwlPQ8RdbMsYYY4wxxhhjFwwQVbpk3X9m/Y/P37o/j1eX+uSAS/Ef3Z8zxhhjjDHGGGPs8nu6R88nHunYsW2Xf7xR/Y+3UZd+kvsf3UVT+GcT48Y/1fAe4H8KBwD/4oAAmQ35Vx7Flr9kX4kXT53/vWr5GR/Af0Yp/x2Ny3xhYowxxhhjjP3bXZr0//Ln6nIlxBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZUP/6ne8wZ/4lr7LfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbY5fb/AgAA//8Stve0") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd4", 0x2b}], 0x1) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 1m27.918672935s ago: executing program 2 (id=1910): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0xeffd) 1m27.475294818s ago: executing program 2 (id=1912): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000600)={{0x0, 0x0, 0x40, 0x6, 0x2}, {0x0, 0x0, 0x10, 0x244}, {0x0, 0x0, 0x8, 0x7, 0x1000}, {0x0, 0x0, 0x28, 0x8, 0x2}, {&(0x7f00000005c0)=[0x6], 0x1, 0x8, 0x3, 0x1}}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m24.755480463s ago: executing program 2 (id=1915): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 1m24.387436591s ago: executing program 2 (id=1918): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000f40)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@errors_remount}, {@jqfmt_vfsv0, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@norecovery}, {@minixdf}, {@data_err_ignore}], [{@fsname={'fsname', 0x3d, 'jqfmt=vfsv1'}}, {@uid_eq}, {@appraise_type}, {@euid_lt}], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") prctl$PR_MCE_KILL_GET(0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) lseek(r1, 0x100, 0x0) getdents64(r1, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x6) 1m24.00174343s ago: executing program 32 (id=1918): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000f40)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@errors_remount}, {@jqfmt_vfsv0, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@norecovery}, {@minixdf}, {@data_err_ignore}], [{@fsname={'fsname', 0x3d, 'jqfmt=vfsv1'}}, {@uid_eq}, {@appraise_type}, {@euid_lt}], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$eJzs3ElvHFUeAPB/te04zjL2ZNYsM+mZzAgLRBw764FDgkDKBQkJhMLR2E4U4iQoNlISWcRBKEgcQPkELDckPgEnuCBAHEBcibgipAj5ksABFarqatN2ub2l7cbx7yd151XVq37v31Uv/ZZuB7BpVbOnJGJHRHwXEb21zbkZqrV/7s9Mjfw8MzWSRJo+91OS57s3MzVSz1o/b3ux0V+JqLyRxN5ysd0T165fGB4fH7tS7BiYrBSpi8Pnxs6NXRo6ceLI4Z7jx4aOtiTOrE739rx2ed/u0y/efmbkzO2Xvvgoq29aHG+Mo6Yvf96y7BI6SnuqUZ37Xjb4//KrviHsbEgnndlzpX2VYdmyuza7XF15+++Njnyrpjeefr2tlQPWVJqmaXdp7+xn2XTaKElqJ6TpzRR4CCTR7hoA7VH/oL83k41Up0bK4+CH291TkY+AsrjvF4/akc58BFvtq42Nutao/L9GxJnpX97NHrHgPAQAQGt9cipiW9HvqD9qRyrx94Z8fyrWhvoi4s8RsSsi/lL0X/4Wkef9R0T8s+GcHctYBajO2y73f77pKRKN3dWWyfp/TxRrW3P7f7M17+sotnbm8XclZ8+Pjx0q3pP+6OrOtgfLLz07rfbpU9++06z8akP/L3tk5df7gkU9fuycN0E3Ojw5/KBx1929mb+xN8rxJ9GZ1FMRuyNizypeP3vPzj/64b5mx+fEn8VZiv/t5i/euYoKzZO+H/FI7fpPx7z4o1j/S/L1yYuvDExcu/74+cb1ycHjx4aODmyN8bFDA/W7ouzLr289WyRLw4hFrn+9aazpQlp2/bcteP/Prlz2ZanZ9dqJlZdx686bTcc0q73/tyTP5+n6+uzV4cnJK4MRW5Lp8v6h38+9OtwzJ38Wf/+Bhdv/rohf3yvO2xsR2U38r4j4d0TsL+r+n4j4b0QcWCT+z5/838vNhpBLx7+2svhHV3T9myVOfhWx8KGOC599XCr4rWop/q5odv2P5Kn+Ys/o8OTWpeJarKaNiQd+AwEAAGAD2J/P0yaVg8VE046oVA4ejNg+O4MyMfnY2cuvXhqtzef2RVelPtPV2zAfOljMDWfb2VlDDdvZ8cP5vHGapmlPtp2N38d3tjd02PS2N2n/mR/KP2kBHjYrWkdr9os2YEOa3/7vLPvM1n8hA1hfLfgeDbBBaf+weS27/a/Vr+CAtlmo/d+IuN+GqgDrbKH2/0Jpz8l1qQuwvoz/YfNaffv3ZQDY6Hz+w6a0rB/JryKx6/QieZLOtSm0eaISi/8VgL6I+p56n2bxF/y+EtGaGna0NNKeOde0smCerdGKsqKyZJ7OFfwhhvVNVP4Y1agluiNiibt39ma7UU9cX+uK5Y3gg/b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDgfgsAAP//RUTTKw==") prctl$PR_MCE_KILL_GET(0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) lseek(r1, 0x100, 0x0) getdents64(r1, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x6) 18.258518029s ago: executing program 3 (id=2112): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x34f}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r4, 0x0, 0x0, 0x12000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 15.770073973s ago: executing program 1 (id=2113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61"], 0x0, 0x60}, 0x28) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 15.690151987s ago: executing program 3 (id=2115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140)=0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.347592264s ago: executing program 0 (id=2116): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 14.408495501s ago: executing program 0 (id=2117): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) madvise(&(0x7f000014b000/0xc00000)=nil, 0xc00000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @loopback}, {0x6, @multicast}, 0x6d, {0x2, 0x4e21, @empty}, 'bridge0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r6, 0x37, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) 12.071179818s ago: executing program 3 (id=2118): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 11.507680056s ago: executing program 1 (id=2119): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@mcast2, 0x2c}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x9, 0x0, 0x8, 0x7}, 0x3de, 0x0, 0x7, 0x5, 0x3, 0x16, 0xc, 0x13, 0x6, 0x8, {0x4, 0x2d, 0x9, 0x1, 0xffffffff}}}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x9, 0x1000, 0x73, 0x2, 0x4ff, 0x5850, 0x6}}, {0x10, 0x2, [0x5, 0x602, 0x1, 0xfff8, 0xd4, 0x3]}}, {{0x1c, 0x1, {0x4, 0x7, 0x4, 0x9c, 0x2, 0x4, 0xad8, 0x3}}, {0xa, 0x2, [0x7, 0xc, 0x101]}}]}]}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xc4, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x94, 0x2, [@TCA_FLOW_POLICE={0x88, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x81, 0x2, 0x2, 0x3, 0x3, 0x8}, {0x5, 0x1, 0x3, 0xa9, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x2, 0x67a5, 0xc, 0x0, {0x7, 0x0, 0xd, 0xe10e, 0x9, 0xa}, {0x70, 0x0, 0x7, 0x6, 0x0, 0x2}, 0x5000000, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x632}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x41090}, 0xd0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x1) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1ff, 0x2, 0x5d33, 0x100000001, 0x0, 0x3, 0x8000, 0x4}, &(0x7f0000000240)={0x8, 0x3, 0x7, 0x6, 0x1000, 0x49d987f, 0x8, 0xff}, &(0x7f0000000080)={0x0, 0x7e, 0x52a, 0x7, 0xbe2a, 0x100000001, 0xecdb, 0x5}, &(0x7f0000000100)={r6, r7+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8}) 9.954991503s ago: executing program 1 (id=2121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 9.770917702s ago: executing program 3 (id=2122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9.711440196s ago: executing program 0 (id=2123): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x34f}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r4, 0x0, 0x0, 0x12000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.771502332s ago: executing program 3 (id=2124): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001080)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x200, 0x3, 0x8, 0x3, 0x5}}, 0x118) 8.770356892s ago: executing program 4 (id=2125): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 8.600498111s ago: executing program 0 (id=2126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 8.579690772s ago: executing program 4 (id=2127): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x80301, 0xc32a4cddd55770f9) fallocate(r1, 0x0, 0x0, 0x9000f4) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4) 7.515534855s ago: executing program 3 (id=2128): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x880, &(0x7f0000000040)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@numtail}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@utf8no}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}]}, 0x26, 0x358, &(0x7f00000008c0)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) 7.332134034s ago: executing program 4 (id=2130): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 3.784515491s ago: executing program 0 (id=2131): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@mcast2, 0x2c}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x9, 0x0, 0x8, 0x7}, 0x3de, 0x0, 0x7, 0x5, 0x3, 0x16, 0xc, 0x13, 0x6, 0x8, {0x4, 0x2d, 0x9, 0x1, 0xffffffff}}}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x9, 0x1000, 0x73, 0x2, 0x4ff, 0x5850, 0x6}}, {0x10, 0x2, [0x5, 0x602, 0x1, 0xfff8, 0xd4, 0x3]}}, {{0x1c, 0x1, {0x4, 0x7, 0x4, 0x9c, 0x2, 0x4, 0xad8, 0x3}}, {0xa, 0x2, [0x7, 0xc, 0x101]}}]}]}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xc4, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x94, 0x2, [@TCA_FLOW_POLICE={0x88, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x81, 0x2, 0x2, 0x3, 0x3, 0x8}, {0x5, 0x1, 0x3, 0xa9, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x2, 0x67a5, 0xc, 0x0, {0x7, 0x0, 0xd, 0xe10e, 0x9, 0xa}, {0x70, 0x0, 0x7, 0x6, 0x0, 0x2}, 0x5000000, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x632}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x41090}, 0xd0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x1) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1ff, 0x2, 0x5d33, 0x100000001, 0x0, 0x3, 0x8000, 0x4}, &(0x7f0000000240)={0x8, 0x3, 0x7, 0x6, 0x1000, 0x49d987f, 0x8, 0xff}, &(0x7f0000000080)={0x0, 0x7e, 0x52a, 0x7, 0xbe2a, 0x100000001, 0xecdb, 0x5}, &(0x7f0000000100)={r6, r7+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8}) 3.739832913s ago: executing program 1 (id=2132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.358096142s ago: executing program 1 (id=2133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffdf5b20, @dev={0xfe, 0x80, '\x00', 0x42}, 0x6}, 0x1c) 1.568183632s ago: executing program 4 (id=2134): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x34f}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r4, 0x0, 0x0, 0x12000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.306469425s ago: executing program 4 (id=2135): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB], 0x48) clock_getres(0x7ffffffff000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x3901, 0x4) recvfrom$packet(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8402, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'trylock', ' ', 'io+mem'}, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="28000000680001000000000000000000020000000000000008000600f2000000080005002658"], 0x28}}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000280)="381b316b16ac9a71469cfec28b009a9d13d3c80035815278e9bb4b511e542f2dbed1b62f1116249fd14905a0e0506a3083c8b7f11f6c841133abe918a56ca53518592d74748db653c959b28ab1a056398fab88b235064877290bb536d4a29cc18bc52a8ac07e782f055df4e73ed29e6b91ad7943ad10343d1f835c58202347d5660710de416dae0525c54498a37dd6f7113bd641d1472245554f2fc87b5e6161e6a401d20a049c501e649ef5c2c1d40e6442c92b422feffd7f74c3286f63217658a439c456d58bc7", &(0x7f0000000380)=""/239, &(0x7f0000000000)="b4c17c1bdb7b10aee7f0c7f6cda522235f869d430fa30b5ad7f1b4932b58d78b810a54b7ce613baf5fd9d29ea59c3cc67b714567a376a3700cf30f3c416acdfb31f81c453de313a667829f2aa713b9b0e743ba372f0f9ec5066a05acf8ebada09261c4a9edc88e65747a89480a13eb4be3fb8d", &(0x7f0000000480)="6872297f7fd86907d5e4f588f3a1ecf51514c7a84c76a7b62f6b0e00013c527fe4d51211cb028efd6e158a0a110fc42997c7ccd1447648d21c2328c7f45cfce3279eeb02a569c4866dbc90101b9e20", 0x707d, r5, 0x4}, 0x38) 935.609µs ago: executing program 1 (id=2136): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0x31, "858eed3c"}}, 0x0}, 0x0) 579.23µs ago: executing program 4 (id=2137): r0 = syz_usb_connect$midi(0x5, 0x4b, &(0x7f0000001680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x100f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0x9, 0x60, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x10, 0xf1, [], [{{0x9, 0x5, 0xd, 0x2, 0x40, 0x3, 0x9, 0x1, {0x4}}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0x6, 0x5, {0x4}}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0xff, 0x8, 0x80, {0x4}}}]}}}}}]}}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x80, 0x1000, &(0x7f0000005080)=""/4096) 0s ago: executing program 0 (id=2138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@grpjquota}, {@bsdgroups}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@block_validity}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x8) setuid(0xee00) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) fdatasync(r1) read$FUSE(r1, &(0x7f0000001f00)={0x2020}, 0x2020) sendfile(r1, r1, 0x0, 0xe3aa6ea) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, 0x0, 0x4840) kernel console output (not intermixed with test programs): ge [ 179.610683][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 179.619548][ T9] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 179.728705][ T7213] loop3: detected capacity change from 0 to 2048 [ 179.762216][ T7213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.842028][ T27] audit: type=1804 audit(1774584900.223:5): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.353" name="/newroot/96/file0/file1" dev="loop3" ino=1367 res=1 errno=0 [ 180.379935][ T7221] syzkaller0: entered promiscuous mode [ 180.382337][ T8] usb 1-1: USB disconnect, device number 3 [ 180.411343][ T7221] syzkaller0: entered allmulticast mode [ 180.491833][ T7224] netlink: 76 bytes leftover after parsing attributes in process `syz.1.357'. [ 181.825092][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.366'. [ 181.862943][ T7249] netlink: 76 bytes leftover after parsing attributes in process `syz.2.365'. [ 181.888842][ T7249] syzkaller0: entered promiscuous mode [ 181.923229][ T7249] syzkaller0: entered allmulticast mode [ 182.038672][ T7259] netlink: 76 bytes leftover after parsing attributes in process `syz.0.368'. [ 183.105457][ T7288] sd 0:0:1:0: device reset [ 183.670601][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 183.853808][ T7294] syzkaller0: entered promiscuous mode [ 183.882434][ T7294] syzkaller0: entered allmulticast mode [ 183.905676][ T7299] syzkaller0: entered promiscuous mode [ 183.917033][ T7299] syzkaller0: entered allmulticast mode [ 185.209096][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 185.235846][ T7328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.391'. [ 185.308628][ T7330] block device autoloading is deprecated and will be removed. [ 185.441992][ T7333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.393'. [ 185.635984][ T7340] syzkaller0: entered promiscuous mode [ 185.649816][ T7340] syzkaller0: entered allmulticast mode [ 185.702843][ T7344] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 185.988401][ T7344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.678663][ T7346] bond6: (slave veth7): Enslaving as an active interface with a down link [ 186.781169][ T7351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'. [ 186.884003][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 187.017986][ T7360] md: could not open device unknown-block(0,0). [ 187.031977][ T7360] md: md_import_device returned -6 [ 187.155212][ T7379] netlink: 68 bytes leftover after parsing attributes in process `syz.1.405'. [ 187.350925][ T7387] syzkaller0: entered promiscuous mode [ 187.368536][ T7387] syzkaller0: entered allmulticast mode [ 187.528521][ T7393] loop2: detected capacity change from 0 to 256 [ 187.610847][ T7393] FAT-fs (loop2): Directory bread(block 64) failed [ 187.629840][ T7393] FAT-fs (loop2): Directory bread(block 65) failed [ 187.656716][ T7393] FAT-fs (loop2): Directory bread(block 66) failed [ 187.677148][ T7393] FAT-fs (loop2): Directory bread(block 67) failed [ 187.702564][ T7393] FAT-fs (loop2): Directory bread(block 68) failed [ 187.721602][ T7393] FAT-fs (loop2): Directory bread(block 69) failed [ 187.729152][ T7393] FAT-fs (loop2): Directory bread(block 70) failed [ 187.736966][ T7393] FAT-fs (loop2): Directory bread(block 71) failed [ 187.744243][ T7393] FAT-fs (loop2): Directory bread(block 72) failed [ 187.751144][ T7393] FAT-fs (loop2): Directory bread(block 73) failed [ 188.555736][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 188.775920][ T7409] netlink: 68 bytes leftover after parsing attributes in process `syz.3.416'. [ 188.850631][ T7410] block device autoloading is deprecated and will be removed. [ 188.900364][ T7413] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 189.072115][ T7413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.088259][ T7418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.417'. [ 189.108556][ T7419] syzkaller0: entered promiscuous mode [ 189.114492][ T7419] syzkaller0: entered allmulticast mode [ 189.809913][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 189.889870][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 190.012374][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 190.018878][ T7435] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 190.035638][ T5830] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.052831][ T5830] usb 3-1: config 179 has no interface number 0 [ 190.061207][ T5830] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 190.099227][ T5830] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 190.131771][ T5830] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.150324][ T5830] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 190.169903][ T5830] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.190181][ T5830] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.200467][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.233293][ T7424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.581236][ T7450] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 190.643388][ T7450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.684754][ T7453] bond3: (slave veth5): Enslaving as an active interface with a down link [ 190.705111][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.429'. [ 191.922160][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.432'. [ 192.523891][ T7481] block device autoloading is deprecated and will be removed. [ 192.547620][ T9] usb 3-1: USB disconnect, device number 5 [ 192.547668][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 192.564791][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 192.652021][ T7483] loop3: detected capacity change from 0 to 512 [ 192.669902][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.707114][ T7483] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 193.015678][ T7489] syzkaller0: entered promiscuous mode [ 193.031845][ T7489] syzkaller0: entered allmulticast mode [ 193.054166][ T7489] tipc: Started in network mode [ 193.066074][ T7489] tipc: Node identity 8685e710a3f9, cluster identity 4711 [ 193.090074][ T7489] tipc: Enabled bearer , priority 0 [ 193.126786][ T7488] tipc: Resetting bearer [ 193.174895][ T11] tipc: Subscription rejected, illegal request [ 193.269848][ T7488] tipc: Disabling bearer [ 193.480404][ T7498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.443'. [ 194.720731][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727312][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.443672][ T7529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.455'. [ 196.494062][ T7539] vivid-000: disconnect [ 197.344560][ T7532] vivid-000: reconnect [ 197.366149][ T7544] loop3: detected capacity change from 0 to 128 [ 197.376510][ T7541] syzkaller0: entered promiscuous mode [ 197.412973][ T7544] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ" or missing value [ 197.433803][ T7541] syzkaller0: entered allmulticast mode [ 198.773542][ T7571] tipc: Started in network mode [ 198.778645][ T7571] tipc: Node identity 32e84e508ca2, cluster identity 4711 [ 198.811692][ T7571] tipc: Enabled bearer , priority 0 [ 198.822297][ T7571] syzkaller0: entered promiscuous mode [ 198.828239][ T7571] syzkaller0: entered allmulticast mode [ 198.886223][ T7575] loop1: detected capacity change from 0 to 512 [ 198.935982][ T7575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.954585][ T7571] tipc: Resetting bearer [ 198.958530][ T7575] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.001738][ T7581] syzkaller0: entered promiscuous mode [ 199.008184][ T7581] syzkaller0: entered allmulticast mode [ 199.028477][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.038967][ T7569] tipc: Resetting bearer [ 199.119702][ T7569] tipc: Disabling bearer [ 199.370673][ T7593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.477'. [ 200.589051][ T7600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.482'. [ 200.705839][ T7604] loop0: detected capacity change from 0 to 512 [ 200.739049][ T7604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.739157][ T7604] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.888680][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.436533][ T7627] netlink: 48 bytes leftover after parsing attributes in process `syz.1.490'. [ 202.504330][ T7634] loop2: detected capacity change from 0 to 512 [ 202.516710][ T7631] netlink: 76 bytes leftover after parsing attributes in process `syz.0.493'. [ 203.735805][ T7643] loop1: detected capacity change from 0 to 128 [ 203.744650][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.793861][ T7634] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.856169][ T7643] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52) [ 203.866535][ T7643] FAT-fs (loop1): Filesystem has been set read-only [ 203.978724][ T7643] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52) [ 203.983981][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.072277][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 204.237578][ T7659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.500'. [ 204.501905][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 204.515063][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.554699][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.600818][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.639802][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.651585][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.664009][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.682894][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 204.708520][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.840779][ T9] usb 4-1: config 0 descriptor?? [ 205.145441][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.354112][ T7669] syzkaller0: entered promiscuous mode [ 205.380572][ T7669] syzkaller0: entered allmulticast mode [ 205.465739][ T788] usb 4-1: USB disconnect, device number 2 [ 205.504907][ T788] usblp0: removed [ 206.440902][ T7679] netlink: 76 bytes leftover after parsing attributes in process `syz.0.506'. [ 206.635001][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 206.712912][ T7689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.511'. [ 207.372112][ T7686] IPv6: sit2: Disabled Multicast RS [ 207.477050][ T7686] sit2: entered allmulticast mode [ 207.722401][ T7701] netlink: 776 bytes leftover after parsing attributes in process `syz.3.516'. [ 208.404935][ T7707] loop3: detected capacity change from 0 to 256 [ 208.558713][ T7707] FAT-fs (loop3): Directory bread(block 64) failed [ 208.565984][ T7707] FAT-fs (loop3): Directory bread(block 65) failed [ 208.582148][ T7707] FAT-fs (loop3): Directory bread(block 66) failed [ 208.597535][ T7707] FAT-fs (loop3): Directory bread(block 67) failed [ 208.620433][ T7707] FAT-fs (loop3): Directory bread(block 68) failed [ 208.629150][ T7713] netlink: 76 bytes leftover after parsing attributes in process `syz.2.520'. [ 208.638905][ T7707] FAT-fs (loop3): Directory bread(block 69) failed [ 208.667458][ T7707] FAT-fs (loop3): Directory bread(block 70) failed [ 208.687138][ T7707] FAT-fs (loop3): Directory bread(block 71) failed [ 208.701283][ T7707] FAT-fs (loop3): Directory bread(block 72) failed [ 208.731518][ T7707] FAT-fs (loop3): Directory bread(block 73) failed [ 208.768712][ T7717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.522'. [ 209.915860][ T7728] syz.3.526 (7728) used greatest stack depth: 20776 bytes left [ 211.101525][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 211.312059][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 211.342177][ T7745] netlink: 76 bytes leftover after parsing attributes in process `syz.2.531'. [ 211.413677][ T7749] netlink: 48 bytes leftover after parsing attributes in process `syz.3.532'. [ 212.179258][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.191729][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.202383][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.212971][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.226727][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.237211][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.473130][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 212.493807][ T9] usbtmc 1-1:16.0: can't read capabilities [ 213.414115][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.521882][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.815888][ T7792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.542'. [ 213.881090][ T7794] tipc: Started in network mode [ 213.899552][ T7794] tipc: Node identity daec011a9f6c, cluster identity 4711 [ 213.925506][ T7794] tipc: Enabled bearer , priority 0 [ 213.982570][ T7801] syzkaller0: entered promiscuous mode [ 214.000286][ T7801] syzkaller0: entered allmulticast mode [ 214.049369][ T7794] tipc: Resetting bearer [ 214.080120][ T7793] tipc: Resetting bearer [ 214.113065][ T7793] tipc: Disabling bearer [ 214.523124][ T7818] syzkaller0: entered promiscuous mode [ 214.529187][ T7818] syzkaller0: entered allmulticast mode [ 214.722497][ T788] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 214.942349][ T5830] usb 1-1: USB disconnect, device number 4 [ 214.955716][ T788] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.989837][ T788] usb 4-1: config 0 has no interface number 0 [ 215.032302][ T788] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 215.069707][ T788] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 215.098568][ T788] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 215.117925][ T788] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.165004][ T788] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 215.192750][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.252689][ T788] usb 4-1: config 0 descriptor?? [ 215.261295][ T7816] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 215.292222][ T7816] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 215.333045][ T7850] syzkaller0: entered promiscuous mode [ 215.339469][ T7850] syzkaller0: entered allmulticast mode [ 215.346815][ T788] ldusb 4-1:0.55: Interrupt in endpoint not found [ 215.556348][ T9] usb 4-1: USB disconnect, device number 3 [ 216.061733][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.302154][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 216.390259][ T7886] loop3: detected capacity change from 0 to 128 [ 217.432304][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 217.491479][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.531475][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.551553][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.601472][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.626758][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.088598][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 218.108379][ T9] usbtmc 3-1:16.0: can't read capabilities [ 218.204897][ T7930] syzkaller0: entered promiscuous mode [ 218.242041][ T7930] syzkaller0: entered allmulticast mode [ 218.305440][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.330565][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.488530][ T7933] netlink: 'syz.1.583': attribute type 3 has an invalid length. [ 219.455139][ T7959] netlink: 76 bytes leftover after parsing attributes in process `syz.3.589'. [ 219.887834][ T9] usb 3-1: USB disconnect, device number 6 [ 219.924920][ T7971] overlayfs: upper fs does not support file handles, falling back to index=off. [ 219.993897][ T7973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.592'. [ 220.361474][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 220.492802][ T7992] netlink: 76 bytes leftover after parsing attributes in process `syz.1.600'. [ 220.575382][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 220.603507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.635627][ T9] usb 3-1: Product: syz [ 220.647792][ T9] usb 3-1: Manufacturer: syz [ 220.664440][ T9] usb 3-1: SerialNumber: syz [ 220.684516][ T9] usb 3-1: config 0 descriptor?? [ 221.372162][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 221.407960][ T9] usb 3-1: Please update to version 0.2 or newer [ 221.607696][ T9] usb 3-1: USB disconnect, device number 7 [ 222.039268][ T8020] loop3: detected capacity change from 0 to 16 [ 222.110356][ T8020] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.170105][ T8020] syz.3.606: attempt to access beyond end of device [ 222.170105][ T8020] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 222.220790][ T8020] syz.3.606: attempt to access beyond end of device [ 222.220790][ T8020] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 222.297460][ T8020] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 222.313088][ T8029] netlink: 76 bytes leftover after parsing attributes in process `syz.2.609'. [ 222.353329][ T27] audit: type=1800 audit(1774584942.733:6): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.606" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 222.378844][ T8032] syzkaller0: entered promiscuous mode [ 222.415885][ T8032] syzkaller0: entered allmulticast mode [ 222.433746][ T8020] syz.3.606 (8020) used greatest stack depth: 20336 bytes left [ 222.998984][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 223.092063][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.484973][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.391338][ T8073] netlink: 72 bytes leftover after parsing attributes in process `syz.3.622'. [ 225.402918][ T8069] netlink: 76 bytes leftover after parsing attributes in process `syz.0.620'. [ 227.826821][ T8124] syzkaller0: entered promiscuous mode [ 227.836955][ T8124] syzkaller0: entered allmulticast mode [ 227.924397][ T8130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.634'. [ 228.015317][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.236204][ T5829] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 228.261706][ T5829] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.294131][ T5829] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.330212][ T5829] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.351286][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 228.353878][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.407412][ T5829] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 228.434762][ T5829] usb 3-1: invalid MIDI out EP 0 [ 228.754181][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.808344][ T5829] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 228.859492][ T5829] usb 3-1: USB disconnect, device number 8 [ 230.208494][ T8177] netlink: 76 bytes leftover after parsing attributes in process `syz.0.645'. [ 230.268642][ T8181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.647'. [ 231.889787][ T8220] overlayfs: failed to resolve './file1': -2 [ 232.532578][ T8235] netlink: 76 bytes leftover after parsing attributes in process `syz.3.660'. [ 232.608575][ T8249] syzkaller0: entered promiscuous mode [ 232.631580][ T8249] syzkaller0: entered allmulticast mode [ 232.892233][ T8264] overlayfs: failed to resolve './file1': -2 [ 233.222334][ T8280] loop0: detected capacity change from 0 to 128 [ 233.256707][ T8280] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.284713][ T8286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.671'. [ 233.378001][ T8280] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.430642][ T8291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.672'. [ 233.573223][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.104125][ T8312] overlayfs: failed to resolve './file1': -2 [ 234.479570][ T8330] netlink: 68 bytes leftover after parsing attributes in process `syz.3.680'. [ 234.582998][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.802271][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 234.829100][ T5829] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.863092][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.893403][ T5829] usb 1-1: Product: syz [ 234.911580][ T5829] usb 1-1: Manufacturer: syz [ 234.930633][ T5829] usb 1-1: SerialNumber: syz [ 234.964963][ T5829] usb 1-1: config 0 descriptor?? [ 235.060951][ T8342] netlink: 76 bytes leftover after parsing attributes in process `syz.3.684'. [ 235.197180][ T5829] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.708789][ T5829] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 236.729911][ T5829] usb 1-1: USB disconnect, device number 5 [ 238.571891][ T8380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.691'. [ 238.894451][ T8397] loop2: detected capacity change from 0 to 128 [ 239.857572][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 239.889824][ T8403] loop2: detected capacity change from 0 to 1024 [ 239.922720][ T8403] EXT4-fs: Ignoring removed bh option [ 239.970100][ T8403] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 240.048660][ T8403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.111820][ T8415] netlink: 76 bytes leftover after parsing attributes in process `syz.0.698'. [ 240.305376][ T8403] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.695: Abort forced by user [ 240.350071][ T8403] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.388314][ T8429] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 240.468938][ T8429] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.695: Abort forced by user [ 240.486704][ T8429] EXT4-fs (loop2): Remounting filesystem read-only [ 240.495529][ T8429] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 240.545689][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.062773][ T8470] netlink: 76 bytes leftover after parsing attributes in process `syz.1.709'. [ 244.105538][ T8515] net_ratelimit: 13068 callbacks suppressed [ 244.105553][ T8515] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 244.160168][ T8520] netlink: 76 bytes leftover after parsing attributes in process `syz.0.723'. [ 245.031066][ T8555] loop3: detected capacity change from 0 to 1024 [ 245.041888][ T8555] EXT4-fs: Ignoring removed bh option [ 245.075184][ T8555] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 245.077808][ T8557] netlink: 76 bytes leftover after parsing attributes in process `syz.1.736'. [ 245.145281][ T8555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.227183][ T8555] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.735: Abort forced by user [ 245.266389][ T8555] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 245.344026][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.522757][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.665359][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.784655][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.925687][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.446045][ T1144] tipc: Left network mode [ 246.526301][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.553760][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.586991][ T8588] loop0: detected capacity change from 0 to 8192 [ 246.598858][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.612138][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.622154][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.632057][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.690078][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.699149][ T8588] loop0: p1 < > p2 p4 < p5 > [ 246.705112][ T8588] loop0: partition table partially beyond EOD, truncated [ 246.717081][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.729170][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.738413][ T8588] loop0: p1 start 134217728 is beyond EOD, truncated [ 246.753890][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.766119][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.777440][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.791819][ T8588] loop0: p2 size 591360 extends beyond EOD, truncated [ 246.827594][ T8588] loop0: p5 size 591360 extends beyond EOD, truncated [ 247.127128][ T8609] netlink: 76 bytes leftover after parsing attributes in process `syz.3.748'. [ 247.171144][ T27] audit: type=1326 audit(1774584967.553:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.222668][ T27] audit: type=1326 audit(1774584967.553:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.270113][ T27] audit: type=1326 audit(1774584967.553:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.386892][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 247.390039][ T8608] udevd[8608]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 247.406928][ T27] audit: type=1326 audit(1774584967.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.419876][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 247.507562][ T27] audit: type=1326 audit(1774584967.553:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.608353][ T27] audit: type=1326 audit(1774584967.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.678097][ T27] audit: type=1326 audit(1774584967.553:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.772085][ T27] audit: type=1326 audit(1774584967.553:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 247.822897][ T27] audit: type=1326 audit(1774584967.553:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 248.366489][ T8666] loop3: detected capacity change from 0 to 1024 [ 248.395924][ T8597] chnl_net:caif_netlink_parms(): no params data found [ 248.620256][ T2970] hfsplus: b-tree write err: -5, ino 25 [ 248.641171][ T2970] hfsplus: b-tree write err: -5, ino 4 [ 248.657923][ T2970] hfsplus: b-tree write err: -5, ino 2 [ 248.678470][ T2970] hfsplus: b-tree write err: -5, ino 26 [ 248.871715][ T5786] Bluetooth: hci3: command tx timeout [ 248.979756][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.048115][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.071766][ T8597] bridge_slave_0: entered allmulticast mode [ 249.084281][ T8597] bridge_slave_0: entered promiscuous mode [ 249.109558][ T8689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.763'. [ 249.154315][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.168255][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.187898][ T8597] bridge_slave_1: entered allmulticast mode [ 249.202848][ T8597] bridge_slave_1: entered promiscuous mode [ 249.482621][ T1144] hsr_slave_0: left promiscuous mode [ 249.510602][ T1144] hsr_slave_1: left promiscuous mode [ 249.571915][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.600951][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.625500][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.651468][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.662938][ T1144] bridge_slave_1: left allmulticast mode [ 249.671804][ T1144] bridge_slave_1: left promiscuous mode [ 249.692663][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.717764][ T1144] bridge_slave_0: left allmulticast mode [ 249.725765][ T1144] bridge_slave_0: left promiscuous mode [ 249.741655][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.844666][ T1144] veth1_macvtap: left promiscuous mode [ 249.859195][ T1144] veth0_macvtap: left promiscuous mode [ 249.879185][ T1144] veth1_vlan: left promiscuous mode [ 249.909711][ T1144] veth0_vlan: left promiscuous mode [ 250.299233][ T1144] bond5 (unregistering): Released all slaves [ 250.339791][ T1144] bond4 (unregistering): Released all slaves [ 250.362539][ T1144] bond3 (unregistering): Released all slaves [ 250.430433][ T1144] bond2 (unregistering): (slave veth5): Releasing active interface [ 250.468345][ T8737] loop0: detected capacity change from 0 to 1024 [ 250.476531][ T8737] EXT4-fs: Ignoring removed bh option [ 250.510223][ T8737] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 250.579056][ T8737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.622197][ T8737] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.773: Abort forced by user [ 250.642969][ T8737] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 250.667310][ T8737] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 250.716041][ T8737] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.773: Abort forced by user [ 250.718004][ T1144] bond2 (unregistering): Released all slaves [ 250.731874][ T8737] EXT4-fs (loop0): Remounting filesystem read-only [ 250.739292][ T8737] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 250.765956][ T1144] bond1 (unregistering): (slave veth3): Releasing active interface [ 250.783991][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.955819][ T5786] Bluetooth: hci3: command tx timeout [ 251.011285][ T1144] bond1 (unregistering): Released all slaves [ 251.618908][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 251.678242][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 251.728972][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.790223][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.182390][ T1144] bond0 (unregistering): Released all slaves [ 252.400183][ T8716] syzkaller0: entered promiscuous mode [ 252.406379][ T8716] syzkaller0: entered allmulticast mode [ 252.441713][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.037791][ T5786] Bluetooth: hci3: command tx timeout [ 255.111745][ T5786] Bluetooth: hci3: command tx timeout [ 255.308005][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.432233][ T8597] team0: Port device team_slave_0 added [ 255.476948][ T8597] team0: Port device team_slave_1 added [ 255.580296][ T8776] syzkaller0: entered promiscuous mode [ 255.591537][ T8776] syzkaller0: entered allmulticast mode [ 255.622699][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.661642][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.722294][ T8597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.776895][ T8781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.823872][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.839109][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.868581][ T8597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.902778][ T8784] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 256.043574][ T1144] IPVS: stop unused estimator thread 0... [ 256.078806][ T8597] hsr_slave_0: entered promiscuous mode [ 256.108260][ T8597] hsr_slave_1: entered promiscuous mode [ 256.115970][ T8597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.124106][ T8597] Cannot create hsr debugfs directory [ 256.158470][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.166175][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.719724][ T8823] overlayfs: failed to resolve './file0': -2 [ 257.261096][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 257.316820][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 257.597097][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 257.604501][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 257.715246][ T8597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.728508][ T8597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.740667][ T8597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.764849][ T8597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.773325][ T8834] ceph: No mds server is up or the cluster is laggy [ 258.071123][ T8845] syzkaller0: entered promiscuous mode [ 258.077760][ T8845] syzkaller0: entered allmulticast mode [ 261.768528][ T8597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.815474][ T8597] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.837011][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.848175][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.934961][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.943419][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.298484][ T8903] loop0: detected capacity change from 0 to 4096 [ 262.356013][ T8908] ªªªªªª: renamed from vlan0 (while UP) [ 262.628225][ T8597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.669218][ T8910] input: syz1 as /devices/virtual/input/input5 [ 262.756623][ T8597] veth0_vlan: entered promiscuous mode [ 262.772744][ T788] libceph: connect (1)[c::]:6789 error -101 [ 262.781521][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 262.792729][ T8597] veth1_vlan: entered promiscuous mode [ 262.953312][ T8597] veth0_macvtap: entered promiscuous mode [ 262.981135][ T8597] veth1_macvtap: entered promiscuous mode [ 263.043102][ T788] libceph: connect (1)[c::]:6789 error -101 [ 263.047649][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.074352][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 263.075325][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.102690][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.118741][ T8910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 263.142549][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.170248][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.183230][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.197312][ T8597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.210867][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.229646][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.254862][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.287478][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.319272][ T8597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.394216][ T8597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.429884][ T8921] ceph: No mds server is up or the cluster is laggy [ 263.444183][ T8597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.469307][ T8597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.484762][ T8597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.624095][ T8951] overlayfs: failed to resolve './file1': -2 [ 263.850669][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.904127][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.076633][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.132298][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.706586][ T8982] syzkaller0: entered promiscuous mode [ 264.712820][ T8982] syzkaller0: entered allmulticast mode [ 265.467043][ T8996] overlayfs: failed to resolve './file1': -2 [ 270.001778][ T5830] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 270.199552][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.230712][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.251129][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.274212][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.293079][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.335532][ T5830] usb 3-1: config 0 descriptor?? [ 271.313707][ T9078] syzkaller0: entered promiscuous mode [ 271.341632][ T9078] syzkaller0: entered allmulticast mode [ 271.345329][ T5830] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 271.467624][ T5830] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 271.506417][ T5830] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 271.654165][ T5830] usb 3-1: USB disconnect, device number 9 [ 271.875029][ T9089] fido_id[9089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 273.005814][ T9112] netlink: 76 bytes leftover after parsing attributes in process `syz.3.856'. [ 275.489961][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 275.515105][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 275.785645][ T9135] overlayfs: failed to clone upperpath [ 276.988394][ T9149] overlayfs: failed to clone upperpath [ 280.143673][ T9199] overlayfs: failed to clone upperpath [ 281.501636][ T5830] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 281.652113][ T9241] loop2: detected capacity change from 0 to 16 [ 281.665591][ T9241] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 281.784853][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.983923][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.128792][ T5830] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.264679][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.282389][ T5830] usb 1-1: config 0 descriptor?? [ 282.296836][ T5830] hub 1-1:0.0: USB hub found [ 282.501565][ T5830] hub 1-1:0.0: 1 port detected [ 283.326623][ T5830] usb 1-1: USB disconnect, device number 6 [ 285.014399][ T9318] syzkaller0: entered promiscuous mode [ 285.037557][ T9318] syzkaller0: entered allmulticast mode [ 288.504609][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 288.924373][ T9368] overlayfs: failed to clone lowerpath [ 291.143901][ T40] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 292.131999][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.161603][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.183485][ T40] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.201958][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.223188][ T40] usb 3-1: config 0 descriptor?? [ 292.244352][ T40] hub 3-1:0.0: USB hub found [ 292.438269][ T40] hub 3-1:0.0: 1 port detected [ 293.250989][ T5829] usb 3-1: USB disconnect, device number 10 [ 297.005709][ T9528] overlayfs: failed to clone lowerpath [ 298.192223][ T27] audit: type=1326 audit(1774585018.573:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.253268][ T27] audit: type=1326 audit(1774585018.583:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.315553][ T27] audit: type=1326 audit(1774585018.583:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.339981][ T27] audit: type=1326 audit(1774585018.583:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.361306][ T9568] overlayfs: failed to clone lowerpath [ 298.365210][ T27] audit: type=1326 audit(1774585018.583:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.394364][ T27] audit: type=1326 audit(1774585018.583:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.418808][ T27] audit: type=1326 audit(1774585018.583:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.444265][ T27] audit: type=1326 audit(1774585018.583:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.470143][ T27] audit: type=1326 audit(1774585018.583:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.494079][ T27] audit: type=1326 audit(1774585018.583:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f8535b9c799 code=0x7ffc0000 [ 298.931955][ T5829] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 299.147242][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.169444][ T5829] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 299.190102][ T5829] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 299.203307][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.216121][ T5829] usb 1-1: Product: syz [ 299.220819][ T5829] usb 1-1: Manufacturer: syz [ 299.226305][ T5829] usb 1-1: SerialNumber: syz [ 299.772522][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.795913][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.863977][ T5829] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 300.036066][ T9605] loop2: detected capacity change from 0 to 2048 [ 300.073076][ T9605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.014903][ T5829] usb 1-1: USB disconnect, device number 7 [ 302.616481][ T9661] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 302.627195][ T9661] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.743506][ T9667] loop0: detected capacity change from 0 to 1024 [ 302.756155][ T9667] EXT4-fs: Ignoring removed bh option [ 302.773997][ T9667] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 302.834967][ T9667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.950977][ T9667] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.1016: Abort forced by user [ 303.008738][ T9667] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 303.038996][ T9674] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 303.087086][ T9674] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.1016: Abort forced by user [ 303.100203][ T9674] EXT4-fs (loop0): Remounting filesystem read-only [ 303.108339][ T9674] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 303.177166][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.832546][ T9702] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 303.842229][ T9702] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 304.180182][ T2972] tipc: Subscription rejected, illegal request [ 304.370045][ T9719] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1032'. [ 304.431308][ T5830] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 304.729853][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.875019][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.150822][ T5830] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.161068][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.190006][ T5830] usb 3-1: config 0 descriptor?? [ 305.233031][ T5830] hub 3-1:0.0: USB hub found [ 305.478395][ T5830] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 305.695207][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 305.708858][ T5830] usbhid: probe of 3-1:0.0 failed with error -71 [ 305.755452][ T5830] usb 3-1: USB disconnect, device number 11 [ 307.559546][ T9777] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1043'. [ 308.283077][ T5830] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 308.486809][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.508514][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.519285][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.538439][ T5830] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.560857][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.576438][ T5830] usb 1-1: config 0 descriptor?? [ 308.867823][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 308.997946][ T9826] syzkaller0: entered promiscuous mode [ 309.008750][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 309.015681][ T9826] syzkaller0: entered allmulticast mode [ 309.022837][ T5830] usbhid: probe of 1-1:0.0 failed with error -71 [ 309.058319][ T5830] usb 1-1: USB disconnect, device number 8 [ 312.326193][ T9895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1076'. [ 312.349105][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.360038][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.512039][ T9903] syzkaller0: entered promiscuous mode [ 312.521845][ T9903] syzkaller0: entered allmulticast mode [ 313.778034][ T9922] overlayfs: overlapping lowerdir path [ 313.912390][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 313.912423][ T27] audit: type=1326 audit(1774585034.283:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.536891][ T27] audit: type=1326 audit(1774585034.283:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.569606][ T27] audit: type=1326 audit(1774585034.283:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.641453][ T27] audit: type=1326 audit(1774585034.283:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.699319][ T27] audit: type=1326 audit(1774585034.283:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.764052][ T27] audit: type=1326 audit(1774585034.283:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.791970][ T27] audit: type=1326 audit(1774585034.283:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.825198][ T27] audit: type=1326 audit(1774585034.283:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.883829][ T27] audit: type=1326 audit(1774585034.283:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 314.967615][ T27] audit: type=1326 audit(1774585034.283:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x7ffc0000 [ 316.623923][ T9972] overlayfs: failed to clone lowerpath [ 316.911647][ T5829] IPVS: starting estimator thread 0... [ 317.023213][ T9990] IPVS: using max 26 ests per chain, 62400 per kthread [ 317.551203][T10010] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1108'. [ 317.594988][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.602540][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.684279][T10033] loop2: detected capacity change from 0 to 4096 [ 318.725190][T10033] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 319.198272][T10046] overlayfs: missing 'workdir' [ 319.221966][T10049] syzkaller0: entered promiscuous mode [ 319.231412][T10049] syzkaller0: entered allmulticast mode [ 319.507169][T10060] syzkaller0: entered promiscuous mode [ 319.518848][T10060] syzkaller0: entered allmulticast mode [ 320.467544][T10068] tipc: Cannot configure node identity twice [ 320.566508][T10071] overlayfs: missing 'workdir' [ 320.924047][T10080] syzkaller0: entered promiscuous mode [ 320.929845][T10080] syzkaller0: entered allmulticast mode [ 321.168799][T10090] random: crng reseeded on system resumption [ 322.728779][T10111] input: syz0 as /devices/virtual/input/input7 [ 323.624321][T10119] loop0: detected capacity change from 0 to 1024 [ 323.637893][T10119] EXT4-fs: Ignoring removed bh option [ 323.719393][T10119] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 323.824228][T10119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.919223][T10119] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.1146: Abort forced by user [ 323.932265][T10119] EXT4-fs (loop0): Remounting filesystem read-only [ 323.939577][T10119] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 323.992892][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.086332][T10129] overlayfs: failed to clone lowerpath [ 324.550785][T10150] loop2: detected capacity change from 0 to 1024 [ 324.582479][T10150] EXT4-fs: Ignoring removed bh option [ 324.592457][T10150] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 324.639785][T10150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.750991][T10150] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.1157: Abort forced by user [ 324.779405][T10150] EXT4-fs (loop2): Remounting filesystem read-only [ 324.811455][T10150] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 324.880323][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.097002][T10160] loop2: detected capacity change from 0 to 512 [ 325.171139][T10160] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.1160: bad orphan inode 15 [ 325.203759][T10160] ext4_test_bit(bit=14, block=18) = 1 [ 325.226123][T10160] is_bad_inode(inode)=0 [ 325.230688][T10160] NEXT_ORPHAN(inode)=1023 [ 325.250724][T10160] max_ino=32 [ 325.254283][T10160] i_nlink=0 [ 325.327888][T10160] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2969: inode #15: comm syz.2.1160: corrupted xattr block 19: invalid header [ 325.361426][T10160] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -117) [ 325.374492][T10160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 325.387811][T10160] ext4 filesystem being mounted at /71/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 326.587609][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 327.511237][T10176] loop2: detected capacity change from 0 to 1024 [ 327.520560][T10176] EXT4-fs: Ignoring removed bh option [ 327.581534][T10176] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 327.662142][T10176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.798866][T10176] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.1164: Abort forced by user [ 327.860301][T10176] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 327.962470][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.123370][T10191] loop2: detected capacity change from 0 to 1024 [ 328.143505][T10191] EXT4-fs: Ignoring removed bh option [ 328.167777][T10191] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 328.257021][T10191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.439279][T10191] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.1168: Abort forced by user [ 328.465877][T10191] EXT4-fs (loop2): Remounting filesystem read-only [ 328.493934][T10191] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 328.599311][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.690411][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 330.690428][ T27] audit: type=1800 audit(1774585051.073:122): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1179" name="bus" dev="overlay" ino=432 res=0 errno=0 [ 332.625117][T10239] loop0: detected capacity change from 0 to 2048 [ 332.711790][T10239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.951295][T10290] program syz.0.1204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.014220][T10295] program syz.0.1204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.044106][T10295] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 335.400173][T10310] loop2: detected capacity change from 0 to 2048 [ 335.463788][T10310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.445508][ T27] audit: type=1326 audit(1774585057.813:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.0.1212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8535b9c799 code=0x0 [ 337.519354][ T27] audit: type=1326 audit(1774585057.903:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.600978][ T27] audit: type=1326 audit(1774585057.903:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.647467][ T27] audit: type=1326 audit(1774585057.933:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.697814][ T27] audit: type=1326 audit(1774585057.933:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.737151][ T27] audit: type=1326 audit(1774585057.933:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.764256][ T27] audit: type=1326 audit(1774585057.933:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.800120][ T27] audit: type=1326 audit(1774585057.933:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.816499][T10348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1217'. [ 337.856002][ T27] audit: type=1326 audit(1774585057.933:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 337.894300][ T27] audit: type=1326 audit(1774585057.933:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 338.035692][T10358] vlan2: entered promiscuous mode [ 338.041123][T10358] bond0: entered promiscuous mode [ 338.048100][T10358] bond_slave_0: entered promiscuous mode [ 338.054728][T10358] bond_slave_1: entered promiscuous mode [ 338.862024][ T2182] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 339.123244][ T2182] usb 1-1: Using ep0 maxpacket: 16 [ 339.245073][ T2182] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.345358][ T2182] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 339.496904][ T2182] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 339.506794][ T2182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.516009][ T2182] usb 1-1: Product: syz [ 339.520383][ T2182] usb 1-1: Manufacturer: syz [ 339.525969][ T2182] usb 1-1: SerialNumber: syz [ 339.619220][T10394] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1230'. [ 339.784233][ T2182] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 339.833405][ T2182] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 339.887134][T10409] syzkaller0: entered promiscuous mode [ 339.893275][T10409] syzkaller0: entered allmulticast mode [ 340.335622][ T2182] usb 1-1: USB disconnect, device number 9 [ 340.378349][ T9230] udevd[9230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.604054][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 341.828086][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'. [ 341.838338][T10466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.842253][ T5829] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 341.926151][T10466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.105272][T10475] syz.0.1249 (10475): drop_caches: 2 [ 343.374679][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 343.417747][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.465965][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 343.504871][ T5829] usb 3-1: can't read configurations, error -71 [ 344.831724][T10499] tipc: Enabling of bearer rejected, failed to enable media [ 345.264624][T10522] overlayfs: failed to clone upperpath [ 345.630114][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'. [ 346.525478][T10543] syzkaller0: entered promiscuous mode [ 346.571390][T10543] syzkaller0: entered allmulticast mode [ 346.663825][T10550] tipc: Enabling of bearer rejected, failed to enable media [ 346.856479][T10555] loop2: detected capacity change from 0 to 2048 [ 346.887126][T10555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.134356][T10583] tipc: Started in network mode [ 348.139686][T10583] tipc: Node identity d6e90c57917a, cluster identity 4711 [ 348.147915][T10583] tipc: Enabled bearer , priority 0 [ 348.173947][T10582] tipc: Disabling bearer [ 349.133605][T10594] loop0: detected capacity change from 0 to 2048 [ 349.184953][T10594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.000133][T10618] loop0: detected capacity change from 0 to 128 [ 351.149732][T10620] overlayfs: failed to clone upperpath [ 351.509875][T10628] syzkaller0: entered promiscuous mode [ 351.540145][T10628] syzkaller0: entered allmulticast mode [ 357.267280][T10698] syzkaller0: entered promiscuous mode [ 357.290510][T10698] syzkaller0: entered allmulticast mode [ 359.489194][T10729] 9pnet_fd: Insufficient options for proto=fd [ 359.586709][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 359.586726][ T27] audit: type=1326 audit(1774585079.963:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 359.628507][ T27] audit: type=1326 audit(1774585079.963:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 359.788189][ T27] audit: type=1326 audit(1774585079.963:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 359.825199][ T27] audit: type=1326 audit(1774585079.963:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 359.851536][ T27] audit: type=1326 audit(1774585079.963:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 359.874584][ T27] audit: type=1326 audit(1774585079.963:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 359.905688][ T27] audit: type=1326 audit(1774585079.963:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 360.398149][ T27] audit: type=1326 audit(1774585079.963:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 360.487819][ T27] audit: type=1326 audit(1774585079.963:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10730 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 362.108422][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1329'. [ 362.123431][T10756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1329'. [ 362.137470][T10756] IPv6: sit1: Disabled Multicast RS [ 362.143958][T10756] sit1: entered allmulticast mode [ 362.341592][ T40] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 362.427251][T10762] capability: warning: `syz.3.1331' uses deprecated v2 capabilities in a way that may be insecure [ 362.483944][T10764] syzkaller0: entered promiscuous mode [ 362.489473][T10764] syzkaller0: entered allmulticast mode [ 362.539730][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.558344][ T40] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.579016][ T40] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.603295][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.630328][ T40] usb 3-1: config 0 descriptor?? [ 362.685796][ T40] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 363.275131][T10796] process 'syz.1.1341' launched './file2' with NULL argv: empty string added [ 363.594564][ T27] audit: type=1800 audit(1774585083.983:174): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1348" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 363.698333][T10818] overlayfs: failed to clone upperpath [ 363.709602][T10818] overlayfs: failed to clone lowerpath [ 365.143490][ T9] usb 3-1: USB disconnect, device number 14 [ 369.250832][T10918] syzkaller0: entered promiscuous mode [ 369.257402][T10918] syzkaller0: entered allmulticast mode [ 369.281199][T10920] loop2: detected capacity change from 0 to 128 [ 372.621350][ C1] hrtimer: interrupt took 75456 ns [ 375.501709][T11040] syzkaller0: entered promiscuous mode [ 375.521548][T11040] syzkaller0: entered allmulticast mode [ 376.199763][T11061] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.208242][T11061] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.712445][T11061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.757679][T11061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.466766][T11061] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.476544][T11061] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.556894][T11061] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.618175][T11061] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.112307][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.121637][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.217792][T11061] sit1: left allmulticast mode [ 379.244411][T11061] syz.0.1427 (11061) used greatest stack depth: 20296 bytes left [ 379.570051][T11121] loop0: detected capacity change from 0 to 2048 [ 379.609062][T11121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.979295][T11227] 9pnet_fd: Insufficient options for proto=fd [ 384.135413][T11232] syzkaller0: entered promiscuous mode [ 384.144821][T11232] syzkaller0: entered allmulticast mode [ 385.228585][ T27] audit: type=1326 audit(1774585105.563:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 385.333121][ T27] audit: type=1326 audit(1774585105.573:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 385.419447][ T27] audit: type=1326 audit(1774585105.583:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 385.466113][ T27] audit: type=1326 audit(1774585105.593:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd4059c799 code=0x7ffc0000 [ 385.633675][T11264] overlayfs: failed to clone lowerpath [ 387.210419][T11295] overlayfs: failed to clone lowerpath [ 387.809761][T11322] overlayfs: failed to clone lowerpath [ 388.327562][T11347] overlayfs: failed to clone lowerpath [ 388.718969][T11368] overlayfs: failed to clone lowerpath [ 390.356340][T11441] syzkaller0: entered promiscuous mode [ 390.362819][T11441] syzkaller0: entered allmulticast mode [ 391.024790][T11475] syzkaller0: entered promiscuous mode [ 391.041430][T11475] syzkaller0: entered allmulticast mode [ 391.168311][T11337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.495415][T11490] syzkaller0: entered promiscuous mode [ 391.500940][T11490] syzkaller0: entered allmulticast mode [ 392.818063][T11519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.062177][T11531] syzkaller0: entered promiscuous mode [ 393.069590][T11531] syzkaller0: entered allmulticast mode [ 394.754883][T11560] syzkaller0: entered promiscuous mode [ 394.762491][T11560] syzkaller0: entered allmulticast mode [ 396.638535][T11581] syzkaller0: entered promiscuous mode [ 396.661484][T11581] syzkaller0: entered allmulticast mode [ 398.762728][T11632] syzkaller0: entered promiscuous mode [ 398.773631][T11632] syzkaller0: entered allmulticast mode [ 400.376334][T11676] loop0: detected capacity change from 0 to 2048 [ 400.430939][T11676] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.810278][T11689] syzkaller0: entered promiscuous mode [ 401.816374][T11689] syzkaller0: entered allmulticast mode [ 403.709957][T11734] syzkaller0: entered promiscuous mode [ 403.726508][T11734] syzkaller0: entered allmulticast mode [ 404.065743][T11742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1646'. [ 406.746556][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 407.172789][T11851] tipc: Enabling of bearer rejected, failed to enable media [ 407.197475][T11851] syzkaller0: entered promiscuous mode [ 407.211900][T11851] syzkaller0: entered allmulticast mode [ 409.348466][T11893] tipc: Enabling of bearer rejected, failed to enable media [ 409.453286][T11898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 410.925264][T11933] tipc: Enabling of bearer rejected, failed to enable media [ 410.936059][T11933] syzkaller0: entered promiscuous mode [ 410.946544][T11933] syzkaller0: entered allmulticast mode [ 412.610543][T12000] loop0: detected capacity change from 0 to 256 [ 414.374998][T12005] sched: RT throttling activated [ 416.139226][T12023] syz.0.1735 (12023): drop_caches: 2 [ 416.982002][T12038] overlayfs: failed to get inode (-116) [ 416.990622][T12038] overlayfs: failed to get inode (-116) [ 417.041480][ T5812] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 417.803176][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.817539][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 417.830834][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.846638][ T5812] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.886271][ T5812] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 417.911432][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 417.964694][ T5812] usb 3-1: SerialNumber: syz [ 418.021971][ T5812] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 418.052469][ T5812] usb-storage 3-1:1.0: USB Mass Storage device detected [ 418.093809][ T5812] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 418.151190][T12057] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1750'. [ 418.225924][ T5812] usb 3-1: USB disconnect, device number 15 [ 420.436186][T12083] loop2: detected capacity change from 0 to 40427 [ 420.526019][T12083] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 420.712250][T12105] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1761'. [ 421.012737][T12113] tipc: Enabling of bearer rejected, failed to enable media [ 421.129294][ T27] audit: type=1326 audit(1774585141.513:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.2.1763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f603719c799 code=0x0 [ 421.689646][T12131] 9pnet_fd: Insufficient options for proto=fd [ 423.315419][T12160] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1772'. [ 423.604702][T12169] loop2: detected capacity change from 0 to 512 [ 423.637181][T12169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.670371][T12169] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.942845][T12176] tipc: Enabling of bearer rejected, failed to enable media [ 424.269168][T12181] syz.0.1775 (12181): attempted to duplicate a private mapping with mremap. This is not supported. [ 424.306364][T12181] loop0: detected capacity change from 0 to 128 [ 424.355048][T12181] EXT4-fs: inline encryption not supported [ 424.404556][T12181] EXT4-fs (loop0): Test dummy encryption mode enabled [ 424.456958][T12181] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.601469][T12181] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.288937][T12181] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 425.406443][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.462424][T12189] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 425.703953][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.869825][T12208] loop2: detected capacity change from 0 to 512 [ 425.890991][T12212] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1780'. [ 425.912337][T12208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 426.011753][T12208] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1778: iget: bad extra_isize 58 (inode size 256) [ 426.127145][T12208] EXT4-fs (loop2): Remounting filesystem read-only [ 426.162858][T12208] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 426.182568][T12208] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 426.195677][T12208] EXT4-fs (loop2): 1 orphan inode deleted [ 426.235593][ T787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 426.252458][T12208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.321460][ T787] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.632844][T12225] tipc: Enabling of bearer rejected, failed to enable media [ 426.724405][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.883884][T12233] loop2: detected capacity change from 0 to 1024 [ 426.940038][T12233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.278400][T12237] overlayfs: failed to clone lowerpath [ 427.289254][T12237] overlayfs: failed to clone lowerpath [ 428.136062][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.478025][T12251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1790'. [ 429.607273][T12273] loop0: detected capacity change from 0 to 128 [ 429.656360][T10754] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.000759][T12279] loop2: detected capacity change from 0 to 256 [ 430.016234][T12279] exfat: Deprecated parameter 'utf8' [ 430.063176][T12279] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 430.741957][ T787] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 430.932351][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 430.939356][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.962100][ T787] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 430.972477][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.992524][ T787] usb 3-1: config 0 descriptor?? [ 431.209301][ T787] usbhid 3-1:0.0: can't add hid device: -71 [ 431.218047][ T787] usbhid: probe of 3-1:0.0 failed with error -71 [ 431.230153][ T787] usb 3-1: USB disconnect, device number 16 [ 431.496189][T12308] loop0: detected capacity change from 0 to 2048 [ 431.558404][T12308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.592692][T12308] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.736843][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.960359][T12317] loop0: detected capacity change from 0 to 2048 [ 432.138689][T12317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.718924][ T2970] nci: nci_rsp_packet: unknown rsp opcode 0xe0e [ 435.316744][T12348] loop2: detected capacity change from 0 to 40427 [ 435.356977][T12348] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 435.387077][T12348] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 435.470287][T12355] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 435.483118][T12348] F2FS-fs (loop2): invalid crc value [ 435.528522][T12348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 435.711511][T12348] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 435.718701][T12348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 437.140360][ T27] audit: type=1800 audit(1774585156.613:180): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1819" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 437.210157][T12341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.815460][T12388] loop0: detected capacity change from 0 to 1024 [ 437.982845][T12388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 438.057906][T12388] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.452329][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 438.806058][T12403] loop0: detected capacity change from 0 to 2048 [ 438.822810][T12403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.920913][T12404] 9pnet_virtio: no channels available for device [ 438.954259][T12406] tipc: Can't bind to reserved service type 2 [ 439.975623][ T2970] nci: nci_rsp_packet: unknown rsp opcode 0xe0e [ 440.569367][T12420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.935816][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.942582][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.074529][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 442.046017][T12430] syz.0.1840 (12430): drop_caches: 2 [ 442.913085][T12411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.025626][T12474] loop0: detected capacity change from 0 to 2048 [ 446.090685][T12474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.648211][T12491] syz.0.1863 (12491): drop_caches: 2 [ 448.801743][T12498] netlink: 'syz.2.1865': attribute type 3 has an invalid length. [ 449.046186][T10332] nci: nci_rsp_packet: unknown rsp opcode 0xe0e [ 451.951707][T12503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.167689][T12549] tipc: Failed to remove unknown binding: 66,0,0/0:3028040191/3028040192 [ 452.620336][T12563] loop0: detected capacity change from 0 to 512 [ 452.627848][T12561] loop2: detected capacity change from 0 to 2048 [ 452.632751][T12563] EXT4-fs: Ignoring removed i_version option [ 452.653441][T12561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.664221][T12563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.801821][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.018980][T12571] loop0: detected capacity change from 0 to 4096 [ 453.061858][T12571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.153083][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.543301][T12587] loop0: detected capacity change from 0 to 2048 [ 453.598061][T12587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.856566][T12608] loop2: detected capacity change from 0 to 4096 [ 454.953257][T12608] EXT4-fs: Ignoring removed i_version option [ 454.959395][T12608] EXT4-fs: Ignoring removed oldalloc option [ 455.003529][T12608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.028644][T12608] EXT4-fs (loop2): Test dummy encryption mode enabled [ 455.062710][T12608] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 455.672293][T12621] loop2: detected capacity change from 0 to 256 [ 455.955913][T12623] 9pnet_fd: Insufficient options for proto=fd [ 456.778189][T12616] netlink: 'syz.2.1903': attribute type 4 has an invalid length. [ 456.793072][T12616] netlink: 'syz.2.1903': attribute type 16 has an invalid length. [ 456.801129][T12616] netlink: 38166 bytes leftover after parsing attributes in process `syz.2.1903'. [ 457.362870][T12631] loop0: detected capacity change from 0 to 1024 [ 457.370982][T12631] EXT4-fs: Ignoring removed bh option [ 457.378041][T12631] EXT4-fs: Ignoring removed oldalloc option [ 457.384707][T12631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.531784][T12631] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 458.468450][T12631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 458.477682][T12631] System zones: 0-1, 3-36 [ 458.561172][T12631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.104018][T12631] overlayfs: missing 'lowerdir' [ 459.642997][T12643] loop2: detected capacity change from 0 to 1024 [ 459.679074][T12643] EXT4-fs: Ignoring removed bh option [ 459.788066][T12643] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 459.883098][T12643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.204829][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.247721][ T8597] EXT4-fs error (device loop2): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /227/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 460.323691][ T8597] EXT4-fs (loop2): Remounting filesystem read-only [ 460.485114][ T8597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.661782][T12664] loop0: detected capacity change from 0 to 1024 [ 460.709089][T12664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.735398][T10332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.865219][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.947166][T10332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.080830][T10332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.234107][T10332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.733278][T12686] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 462.515508][T10332] tipc: Left network mode [ 462.572734][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.588081][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.600877][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.645674][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.659309][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 462.671668][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.211389][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 464.434692][T12695] chnl_net:caif_netlink_parms(): no params data found [ 464.462924][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.483582][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.503571][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.519074][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.536650][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.563693][ T9] usb 1-1: config 0 descriptor?? [ 464.710715][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.720440][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.721617][ T5786] Bluetooth: hci3: command tx timeout [ 464.733338][T12695] bridge_slave_0: entered allmulticast mode [ 464.757790][T12695] bridge_slave_0: entered promiscuous mode [ 464.833033][T12695] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.858262][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.876199][T12695] bridge_slave_1: entered allmulticast mode [ 464.887553][T12695] bridge_slave_1: entered promiscuous mode [ 464.999877][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 465.012303][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 465.045850][ T9] usb 1-1: USB disconnect, device number 10 [ 465.244935][T12755] 9pnet_virtio: no channels available for device [ 465.246958][T12695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.281077][T12695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.247910][T12768] netlink: 'syz.3.1937': attribute type 4 has an invalid length. [ 466.292883][ T2970] nci: nci_rsp_packet: unknown rsp opcode 0xe0e [ 466.413494][T12695] team0: Port device team_slave_0 added [ 466.455714][T12695] team0: Port device team_slave_1 added [ 466.481894][T12770] netlink: 'syz.3.1937': attribute type 4 has an invalid length. [ 466.604569][T10332] hsr_slave_0: left promiscuous mode [ 466.627991][T10332] hsr_slave_1: left promiscuous mode [ 466.636852][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.651728][T10332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.672480][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.681120][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.712075][T10332] bridge_slave_1: left allmulticast mode [ 466.718684][T10332] bridge_slave_1: left promiscuous mode [ 466.751907][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.767872][T10332] bridge_slave_0: left allmulticast mode [ 466.782789][T10332] bridge_slave_0: left promiscuous mode [ 466.789390][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.797693][ T5786] Bluetooth: hci3: command tx timeout [ 466.872674][T10332] veth1_macvtap: left promiscuous mode [ 466.887423][T10332] veth0_macvtap: left promiscuous mode [ 466.902639][T10332] veth1_vlan: left promiscuous mode [ 466.966710][T10332] veth0_vlan: left promiscuous mode [ 468.517362][T10332] team0 (unregistering): Port device team_slave_1 removed [ 468.585116][T10332] team0 (unregistering): Port device team_slave_0 removed [ 468.656053][T10332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.667313][T10332] bond_slave_1 (unregistering): left promiscuous mode [ 468.730755][T10332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.742714][T10332] bond_slave_0 (unregistering): left promiscuous mode [ 468.876284][ T5786] Bluetooth: hci3: command tx timeout [ 469.123883][T12763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.338100][T10332] bond0 (unregistering): Released all slaves [ 469.586357][T12695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.594280][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.630046][T12695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.227734][T12695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.235226][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.301611][T12695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.475271][T12792] loop0: detected capacity change from 0 to 512 [ 470.487921][T12695] hsr_slave_0: entered promiscuous mode [ 470.540989][T12695] hsr_slave_1: entered promiscuous mode [ 470.562519][T12695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.572756][T12695] Cannot create hsr debugfs directory [ 470.633780][T12792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.656536][T12792] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.848821][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.951353][ T5786] Bluetooth: hci3: command tx timeout [ 471.200002][T12819] 9pnet_virtio: no channels available for device [ 471.262151][T12695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.301133][T12695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.905254][T12695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.054643][T12695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.280964][T12695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.321111][T12695] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.376830][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.384501][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.407361][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.415857][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.897648][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.913070][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.973931][T12859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.185794][T12695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.440658][T12876] loop0: detected capacity change from 0 to 1024 [ 474.543727][T12876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.675529][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.687432][T12695] veth0_vlan: entered promiscuous mode [ 477.738242][T12695] veth1_vlan: entered promiscuous mode [ 477.813703][T12695] veth0_macvtap: entered promiscuous mode [ 477.845112][T12695] veth1_macvtap: entered promiscuous mode [ 477.893950][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.926885][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.950995][T12695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.967371][ T5811] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 477.984364][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.021579][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.052788][T12695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.101617][T12695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.141444][T12695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.150913][T12695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.173247][T12695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.209491][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.245878][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.303962][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.331771][ T5811] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.344295][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.362198][ T5811] usb 1-1: config 0 descriptor?? [ 478.433641][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.472115][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.529971][T12921] 9pnet_virtio: no channels available for device [ 478.581935][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.597872][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.358735][ T5811] usbhid 1-1:0.0: can't add hid device: -71 [ 479.365390][T12925] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1970'. [ 479.370465][ T5811] usbhid: probe of 1-1:0.0 failed with error -71 [ 479.388905][ T5811] usb 1-1: USB disconnect, device number 11 [ 479.640195][T12941] loop4: detected capacity change from 0 to 2048 [ 479.696017][T12941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.105156][ T12] nci: nci_rsp_packet: unknown rsp opcode 0xe0e [ 480.739525][T12968] 9pnet_virtio: no channels available for device [ 481.744151][T12975] loop0: detected capacity change from 0 to 256 [ 481.786968][T12975] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 481.888585][T12979] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 481.905078][T12979] netlink: 'syz.3.1977': attribute type 16 has an invalid length. [ 481.913821][T12979] netlink: 38166 bytes leftover after parsing attributes in process `syz.3.1977'. [ 482.561965][ T27] audit: type=1800 audit(1774585202.953:181): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1978" name="file1" dev="loop0" ino=1048604 res=0 errno=0 [ 482.982066][T12952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.161487][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 483.519019][T13002] 9pnet_virtio: no channels available for device [ 484.286209][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 484.318558][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 484.369079][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 484.415812][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.700502][ T9] usb 1-1: Product: syz [ 484.721560][ T9] usb 1-1: Manufacturer: syz [ 484.748460][ T9] usb 1-1: SerialNumber: syz [ 485.181754][ T9] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 485.239388][T13024] loop4: detected capacity change from 0 to 2048 [ 485.305149][T13024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.901471][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 486.062367][ T9] usb 1-1: USB disconnect, device number 12 [ 486.114706][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.151137][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.177534][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 486.210550][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.254378][ T8] usb 5-1: config 0 descriptor?? [ 486.319523][T13051] 9pnet_virtio: no channels available for device [ 486.343591][ T8] hub 5-1:0.0: USB hub found [ 487.238580][ T8] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 487.311452][ T27] audit: type=1326 audit(1774585207.693:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.1.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6831f9c799 code=0x0 [ 487.377198][ T8] usbhid 5-1:0.0: can't add hid device: -32 [ 487.395587][ T8] usbhid: probe of 5-1:0.0 failed with error -32 [ 487.601773][ T8] usb 5-1: USB disconnect, device number 2 [ 489.187572][T13088] loop4: detected capacity change from 0 to 40427 [ 489.210995][T13088] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 489.248189][T13088] F2FS-fs (loop4): invalid crc value [ 489.308044][T13113] 9pnet_virtio: no channels available for device [ 489.323918][T13088] F2FS-fs (loop4): Found nat_bits in checkpoint [ 489.934085][T13088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 490.106792][T13088] syz.4.2005: attempt to access beyond end of device [ 490.106792][T13088] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 490.275796][T12695] syz-executor: attempt to access beyond end of device [ 490.275796][T12695] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 490.310604][T12695] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 490.890526][T13128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2016'. [ 492.048115][T13139] loop0: detected capacity change from 0 to 512 [ 492.060110][T13139] EXT4-fs: Ignoring removed i_version option [ 492.101918][T13139] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.2017: iget: bad extra_isize 50264 (inode size 256) [ 492.148017][T13139] EXT4-fs (loop0): Remounting filesystem read-only [ 492.158415][T13139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.255111][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.406041][T13149] 9pnet_virtio: no channels available for device [ 493.249206][T13157] loop0: detected capacity change from 0 to 1024 [ 493.365277][T13157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 493.466207][T13157] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.559822][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 493.715372][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 493.938026][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.981321][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.006012][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 494.039086][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.067794][ T8] usb 5-1: config 0 descriptor?? [ 494.105188][ T8] hub 5-1:0.0: USB hub found [ 494.430082][T13197] syz.0.2030 (13197): drop_caches: 2 [ 494.521288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 494.701282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 494.981284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 495.695507][ T8] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 495.959073][T13210] 9pnet_virtio: no channels available for device [ 496.058806][ T8] usbhid 5-1:0.0: can't add hid device: -32 [ 496.681914][ T8] usbhid: probe of 5-1:0.0 failed with error -32 [ 496.796797][ T8] usb 5-1: USB disconnect, device number 3 [ 496.896028][T13223] loop0: detected capacity change from 0 to 512 [ 496.917707][T13223] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 496.971613][T13223] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 496.991401][T13223] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 497.031535][T13228] tipc: Enabling of bearer rejected, failed to enable media [ 497.200429][T13231] loop4: detected capacity change from 0 to 4096 [ 497.240119][T13231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.503608][T12695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.071490][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 498.242833][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.246394][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.265862][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.281628][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.298541][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 498.307027][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 498.314739][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.325030][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.337775][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.366014][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.397112][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.406912][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.419070][ T8] usb 5-1: config 0 descriptor?? [ 498.467596][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.631119][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.779222][ T2972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.007340][T13272] 9pnet_virtio: no channels available for device [ 499.756177][T13274] tipc: Enabling of bearer rejected, failed to enable media [ 499.762249][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 499.868705][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 499.897848][ T8] usb 5-1: USB disconnect, device number 4 [ 500.074218][T13252] chnl_net:caif_netlink_parms(): no params data found [ 500.389854][T13287] syzkaller0: entered promiscuous mode [ 500.396023][ T5783] Bluetooth: hci0: command tx timeout [ 500.409297][T13287] syzkaller0: entered allmulticast mode [ 500.427151][T13295] syzkaller0: entered promiscuous mode [ 500.433090][T13295] syzkaller0: entered allmulticast mode [ 501.934405][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.967493][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.481502][ T5783] Bluetooth: hci0: command tx timeout [ 504.554946][ T5783] Bluetooth: hci0: command tx timeout [ 505.093562][T13324] tipc: Enabling of bearer rejected, failed to enable media [ 505.150273][T13252] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.172112][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.203964][T13252] bridge_slave_0: entered allmulticast mode [ 505.245377][T13252] bridge_slave_0: entered promiscuous mode [ 505.267621][T13252] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.281540][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.307690][T13252] bridge_slave_1: entered allmulticast mode [ 505.335936][T13252] bridge_slave_1: entered promiscuous mode [ 505.435768][T13341] 9pnet_virtio: no channels available for device [ 505.442573][T13252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.518427][T13252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.581400][ T2182] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 505.929977][ T2182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 506.171527][ T2182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.221977][ T2182] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 506.299926][ T2182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.336081][T13352] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2063'. [ 506.363837][T13252] team0: Port device team_slave_0 added [ 506.384630][ T2182] usb 1-1: config 0 descriptor?? [ 506.425331][ T2182] hub 1-1:0.0: USB hub found [ 506.549272][T13252] team0: Port device team_slave_1 added [ 506.582028][T13357] loop4: detected capacity change from 0 to 512 [ 506.634820][ T5783] Bluetooth: hci0: command tx timeout [ 506.652504][ T2182] hub 1-1:0.0: 1 port detected [ 506.672062][T13252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.693040][T13357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.707603][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.772193][T13252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.795019][T13252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.802291][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.840345][T13252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.900730][ T27] audit: type=1800 audit(1774585227.283:183): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2066" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 506.997568][T12695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.383448][T13252] hsr_slave_0: entered promiscuous mode [ 507.393259][T13252] hsr_slave_1: entered promiscuous mode [ 507.403060][T13252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.413226][T13252] Cannot create hsr debugfs directory [ 507.509363][T13371] tipc: Started in network mode [ 507.515394][T13371] tipc: Node identity f21ff6d7aa19, cluster identity 4711 [ 507.539402][ T5811] usb 1-1: USB disconnect, device number 13 [ 507.556876][T13371] tipc: Enabled bearer , priority 0 [ 507.594049][T13375] syzkaller0: entered promiscuous mode [ 507.600586][T13375] syzkaller0: entered allmulticast mode [ 507.709951][T13371] tipc: Resetting bearer [ 507.724956][T13370] tipc: Resetting bearer [ 507.784155][T13370] tipc: Disabling bearer [ 508.053698][ T2972] hsr_slave_0: left promiscuous mode [ 508.131988][ T2972] hsr_slave_1: left promiscuous mode [ 508.167589][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.198090][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.272342][ T2972] bridge_slave_1: left allmulticast mode [ 508.278318][ T2972] bridge_slave_1: left promiscuous mode [ 508.291609][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.321673][ T2972] bridge_slave_0: left allmulticast mode [ 508.381409][ T2972] bridge_slave_0: left promiscuous mode [ 508.399835][T13409] loop4: detected capacity change from 0 to 512 [ 508.707469][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.756386][T13409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.770787][T13409] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.517216][T13409] syz.4.2072 (13409) used greatest stack depth: 20240 bytes left [ 509.797716][ T2972] bond0: left allmulticast mode [ 509.809941][ T2972] bond_slave_0: left allmulticast mode [ 509.825734][ T2972] bond_slave_1: left allmulticast mode [ 509.844422][ T2972] bond0: left promiscuous mode [ 509.849773][ T2972] bond_slave_0: left promiscuous mode [ 509.855859][ T2972] bond_slave_1: left promiscuous mode [ 509.868405][ T2972] veth1_macvtap: left promiscuous mode [ 509.875207][ T2972] veth0_macvtap: left promiscuous mode [ 509.881212][ T2972] veth1_vlan: left promiscuous mode [ 510.230897][ T2972] veth0_vlan: left promiscuous mode [ 510.908517][T12695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.124592][T13425] loop4: detected capacity change from 0 to 2048 [ 511.158028][T13425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.478827][ T2972] bond4 (unregistering): Released all slaves [ 511.753453][ T2972] bond3 (unregistering): Released all slaves [ 511.970445][ T2972] bond2 (unregistering): Released all slaves [ 512.033138][ T2972] bond1 (unregistering): Released all slaves [ 513.936220][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 514.009918][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 514.036153][ T27] audit: type=1326 audit(1774585234.423:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.060620][ T27] audit: type=1326 audit(1774585234.423:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.106752][ T27] audit: type=1326 audit(1774585234.423:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.154193][ T27] audit: type=1326 audit(1774585234.423:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.178966][ T27] audit: type=1326 audit(1774585234.423:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.205562][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.213036][ T27] audit: type=1326 audit(1774585234.423:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.241446][ T27] audit: type=1326 audit(1774585234.423:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.266668][ T27] audit: type=1326 audit(1774585234.423:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.292516][ T27] audit: type=1326 audit(1774585234.423:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.321690][ T27] audit: type=1326 audit(1774585234.423:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d8f9c799 code=0x7fc00000 [ 514.349168][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.913019][ T2972] bond0 (unregistering): Released all slaves [ 515.049479][T13429] tipc: Enabling of bearer rejected, failed to enable media [ 516.685399][T13488] loop4: detected capacity change from 0 to 2048 [ 516.736940][T13488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.687661][T13252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.757694][T13252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.818368][T13252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 518.488070][T13252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 518.830263][T13523] tipc: Enabled bearer , priority 0 [ 518.853545][T13523] syzkaller0: entered promiscuous mode [ 518.870634][T13523] syzkaller0: entered allmulticast mode [ 518.918907][T13523] tipc: Resetting bearer [ 518.934217][T13522] tipc: Resetting bearer [ 518.990107][T13522] tipc: Disabling bearer [ 519.068309][T13252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.139278][T13252] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.176667][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.183933][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.789821][T13536] 9pnet_virtio: no channels available for device [ 519.805915][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.813777][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.733450][T13252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.831659][T13252] veth0_vlan: entered promiscuous mode [ 521.914342][T13252] veth1_vlan: entered promiscuous mode [ 522.032569][T13252] veth0_macvtap: entered promiscuous mode [ 522.055831][T13252] veth1_macvtap: entered promiscuous mode [ 522.076318][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.088289][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.099457][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.113709][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.163269][T13252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.177615][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.191214][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.215612][T13252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.252352][T13252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.273173][T13252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.283299][T13252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.295437][T13252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.546496][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.571288][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.681004][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.711114][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.066419][T13592] syz.4.2102 (13592): drop_caches: 2 [ 526.738825][T13656] 9pnet_virtio: no channels available for device [ 528.621039][T13660] syz.4.2111 (13660): drop_caches: 2 [ 530.858646][T13684] loop0: detected capacity change from 0 to 1024 [ 530.867772][T13684] EXT4-fs: Ignoring removed bh option [ 530.874237][T13684] EXT4-fs: Ignoring removed oldalloc option [ 530.880529][T13684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.894711][T13684] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 532.354050][T13684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 532.363390][T13684] System zones: 0-1, 3-36 [ 532.990620][T13684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.326470][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.081318][T13712] loop4: detected capacity change from 0 to 40427 [ 537.093350][T13712] F2FS-fs (loop4): invalid crc value [ 537.115868][T13712] F2FS-fs (loop4): Found nat_bits in checkpoint [ 537.286710][T13712] F2FS-fs (loop4): Start checkpoint disabled! [ 537.321864][T13712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 537.999392][ T12] kworker/u4:1: attempt to access beyond end of device [ 537.999392][ T12] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 538.056919][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 538.450772][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.494843][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.511901][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.553244][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.578248][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 538.586848][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.728826][ T5786] Bluetooth: hci2: command tx timeout [ 541.981691][T13741] syz.1.2132 (13741): drop_caches: 2 [ 542.718330][ T2972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.798660][ T5786] Bluetooth: hci2: command tx timeout [ 542.997615][ T2972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.151121][ T2972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.250488][ T2972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.479769][T13728] chnl_net:caif_netlink_parms(): no params data found [ 543.508683][ T2972] tipc: Left network mode [ 544.077766][T13763] 9pnet_virtio: no channels available for device [ 544.871646][ T5786] Bluetooth: hci2: command tx timeout [ 545.116248][T13776] loop0: detected capacity change from 0 to 1024 [ 545.222836][T13776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.251091][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.266068][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.285573][T13776] [ 545.288126][T13776] ====================================================== [ 545.295121][T13728] bridge_slave_0: entered allmulticast mode [ 545.295306][T13776] WARNING: possible circular locking dependency detected [ 545.295328][T13776] syzkaller #0 Not tainted [ 545.308489][T13728] bridge_slave_0: entered promiscuous mode [ 545.308760][T13776] ------------------------------------------------------ [ 545.308767][T13776] syz.0.2138/13776 is trying to acquire lock: [ 545.317354][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.320094][T13776] ffff888032085ac8 ( [ 545.332047][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.333522][T13776] &ei->xattr_sem){++++}-{3:3} [ 545.341202][T13728] bridge_slave_1: entered allmulticast mode [ 545.345006][T13776] , at: ext4_destroy_inline_data+0x28/0xe0 [ 545.370002][T13776] [ 545.370002][T13776] but task is already holding lock: [ 545.377468][T13776] ffff88807ce7cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 545.383545][T13728] bridge_slave_1: entered promiscuous mode [ 545.387953][T13776] [ 545.387953][T13776] which lock already depends on the new lock. [ 545.387953][T13776] [ 545.387960][T13776] [ 545.387960][T13776] the existing dependency chain (in reverse order) is: [ 545.414491][T13776] [ 545.414491][T13776] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 545.421991][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.424272][T13776] percpu_down_read+0x44/0x1a0 [ 545.440288][T13776] ext4_writepages+0x1a4/0x350 [ 545.442285][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.445885][T13776] do_writepages+0x3b3/0x630 [ 545.460702][T13776] __writeback_single_inode+0x153/0xec0 [ 545.466883][T13776] writeback_single_inode+0x21f/0x760 [ 545.473075][T13776] write_inode_now+0x183/0x210 [ 545.478477][T13776] iput+0x5ae/0x920 [ 545.478610][T13728] team0: Port device team_slave_0 added [ 545.484030][T13776] ext4_xattr_block_set+0x249e/0x32b0 [ 545.484055][T13776] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 545.484072][T13776] __ext4_expand_extra_isize+0x306/0x400 [ 545.484090][T13776] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 545.484105][T13776] ext4_evict_inode+0x7f3/0xea0 [ 545.484120][T13776] evict+0x4ca/0x8d0 [ 545.495505][T13728] team0: Port device team_slave_1 added [ 545.496120][T13776] ext4_orphan_cleanup+0xbec/0x1420 [ 545.522637][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.525476][T13776] ext4_fill_super+0x5ed0/0x6790 [ 545.525502][T13776] get_tree_bdev+0x3f3/0x520 [ 545.525517][T13776] vfs_get_tree+0x8c/0x280 [ 545.534613][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.537494][T13776] do_new_mount+0x24b/0xa40 [ 545.546675][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.550031][T13776] __se_sys_mount+0x2e7/0x3d0 [ 545.558570][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.560483][T13776] do_syscall_64+0x55/0xa0 [ 545.591863][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.595479][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.607890][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.612229][T13776] [ 545.612229][T13776] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 545.612261][T13776] __lock_acquire+0x2df1/0x7d40 [ 545.612284][T13776] lock_acquire+0x19e/0x420 [ 545.612298][T13776] down_write+0x97/0x200 [ 545.612310][T13776] ext4_destroy_inline_data+0x28/0xe0 [ 545.612326][T13776] ext4_do_writepages+0x4f0/0x3990 [ 545.612344][T13776] ext4_writepages+0x1dd/0x350 [ 545.612362][T13776] do_writepages+0x3b3/0x630 [ 545.612379][T13776] filemap_fdatawrite_wbc+0x122/0x180 [ 545.724483][T13776] file_write_and_wait_range+0x197/0x280 [ 545.731605][T13776] generic_buffers_fsync_noflush+0x6f/0x160 [ 545.738406][T13776] ext4_sync_file+0x454/0xc00 [ 545.743870][T13776] ext4_buffered_write_iter+0x2c0/0x350 [ 545.751119][T13776] ext4_file_write_iter+0x1d9/0x1880 [ 545.759147][T13776] vfs_write+0x46c/0x990 [ 545.764263][T13776] __x64_sys_pwrite64+0x19b/0x230 [ 545.769803][T13776] do_syscall_64+0x55/0xa0 [ 545.774838][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.781258][T13776] [ 545.781258][T13776] other info that might help us debug this: [ 545.781258][T13776] [ 545.792249][T13776] Possible unsafe locking scenario: [ 545.792249][T13776] [ 545.799724][T13776] CPU0 CPU1 [ 545.805387][T13776] ---- ---- [ 545.810917][T13776] rlock(&sbi->s_writepages_rwsem); [ 545.816195][T13776] lock(&ei->xattr_sem); [ 545.823039][T13776] lock(&sbi->s_writepages_rwsem); [ 545.831103][T13776] lock(&ei->xattr_sem); [ 545.835529][T13776] [ 545.835529][T13776] *** DEADLOCK *** [ 545.835529][T13776] [ 545.844269][T13776] 2 locks held by syz.0.2138/13776: [ 545.849568][T13776] #0: ffff88807ce7a418 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 545.859333][T13776] #1: ffff88807ce7cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 545.870209][T13776] [ 545.870209][T13776] stack backtrace: [ 545.876635][T13776] CPU: 0 PID: 13776 Comm: syz.0.2138 Not tainted syzkaller #0 [ 545.884287][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.894579][T13776] Call Trace: [ 545.898017][T13776] [ 545.901596][T13776] dump_stack_lvl+0x18c/0x250 [ 545.906835][T13776] ? load_image+0x400/0x400 [ 545.911536][T13776] ? show_regs_print_info+0x20/0x20 [ 545.917457][T13776] ? print_circular_bug+0x12b/0x1a0 [ 545.923445][T13776] check_noncircular+0x2fc/0x400 [ 545.928901][T13776] ? print_deadlock_bug+0x5d0/0x5d0 [ 545.934455][T13776] ? lockdep_lock+0xf5/0x230 [ 545.939683][T13776] ? _find_first_zero_bit+0xd3/0x100 [ 545.945414][T13776] __lock_acquire+0x2df1/0x7d40 [ 545.951154][T13776] ? __lock_acquire+0x7d40/0x7d40 [ 545.956278][T13776] ? verify_lock_unused+0x140/0x140 [ 545.962999][T13776] ? is_bpf_text_address+0x28f/0x2a0 [ 545.970062][T13776] ? is_bpf_text_address+0x26/0x2a0 [ 545.977452][T13776] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.984490][T13776] lock_acquire+0x19e/0x420 [ 545.990546][T13776] ? ext4_destroy_inline_data+0x28/0xe0 [ 545.997101][T13776] ? __might_sleep+0xe0/0xe0 [ 546.003446][T13776] ? read_lock_is_recursive+0x20/0x20 [ 546.009639][T13776] ? stack_trace_save+0xaa/0x100 [ 546.016002][T13776] ? stack_trace_snprint+0xf0/0xf0 [ 546.022288][T13776] ? check_noncircular+0x18a/0x400 [ 546.028481][T13776] ? __might_sleep+0xe0/0xe0 [ 546.035899][T13776] down_write+0x97/0x200 [ 546.041647][T13776] ? ext4_destroy_inline_data+0x28/0xe0 [ 546.048049][T13776] ? down_read_killable+0x340/0x340 [ 546.054577][T13776] ? lockdep_unlock+0x146/0x2e0 [ 546.061743][T13776] ? ext4_journal_check_start+0x178/0x250 [ 546.068006][T13776] ext4_destroy_inline_data+0x28/0xe0 [ 546.075754][T13776] ext4_do_writepages+0x4f0/0x3990 [ 546.081150][T13776] ? verify_lock_unused+0x140/0x140 [ 546.088100][T13776] ? __lock_acquire+0x1347/0x7d40 [ 546.093306][T13776] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 546.100855][T13776] ? rcu_read_lock_any_held+0xb4/0x140 [ 546.106672][T13776] ? __lock_acquire+0x7d40/0x7d40 [ 546.112627][T13776] ext4_writepages+0x1dd/0x350 [ 546.118213][T13776] ? ext4_read_folio+0x2f0/0x2f0 [ 546.123680][T13776] ? __rwlock_init+0x150/0x150 [ 546.128725][T13776] ? do_raw_spin_unlock+0x121/0x230 [ 546.134281][T13776] ? ext4_read_folio+0x2f0/0x2f0 [ 546.139924][T13776] do_writepages+0x3b3/0x630 [ 546.145656][T13776] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 546.152025][T13776] ? __lock_acquire+0x7d40/0x7d40 [ 546.160528][T13776] ? __rwlock_init+0x150/0x150 [ 546.168153][T13776] ? do_raw_spin_unlock+0x121/0x230 [ 546.174803][T13776] filemap_fdatawrite_wbc+0x122/0x180 [ 546.181611][T13776] file_write_and_wait_range+0x197/0x280 [ 546.187994][T13776] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 546.194596][T13776] ? ext4_buffered_write_iter+0xd7/0x350 [ 546.202080][T13776] ? __lock_acquire+0x7d40/0x7d40 [ 546.207850][T13776] generic_buffers_fsync_noflush+0x6f/0x160 [ 546.216048][T13776] ext4_sync_file+0x454/0xc00 [ 546.223056][T13776] ext4_buffered_write_iter+0x2c0/0x350 [ 546.230738][T13776] ext4_file_write_iter+0x1d9/0x1880 [ 546.239135][T13776] ? rcu_read_lock_any_held+0xb4/0x140 [ 546.246182][T13776] ? ext4_file_read_iter+0x670/0x670 [ 546.252791][T13776] vfs_write+0x46c/0x990 [ 546.258709][T13776] ? file_end_write+0x250/0x250 [ 546.265839][T13776] ? __fget_files+0x43d/0x4b0 [ 546.272142][T13776] ? __fdget+0x180/0x210 [ 546.277212][T13776] ? __x64_sys_pwrite64+0xf6/0x230 [ 546.283577][T13776] __x64_sys_pwrite64+0x19b/0x230 [ 546.290304][T13776] ? ksys_pwrite64+0x1c0/0x1c0 [ 546.295625][T13776] ? lockdep_hardirqs_on+0x98/0x150 [ 546.301539][T13776] do_syscall_64+0x55/0xa0 [ 546.306442][T13776] ? clear_bhb_loop+0x40/0x90 [ 546.311405][T13776] ? clear_bhb_loop+0x40/0x90 [ 546.317335][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.324468][T13776] RIP: 0033:0x7f8535b9c799 [ 546.329873][T13776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.358139][T13776] RSP: 002b:00007f8536b20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 546.369657][T13776] RAX: ffffffffffffffda RBX: 00007f8535e15fa0 RCX: 00007f8535b9c799 [ 546.378339][T13776] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 546.387451][T13776] RBP: 00007f8535c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 546.397165][T13776] R10: 000000000004fed0 R11: 0000000000000246 R12: 0000000000000000 [ 546.407235][T13776] R13: 00007f8535e16038 R14: 00007f8535e15fa0 R15: 00007ffc1db08258 [ 546.417980][T13776] [ 546.433861][T13776] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 546.453179][T13776] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 546.469364][T13776] EXT4-fs (loop0): This should not happen!! Data will be lost [ 546.469364][T13776] [ 546.471053][T13728] hsr_slave_0: entered promiscuous mode [ 546.480684][T13776] EXT4-fs (loop0): Total free blocks count 0 [ 546.498766][T13786] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 546.502353][T13728] hsr_slave_1: entered promiscuous mode [ 546.512925][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 546.527706][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 546.568332][T13786] EXT4-fs (loop0): This should not happen!! Data will be lost [ 546.568332][T13786] [ 546.584629][T13776] EXT4-fs (loop0): Free/Dirty block details [ 546.591685][T13776] EXT4-fs (loop0): free_blocks=68451041280 [ 546.646332][T13776] EXT4-fs (loop0): dirty_blocks=288 [ 546.664960][T13786] EXT4-fs (loop0): Total free blocks count 0 [ 546.733269][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 546.811396][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 546.963412][ T5786] Bluetooth: hci2: command tx timeout [ 547.377078][ T9] usb 2-1: device descriptor read/all, error -71 [ 547.521342][ T8] usb 5-1: device descriptor read/all, error -71 [ 547.683563][ T2972] IPVS: stopping master sync thread 6697 ... [ 547.855610][ T2972] hsr_slave_0: left promiscuous mode [ 547.865132][ T2972] hsr_slave_1: left promiscuous mode [ 547.874383][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.884257][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.894970][ T2972] bridge_slave_1: left allmulticast mode [ 547.902230][ T2972] bridge_slave_1: left promiscuous mode [ 547.908694][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.930158][ T2972] bridge_slave_0: left allmulticast mode [ 547.937059][ T2972] bridge_slave_0: left promiscuous mode [ 547.947439][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.965370][ T2972] veth1_macvtap: left promiscuous mode [ 547.974128][ T2972] veth0_macvtap: left promiscuous mode [ 547.985137][ T2972] veth1_vlan: left promiscuous mode [ 547.998627][ T2972] veth0_vlan: left promiscuous mode [ 548.081204][ T2972] bond5 (unregistering): Released all slaves [ 548.100570][ T2972] bond4 (unregistering): Released all slaves [ 548.134878][ T2972] bond3 (unregistering): (slave veth5): Releasing active interface [ 548.330839][ T2972] bond3 (unregistering): Released all slaves [ 548.524323][ T2972] bond2 (unregistering): Released all slaves [ 548.558235][ T2972] bond1 (unregistering): (slave veth3): Releasing active interface [ 548.749219][ T2972] bond1 (unregistering): Released all slaves [ 548.914923][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 548.951340][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 548.988773][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.030629][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.180027][ T2972] bond0 (unregistering): Released all slaves [ 549.673967][ T2972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.730026][ T2972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.788005][ T2972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.859538][ T2972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.965751][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.038053][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.099489][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.157234][ T2972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.521757][ T2972] tipc: Left network mode [ 550.555018][ T2972] tipc: Left network mode [ 551.915107][ T2972] hsr_slave_0: left promiscuous mode [ 551.921801][ T2972] hsr_slave_1: left promiscuous mode [ 551.930691][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.938827][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.951729][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.959855][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.969233][ T2972] bridge_slave_1: left allmulticast mode [ 551.975495][ T2972] bridge_slave_1: left promiscuous mode [ 551.981279][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.991199][ T2972] bridge_slave_0: left allmulticast mode [ 551.997463][ T2972] bridge_slave_0: left promiscuous mode [ 552.003885][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.014317][ T2972] hsr_slave_0: left promiscuous mode [ 552.020333][ T2972] hsr_slave_1: left promiscuous mode [ 552.027434][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.037522][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.046075][ T2972] bridge_slave_1: left allmulticast mode [ 552.052664][ T2972] bridge_slave_1: left promiscuous mode [ 552.058469][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.067350][ T2972] bridge_slave_0: left allmulticast mode [ 552.073303][ T2972] bridge_slave_0: left promiscuous mode [ 552.079067][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.091944][ T2972] hsr_slave_0: left promiscuous mode [ 552.097814][ T2972] hsr_slave_1: left promiscuous mode [ 552.104795][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.113298][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.123499][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.131446][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.139609][ T2972] bridge_slave_1: left allmulticast mode [ 552.145513][ T2972] bridge_slave_1: left promiscuous mode [ 552.153266][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.162127][ T2972] bridge_slave_0: left allmulticast mode [ 552.168077][ T2972] bridge_slave_0: left promiscuous mode [ 552.174193][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.185098][ T2972] hsr_slave_0: left promiscuous mode [ 552.190908][ T2972] hsr_slave_1: left promiscuous mode [ 552.196891][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.205745][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.213965][ T2972] bridge_slave_1: left allmulticast mode [ 552.219804][ T2972] bridge_slave_1: left promiscuous mode [ 552.225655][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.234631][ T2972] bridge_slave_0: left allmulticast mode [ 552.241066][ T2972] bridge_slave_0: left promiscuous mode [ 552.247245][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.258296][ T2972] veth1_macvtap: left promiscuous mode [ 552.264290][ T2972] veth0_macvtap: left promiscuous mode [ 552.270565][ T2972] veth1_vlan: left promiscuous mode [ 552.276315][ T2972] veth0_vlan: left promiscuous mode [ 552.282840][ T2972] veth1_macvtap: left promiscuous mode [ 552.288624][ T2972] veth0_macvtap: left promiscuous mode [ 552.294378][ T2972] veth1_vlan: left promiscuous mode [ 552.299651][ T2972] veth0_vlan: left promiscuous mode [ 552.552880][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 552.571644][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 552.604834][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.638857][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.698861][ T2972] bond0 (unregistering): Released all slaves [ 552.750637][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 552.761386][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 552.773103][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.785800][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.834680][ T2972] bond0 (unregistering): Released all slaves [ 552.998161][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 553.012931][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 553.053669][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.092560][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.159605][ T2972] bond0 (unregistering): Released all slaves [ 553.198154][ T2972] bond7 (unregistering): Released all slaves [ 553.235392][ T2972] bond6 (unregistering): (slave veth7): Releasing active interface [ 553.432595][ T2972] bond6 (unregistering): Released all slaves [ 553.443901][ T2972] bond5 (unregistering): Released all slaves [ 553.455995][ T2972] bond4 (unregistering): Released all slaves [ 553.646675][ T2972] bond3 (unregistering): Released all slaves [ 553.677625][ T2972] bond2 (unregistering): (slave veth5): Releasing active interface [ 553.866801][ T2972] bond2 (unregistering): Released all slaves [ 553.898527][ T2972] bond1 (unregistering): (slave veth3): Releasing active interface [ 554.104876][ T2972] bond1 (unregistering): Released all slaves [ 554.708629][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 554.766005][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 554.819422][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.874579][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface