last executing test programs: 1m50.146859699s ago: executing program 1 (id=2): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f0000002180)="af", 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0x9) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) 1m49.366132214s ago: executing program 1 (id=12): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) 1m48.87155306s ago: executing program 1 (id=16): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}, {r2, r3+10000000}}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m48.111256793s ago: executing program 1 (id=21): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d7, &(0x7f0000000680)="$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") socket$nl_audit(0x10, 0x3, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1, 0x7fffffff) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.s']) 1m47.292720909s ago: executing program 1 (id=28): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000009c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44d57ecc7d80c5ce0c6769643d", @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRESDEC, @ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="4599"], 0x1, 0x706, &(0x7f0000001100)="$eJzs3U1oHOfdAPD/rFYfqxccObHjvCWQJYa0VNSWLJRWvdQtpegQSkgPOQtbjhev5SApRTalVvpx7yGnntKDbqGHkt4N6bkhUNKjjoFCLjnppjKzM7uz2tXuytZX3N/PzMwz83zMM//5Wu1ingD+Zy3PRvVJJLE8+9ZWur67s9Ac21mYzLObETEREZWIakSSbkrWIsu9mU/x/5HnlJY9PmosvfPlN7tftdaq+ZSVrwyq18dE76btfIp6RIzly17jh7T46cHdd7V369D2RpW0jzAN2NUicPHnZ2oVntl+j+123if/yubtMn2qH+W+Bc6ppPXezHVu9ZmI6YiYimi99fOnQ+X0e3i8ts+6AwAAAHBUtSPX+OyFvdiLrbhwIv0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA51Q+/n+ST5UiXY+kGP9/It8WefocGj4Q4heTreWTk+8MAAAAAAAAAJy41/ZiL7biQrG+n2S/+b9e+o3//+KD2IjVWI9rsRUrsRmbsR7zETFTamhia2Vzc30+qxlxaUDNG/F5n5o3Du/jze7V5DiOGwAAAAAAAADOsakh+ffGe7f9LpY7v/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB5kESMtRbZdKlIz0SlGhFTRbntiM8jYuJse3skSb+NT06/HwAAAPBMprpXk6kR6rzwOPZiKy4U65XpTv2Yig9iLTajEZvRjNW4nf8Nnf7VX9ndWWju7izcT6fedn/69ZG6nrUYre8e+u/5laxELe5EI9tyLW5FEvuZSt7KK7s7C+nyfv9+fZj2KflJbkBvxkrp2+nsyqdZ+k/d3yJUj3SIIzrYaOXQkjNZ7ng7InN539IaF4sI9I/E0LNTHbin+ai0v/m5NHhP/WP+4eC9Tx8o1febmzNxMBI3otI+Qy8PjkTEd//+ybt3m2v37t7ZmD0/h9TX46ElDkZioRSJK89RJIabyyJxub2+HL+IX8VsfD35dqxHI34dK7EZq/UifyW/ntP5zOBIfTFdXnt7WE/Se7Lefn7161M9uvoU9fh5llqJ17NzeiEalYgHEbEab2b/bsR8+2nQOcOXR7jrKyM8aUuufi9btMMUtcPL/nW0Jo9LGteLpbiWn7kzWV55SydKL/aNUvGuG/19VFL9Tp5IW/j9wPfDaTsYiflSJF467HpphfQv++l8o7l2b/3uyvsj7u+NfJneR38c8JY4kdf0QOkZfjGm8oO7mM2T7J6ay/JeaveqiNe/GxHzWd6ldivdb9w073K7Xnanxi/jQdzuulN/GIuxGEtZ6Zez0uM9b6w070q7pe5neJqXftKqtn/YKX/eehDN1uehiO1v/WMb4Hk2/f3pidp/av+sfVz7Q+1u7a2pn03+aPLViRj/x/iPq3Njb1ReTf4WH8dvO3//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT68aESvN5ur6xsNH93oTlf5ZSd/CpcR+MZDYgDJdiSQfKmeEwsnGw0f7QxscnJjMu/eU1Y8zUYzWOLxw/QS7kWwfPF9Tw89FMcrTCLtI8mEqS5dWRDx1n4s9d7aMl8u8O3a25zRP1I9cq95zXHmiuGBLhY9+9db6na+xQ54AQx4cY8fw8AHO1PXN++9f33j46AeN+yvvrb63uja+uLg0t7T45sL1O43m6lxrXqpw+qPqASek/HGibSIiXhted8BArQAAAAAAAAAAAMAJOo3/C3HWxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8uy3PRvVJJDE/d20uXd/dWWimU5HulKxGRCUikt9EJJ9F3IzWFDNZ9uPB+/mosfTOl9/sftVpK50iaTW6nQyoOigvt51PUY+IsXz5DLrauzW8vYlOcrJPdtI+ijRgV4vAwVn7bwAAAP//uxzxHw==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m46.120827286s ago: executing program 1 (id=37): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1m45.623161162s ago: executing program 32 (id=37): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1m27.111932367s ago: executing program 0 (id=130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000540)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}}, &(0x7f00000000c0)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1m26.815143797s ago: executing program 0 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) 1m26.432316408s ago: executing program 0 (id=134): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xd26, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m26.013772992s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80000, 0x0) 1m25.671447382s ago: executing program 0 (id=140): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x800, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 1m25.240860146s ago: executing program 0 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x80, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1m24.629843165s ago: executing program 33 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x80, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1m22.731725406s ago: executing program 4 (id=152): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc0000000000000000000000000000000600150002"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m21.944272101s ago: executing program 4 (id=155): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/49, 0x31) getdents(r2, 0xfffffffffffffffd, 0x58) 1m21.829856724s ago: executing program 4 (id=157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) unshare(0x22020600) pselect6(0x40, &(0x7f0000000000)={0x1, 0xffffffffdeb0fac2, 0x8, 0x1, 0x1, 0x23, 0xfffffffffffffff9, 0x7}, 0x0, &(0x7f00000001c0)={0x8, 0xff, 0x8000, 0x3, 0xda94, 0x64, 0x3, 0x40}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 1m20.629371372s ago: executing program 4 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m19.126468739s ago: executing program 4 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m14.212884935s ago: executing program 4 (id=194): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="91", 0x1}], 0x1}}], 0x1, 0x20008004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m13.821647117s ago: executing program 34 (id=194): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="91", 0x1}], 0x1}}], 0x1, 0x20008004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 32.860630742s ago: executing program 5 (id=430): getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) 32.098483206s ago: executing program 5 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) 31.733089057s ago: executing program 5 (id=449): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000140)={0x0, 0x6}) 31.295182941s ago: executing program 5 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80000, 0x0) 31.061664449s ago: executing program 5 (id=445): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001100)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000c40)="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", 0x14f}, {&(0x7f0000000880)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbba0000007e6302f1ac521b8e43d5135865c470601dd207047aa7946f8ba2f5999ff407028a586cd59ee0c3a1cc57adb3691cbe12158713ef8864796df4503d56d44c71c7ab62adc02e520c23366b4c7ad6abf821cc125b5f464e99be289c44cc456055e3d5f2e78c0c8e019e1445d45d2ad874775619562bc88fe7dc6c580d2029f1faecbfda8a32759c75f5b1b3a1a963d9e304f59c0e0d7d0d9c306a3c39ae0b20e87100000000000000000000218e0000000000000000000000a09b48bf76bdefb5f5d63189b87c0776316a841a08fed8f1da17d60e02cd91fd11fb183bd16987a0a2809e2a51fc7717c493cc5724b644bb6c609be81353", 0x11a}, {&(0x7f0000000580)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e99927685000000000000", 0x9e}, {&(0x7f0000000a80)="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"/430, 0x1ae}, {&(0x7f0000000700)="0b41dae71fdbfbd927fcefd552617a65c06039", 0x13}], 0x7}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000440)="f583", 0x2}], 0x1) 30.671449131s ago: executing program 5 (id=458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="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", 0x10b}, {&(0x7f0000000280)="51e4b68f19536342b73677cd5193777110de0eae1de8642c503cfd94f0929123460e2fe755b2ef981f6cb4794a5c33e2b006c993cfebcfdd2813b72755830fc1bcfbbd7a1ff49f6ec717c6e10cfe71375323712d4f2882b87c870932ce4a5ad25b467da6530db47373882b", 0x6b}, {&(0x7f0000000800)="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", 0x16a}, {&(0x7f00000001c0)="af930f839896cd6a27c09f1e7cdc9c7d3f9a35c4552ebd13765217f835", 0x1d}], 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xf) 29.820898518s ago: executing program 35 (id=458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="1feb4934c3a9dd7b4a6487a396e4a71fdc2e89eb3d55388a6578aefbddb891034a52a3b66f79499db172def10fc8db93f99bc0c966b43520d9dfb463a66e0d4394322d7b12a2c4a2021e73c6f08cd14bfdf4565bf2ae6509a78fcdd601fdbda3c358450b3c4faa4225bfb17eb25fdedd57edba4b5ef399040800000000000041f15918f38e9e493a4de9cb11e6b72be41828a7c71db41bb2cdcf3540a199921fd7051bdfd032b8811f4daf9c700ee72a0d06344b02c83e62f803f53034531633b0f2658a5dc66d605efa17b1f17c194a8f342f9309100140f9a6a0f017198972bb694656587bdb5191b7b9deb064473a7977c6698edfa194b50a9527d8dd081b8659d8e5df1ae80e765452", 0x10b}, {&(0x7f0000000280)="51e4b68f19536342b73677cd5193777110de0eae1de8642c503cfd94f0929123460e2fe755b2ef981f6cb4794a5c33e2b006c993cfebcfdd2813b72755830fc1bcfbbd7a1ff49f6ec717c6e10cfe71375323712d4f2882b87c870932ce4a5ad25b467da6530db47373882b", 0x6b}, {&(0x7f0000000800)="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", 0x16a}, {&(0x7f00000001c0)="af930f839896cd6a27c09f1e7cdc9c7d3f9a35c4552ebd13765217f835", 0x1d}], 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xf) 24.251250844s ago: executing program 7 (id=479): ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21.050114655s ago: executing program 7 (id=490): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x101500, 0x252) lseek(r2, 0x2, 0x1) getdents64(r2, 0x0, 0x22) 18.442314237s ago: executing program 7 (id=504): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) mq_unlink(&(0x7f00000002c0)='$@\x00') 17.868034185s ago: executing program 7 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 17.599100964s ago: executing program 7 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) lseek(r0, 0x1, 0x3) 16.988841233s ago: executing program 7 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x1, 0x2}}, 0x28) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 16.392980132s ago: executing program 36 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x1, 0x2}}, 0x28) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 4.74872581s ago: executing program 2 (id=556): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000900)=ANY=[@ANYRES32], 0x23) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf8, r3}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) 4.562740366s ago: executing program 9 (id=544): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4.562052976s ago: executing program 2 (id=559): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 4.42726327s ago: executing program 8 (id=545): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) gettimeofday(0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e18, &(0x7f000000a040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xb0) lseek(r0, 0xc, 0x2) 3.892787097s ago: executing program 8 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.892702217s ago: executing program 3 (id=547): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8d) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents(r2, 0x0, 0x0) 3.655556265s ago: executing program 3 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000b80)=@v3={0x3000000, [{0xae, 0x7}, {0xa, 0x79}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 3.447913701s ago: executing program 2 (id=550): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x40, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x10, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc}}]}, 0x3c}}, 0x4002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.306574176s ago: executing program 8 (id=551): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) fallocate(r1, 0x10, 0x6, 0x10001) 3.254038567s ago: executing program 3 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.017440385s ago: executing program 2 (id=558): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 2.768359493s ago: executing program 9 (id=560): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000300), 0x1, 0x479, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) syz_open_dev$MSR(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x62b266a4c604c0ba) 2.712209774s ago: executing program 3 (id=562): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000003c0)=@mmap={0x800000, 0x1, 0x4, 0x100004, 0x10000, {}, {0x2, 0x1, 0x0, 0x0, 0x0, 0x4, "21bb54f0"}, 0x0, 0x1, {}, 0xfffffffc}) 2.711040064s ago: executing program 2 (id=563): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) accept(r1, 0x0, 0x0) 2.381604105s ago: executing program 2 (id=565): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x8001, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r2, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000380)={0x20, 0xb, 0x3d, "9b733f80384846cdf4f946184dac167906ce702f0c8fa8a23c6eb01ba3420cbfa4dbf382299fac4482348a7079f7d55f1095662f1a3db7632df21cbae7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.229312559s ago: executing program 3 (id=566): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040), 0x10) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x7}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.170418562s ago: executing program 9 (id=567): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0x100}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2.089416564s ago: executing program 8 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) 1.961720458s ago: executing program 9 (id=569): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d81482fb16) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x2, 0x0) read(r0, &(0x7f0000002300)=""/99, 0x63) 1.853617322s ago: executing program 6 (id=570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c0015"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8a0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0) 1.694298887s ago: executing program 9 (id=571): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.524306332s ago: executing program 6 (id=572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) 1.27379764s ago: executing program 6 (id=573): syz_emit_ethernet(0x4e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000000)={[{@resuid}, {@grpid}, {@jqfmt_vfsold}, {@nombcache}]}, 0x2, 0x5ed, &(0x7f0000000740)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x2000, 0x101, 0x13f}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x42) 1.009997618s ago: executing program 8 (id=574): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001240)="0c000000ce151748cdfc09e148fc5c339b8d4f96d15316ed0507972e23d8bc7ea9e894c75535ec19294832ad44e3b9", 0x2f) sendto$phonet(r3, &(0x7f0000000240)="8908a478bde8054371c85b6eccf7ba50082bf88a513d0a39610f768b067f60581f8417c3e5dfc839687463cd04aa20d068defda4b46a5c848d1d94bc4948941ed2ef880b7f95f065b37395fb5d0d256f49", 0x51, 0x20008001, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000084ffe8, 0xb) 708.934798ms ago: executing program 6 (id=575): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 692.456968ms ago: executing program 8 (id=576): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}]}, 0x2, 0x4f7, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d07e, 0x2) io_setup(0x80, &(0x7f0000000340)=0x0) io_submit(r2, 0x200000000000013a, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 674.402449ms ago: executing program 9 (id=577): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFF2400bVb20XECoqoSoOCAOqbE3lslu1njXbW0s4fwNIIHECf4EDkgckHriwI0jEgdAlANSAQsUI3FYNLNje2uvm6293lW8n480mXnzZub73m5m3tu3yb4Axta1iNiOiOmIeDMi5or9SbHEq50lO+7Rztbi7s7WYhLt9hv/TPL8bF90nZO5WFxzNiK++bWI7yZH4zY3Nu8v1GrVtSJdbtVXy82NzZsr9YXl6nL1QaVyZ/7OrZduv1gZWF2v1n/5/ldXXvvWb3796fd+v/3lH2TFulTkdddjkDpVn9qPk5mMiNfOItgITBTr6RGXg5NJI+JjEfG5/P6fi4n8bycAcJ6123PRnutOAwDnXZqPgSVpKSLStOgElDpjeM/GhbTWaLZu3GusP1jqjJVdjqn03kqteuvKzB+/nx88lWTp+Twvz8/TlUPp2xFxJSJ+PPNUni4tNmpLo+nyAMDYu9jd/kfEf2bStFTq69Qe3+oBAE+M2VEXAAAYOu0/AIwf7T8AjJ8+2v/iy/7tMy8LADAcPv8DwPjR/gPA+NH+A8BY+cbrr2dLe7f4/eultzbW7zfeurlUbd4v1dcXS4uNtdXScqOxnP9mT/1x16s1GqvzL8T6O+VWtdkqNzc279Yb6w9ad/Pf9b5bnRpKrQCAD3Pl6rt/SCJi++Wn8iW65nLQVsP5lg7wKODJMnG6068NqhzA8JntC8ZXX5/x807C7868LMBo9Pwx79memx/0048Q5PBFHr79EU4GBu36J/sf/zfHM5wvRvZhfJ1s/P+VgZcDGL4Tj///ebDlAIav3U4Oz/k/vZ8FAJxLp/g3/u0fDqoTAozU4ybzHsj3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDOXIqI70WSlvK5wNPsz7RUing6Ii7HVHJvpVa9FRHPxNWImJrJ0vOjLjQAcErp35Ni/q/rc89fOpw7nfx3Jl9HxNs/e+Mn7yy0Wmvz2f5/7e+f2Zs+rHJw3inmFQQA+vfXfg7K2+9Kse76IP9oZ2txbznDMh7x/lf2Jx9d3N3ZypdOzmS02+12xGzel7jw7yQmi3NmI+K5iJgYQPzthxHxiV71T/KxkcvFzKfd8aOI/fRQ46cfiJ/meZ119vJ9fABlgXHzbvb8ebXX/ZfGtXzd+/6fzZ9Qp5c//2Yj9p59u13xJ4tIEz3iZ/f8tX5jvPDbrx/Z2Z7r5D2MeG6yV/xkP35yTPzn+4z/p0995kevHJPX/nnE9egdvztWuVVfLTc3Nm+u1BeWq8vVB5XKnfk7t166/WKlnI9Rl/dGqo/6x8s3njmubFn9LxwTv/POXzxU/+n9c7/QZ/1/8b83v/PZg+TM4fhf+nzv9//ZfN379c/axC/2GX/hwq+Onb47i790TP0f9/7f6DP+e3/bXOrzUABgCJobm/cXarXq2qk2sk+hg7jOkY2siP0dvNddPF3Qv0S+cfCyJJHEoOuVdcb6OXjqrF7VM9+Y3O8rDvbK386uOOTqpAOvxUk24nKx8WhYQUf3TAKG4+CmH3VJAAAAAAAAAAAAAACA4wzj/zCNuo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8PAAD//86qwxg=") mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x390587b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000180)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1) 279.715792ms ago: executing program 6 (id=578): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "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"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 47.644589ms ago: executing program 6 (id=579): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 0s ago: executing program 3 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x40400) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./bus\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r0, 0x329c, 0x0) kernel console output (not intermixed with test programs): 6081 - 0 [ 90.096393][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.105362][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.123907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.269845][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.319409][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.345968][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.378990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.437216][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.461792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.474552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.497374][ T4318] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 90.517592][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.529099][ T4318] usb 3-1: Product: syz [ 90.533783][ T4318] usb 3-1: Manufacturer: syz [ 90.538574][ T4318] usb 3-1: SerialNumber: syz [ 90.546922][ T4318] usb 3-1: config 0 descriptor?? [ 90.848527][ T22] usb 3-1: USB disconnect, device number 2 [ 90.926142][ T4387] loop4: detected capacity change from 0 to 512 [ 90.968948][ T4387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.054904][ T4387] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.11: couldn't read orphan inode 26 (err -116) [ 91.128982][ T4387] EXT4-fs (loop4): Remounting filesystem read-only [ 91.157240][ T4387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.185801][ T4387] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.353199][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 91.842200][ T14] cfg80211: failed to load regulatory.db [ 91.860778][ T4412] loop4: detected capacity change from 0 to 2048 [ 91.919562][ T4412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.004101][ T26] audit: type=1800 audit(1778718970.980:2): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 92.286744][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 92.338038][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 92.367452][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 92.393217][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 92.432776][ T125] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.484573][ T125] lan78xx: probe of 4-1:1.0 failed with error -71 [ 92.512190][ T4419] loop1: detected capacity change from 0 to 1024 [ 92.540288][ T125] usb 4-1: USB disconnect, device number 2 [ 93.320103][ T4436] Illegal XDP return value 4294967294 on prog (id 5) dev syz_tun, expect packet loss! [ 93.984282][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.149516][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.316196][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.438083][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.454457][ T4421] loop0: detected capacity change from 0 to 40427 [ 94.497661][ T4421] F2FS-fs (loop0): Unrecognized mount option "†º¸!jèÝ'u‘æÿ’ô.Õ(Ò" or missing value [ 95.348911][ T4458] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 95.370554][ T4459] loop3: detected capacity change from 0 to 128 [ 95.432311][ T4459] ======================================================= [ 95.432311][ T4459] WARNING: The mand mount option has been deprecated and [ 95.432311][ T4459] and is ignored by this kernel. Remove the mand [ 95.432311][ T4459] option from the mount to silence this warning. [ 95.432311][ T4459] ======================================================= [ 95.640864][ T4459] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 95.720212][ T4459] hpfs: filesystem error: improperly stopped [ 95.726291][ T4459] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 95.790219][ T4459] hpfs: You really don't want any checks? You are crazy... [ 95.812403][ T4459] hpfs: hpfs_map_sector(): read error [ 95.817856][ T4459] hpfs: code page support is disabled [ 95.869842][ T4459] hpfs: hpfs_map_4sectors(): unaligned read [ 95.880397][ T4459] hpfs: hpfs_map_4sectors(): unaligned read [ 95.902421][ T4459] hpfs: filesystem error: unable to find root dir [ 95.941283][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.951031][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.959039][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.967160][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.975088][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.983624][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.056352][ T4454] loop2: detected capacity change from 0 to 32768 [ 96.246516][ T4454] JBD2: Ignoring recovery information on journal [ 96.446367][ T4454] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.719952][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 96.745165][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 96.787336][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 97.041809][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 97.306862][ T4490] device ipip0 entered promiscuous mode [ 97.508532][ T4500] loop2: detected capacity change from 0 to 1024 [ 97.602811][ T4500] EXT4-fs: Ignoring removed bh option [ 97.691894][ T4468] chnl_net:caif_netlink_parms(): no params data found [ 97.723009][ T4500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.856252][ T75] device hsr_slave_0 left promiscuous mode [ 97.883894][ T4500] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.915040][ T75] device hsr_slave_1 left promiscuous mode [ 97.966706][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.989990][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.009036][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.017215][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 98.071229][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.144064][ T75] device bridge_slave_1 left promiscuous mode [ 98.164987][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.231119][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 98.237919][ T75] device bridge_slave_0 left promiscuous mode [ 98.259592][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.425193][ T75] device veth1_macvtap left promiscuous mode [ 98.449603][ T75] device veth0_macvtap left promiscuous mode [ 98.452812][ T4523] loop4: detected capacity change from 0 to 4096 [ 98.471975][ T4523] EXT4-fs: inline encryption not supported [ 98.504528][ T4523] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 98.519815][ T4523] System zones: 0-5 [ 98.530482][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.554409][ T75] device veth1_vlan left promiscuous mode [ 98.601842][ T75] device veth0_vlan left promiscuous mode [ 99.138279][ T4539] loop0: detected capacity change from 0 to 512 [ 99.158468][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 99.189018][ T4539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.263998][ T4539] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.63: iget: bad i_size value: 38620345925642 [ 99.401554][ T4539] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.63: couldn't read orphan inode 15 (err -117) [ 99.497943][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.688984][ T4545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.63: bg 0: block 5: invalid block bitmap [ 99.728555][ T4545] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 152 with error 28 [ 99.769850][ T4545] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.769850][ T4545] [ 99.833364][ T4545] EXT4-fs (loop0): Total free blocks count 0 [ 99.839455][ T4545] EXT4-fs (loop0): Free/Dirty block details [ 99.883957][ T4545] EXT4-fs (loop0): free_blocks=0 [ 99.900931][ T4545] EXT4-fs (loop0): dirty_blocks=152 [ 99.927150][ T4545] EXT4-fs (loop0): Block reservation details [ 99.959869][ T4545] EXT4-fs (loop0): i_reserved_data_blocks=152 [ 100.089830][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 100.205378][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 100.486764][ T4554] loop4: detected capacity change from 0 to 128 [ 100.619686][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.676319][ T26] audit: type=1326 audit(1778718979.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 100.709705][ T26] audit: type=1326 audit(1778718979.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 100.778320][ T26] audit: type=1326 audit(1778718979.680:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 100.809777][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 100.818476][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.839802][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.851854][ T26] audit: type=1326 audit(1778718979.680:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 100.877562][ T4318] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 100.909990][ T26] audit: type=1326 audit(1778718979.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 100.939993][ T4318] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 100.961765][ T4318] usb 1-1: Manufacturer: syz [ 100.971473][ T4318] usb 1-1: config 0 descriptor?? [ 100.983563][ T75] team0 (unregistering): Port device team_slave_1 removed [ 101.011772][ T26] audit: type=1326 audit(1778718979.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 101.059805][ T26] audit: type=1326 audit(1778718979.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 101.104613][ T26] audit: type=1326 audit(1778718979.740:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 101.131260][ T75] team0 (unregistering): Port device team_slave_0 removed [ 101.222810][ T26] audit: type=1326 audit(1778718979.740:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5a7ed9ce59 code=0x7ffc0000 [ 101.266500][ T4562] loop3: detected capacity change from 0 to 512 [ 101.298274][ T26] audit: type=1326 audit(1778718979.790:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.68" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a7ed5d68e code=0x7ffc0000 [ 101.312159][ T4562] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 101.337690][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.435710][ T4318] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0001/input/input5 [ 101.500337][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.525184][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 101.582105][ T4318] creative-sb0540 0003:041E:3100.0001: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 101.696919][ T4318] usb 1-1: USB disconnect, device number 2 [ 101.966066][ T4571] fido_id[4571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 102.159874][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 102.409887][ T4587] loop0: detected capacity change from 0 to 8 [ 102.467570][ T4587] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.519797][ T4587] SQUASHFS error: Failed to read block 0x9b: -5 [ 102.526160][ T4587] SQUASHFS error: Unable to read metadata cache entry [99] [ 102.579757][ T4587] SQUASHFS error: Unable to read inode 0x127 [ 102.718273][ T75] bond0 (unregistering): Released all slaves [ 104.244673][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 104.431066][ T4620] loop0: detected capacity change from 0 to 32768 [ 104.471452][ T4620] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.91 (4620) [ 104.554392][ T4620] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 104.589945][ T4620] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.625887][ T4620] BTRFS info (device loop0): force zlib compression, level 3 [ 104.638103][ T4620] BTRFS info (device loop0): force clearing of disk cache [ 104.658130][ T4620] BTRFS info (device loop0): setting nodatasum [ 104.676276][ T4620] BTRFS info (device loop0): use zlib compression, level 3 [ 104.698092][ T4620] BTRFS info (device loop0): allowing degraded mounts [ 104.715500][ T4620] BTRFS info (device loop0): enabling disk space caching [ 104.732090][ T4620] BTRFS info (device loop0): disk space caching is enabled [ 104.984131][ T4620] BTRFS info (device loop0): enabling ssd optimizations [ 105.018222][ T4620] BTRFS info (device loop0): rebuilding free space tree [ 105.223720][ T4620] BTRFS info (device loop0): disabling free space tree [ 105.240450][ T4620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.298703][ T4620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.547766][ T4275] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 106.938581][ T4655] loop0: detected capacity change from 0 to 1024 [ 106.970583][ T4655] EXT4-fs: Ignoring removed bh option [ 106.976060][ T4655] EXT4-fs: inline encryption not supported [ 107.020596][ T4655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.085924][ T4655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.109198][ T4657] loop4: detected capacity change from 0 to 512 [ 107.224565][ T4657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.270056][ T4657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.361216][ T4657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.409882][ T4657] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.452457][ T4657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.464653][ T4657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.478032][ T4657] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 107.497400][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 107.757473][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 107.889173][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.932182][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.942930][ T4670] netlink: 165 bytes leftover after parsing attributes in process `syz.4.99'. [ 107.958057][ T4468] device bridge_slave_0 entered promiscuous mode [ 107.978046][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.002014][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.029078][ T4468] device bridge_slave_1 entered promiscuous mode [ 108.187879][ T4468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.208195][ T4673] loop4: detected capacity change from 0 to 128 [ 108.224440][ T4468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.295787][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.351467][ T4468] team0: Port device team_slave_0 added [ 108.409774][ T4673] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.452427][ T4468] team0: Port device team_slave_1 added [ 108.549043][ T4468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.556450][ T4468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.599763][ T4468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.670398][ T4468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.720713][ T4468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.833311][ T4468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.918253][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 109.061615][ T4468] device hsr_slave_0 entered promiscuous mode [ 109.089008][ T4468] device hsr_slave_1 entered promiscuous mode [ 109.106431][ T4468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.134760][ T4468] Cannot create hsr debugfs directory [ 109.235907][ T4701] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.610417][ T4468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.682056][ T4468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.713499][ T4468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.763360][ T4468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.863543][ T4717] syz.0.111 sent an empty control message without MSG_MORE. [ 110.020510][ T4468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.067293][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.084633][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.115230][ T4468] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.158613][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.186176][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.196347][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.203553][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.254361][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.272046][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.290630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.327794][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.335020][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.365391][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.411074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.457762][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.478871][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.496010][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.506421][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.523010][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.538466][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.559524][ T4468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.576698][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.587685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.603155][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.617059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.963705][ T4736] loop0: detected capacity change from 0 to 256 [ 111.360113][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.579774][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 111.588226][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.641308][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.662332][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.695473][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.745039][ T22] usb 3-1: config 0 descriptor?? [ 111.803095][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.811422][ T22] hub 3-1:0.0: USB hub found [ 111.826025][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.854627][ T4468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.020444][ T22] hub 3-1:0.0: 1 port detected [ 112.655820][ T22] hub 3-1:0.0: activate --> -90 [ 113.135618][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.148795][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.262836][ T22] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 113.264352][ T4647] usb 3-1: USB disconnect, device number 3 [ 113.283551][ T22] hub_port_connect: 10 callbacks suppressed [ 113.283569][ T22] usb 3-1-port1: connect-debounce failed [ 113.325865][ T4468] device veth0_vlan entered promiscuous mode [ 113.345985][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.378940][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.406967][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.434499][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.488771][ T4468] device veth1_vlan entered promiscuous mode [ 113.585994][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.606454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.625331][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.673924][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.706948][ T4468] device veth0_macvtap entered promiscuous mode [ 113.749488][ T4468] device veth1_macvtap entered promiscuous mode [ 113.833761][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.858607][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.886232][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.937852][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.948294][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.975919][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.996418][ T4468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.006393][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.066126][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.108949][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.136470][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.170481][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.209871][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.249713][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.289586][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.339753][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.374881][ T4816] loop3: detected capacity change from 0 to 256 [ 114.396205][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.448245][ T4468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.478660][ T4816] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 114.524709][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.551036][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.592154][ T4468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.611322][ T4468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.639866][ T4468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.669052][ T4468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.056300][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.091098][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.167781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.214895][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.228184][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.240070][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.267367][ T1008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.339159][ T4834] loop2: detected capacity change from 0 to 512 [ 115.388013][ T4834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.435552][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.447415][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.462197][ T22] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 115.496994][ T4834] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 115.529494][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.544724][ T4834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.574046][ T22] usb 4-1: Product: syz [ 115.578299][ T22] usb 4-1: Manufacturer: syz [ 115.596817][ T4834] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 115.628401][ T22] usb 4-1: SerialNumber: syz [ 115.639332][ T4834] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 115.680247][ T4834] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.143: Failed to acquire dquot type 1 [ 115.734914][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.747624][ T4834] EXT4-fs (loop2): Remounting filesystem read-only [ 115.801097][ T4834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.143: bg 0: block 40: padding at end of block bitmap is not set [ 115.863049][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.879751][ T4834] EXT4-fs (loop2): Remounting filesystem read-only [ 115.899789][ T4834] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 115.925203][ T4834] EXT4-fs (loop2): Remounting filesystem read-only [ 115.943677][ T4834] EXT4-fs (loop2): 1 truncate cleaned up [ 115.997826][ T4834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.032550][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.081287][ T4842] loop5: detected capacity change from 0 to 512 [ 116.216134][ T4842] EXT4-fs (loop5): 1 truncate cleaned up [ 116.249976][ T4842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 116.413113][ T22] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.644933][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 116.704572][ T22] usb 4-1: USB disconnect, device number 3 [ 116.850794][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.861602][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.871551][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.889976][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.908901][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.924936][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.073015][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 117.778331][ T4851] chnl_net:caif_netlink_parms(): no params data found [ 117.882605][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 117.973329][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.007745][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.030021][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.036224][ T4866] loop2: detected capacity change from 0 to 32768 [ 118.055135][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.072565][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.085567][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.101249][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.116828][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.132463][ T4878] netlink: 'syz.4.152': attribute type 3 has an invalid length. [ 118.138537][ T4866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.147 (4866) [ 118.213244][ T4866] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.230465][ T4866] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.259957][ T4866] BTRFS info (device loop2): force clearing of disk cache [ 118.267220][ T4866] BTRFS info (device loop2): enabling auto defrag [ 118.274365][ T4866] BTRFS info (device loop2): enabling disk space caching [ 118.324840][ T4866] BTRFS info (device loop2): disk space caching is enabled [ 118.782943][ T4866] BTRFS info (device loop2): enabling ssd optimizations [ 118.814585][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.834912][ T4866] BTRFS info (device loop2): rebuilding free space tree [ 118.840056][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.873984][ T4866] BTRFS info (device loop2): disabling free space tree [ 118.883653][ T4851] device bridge_slave_0 entered promiscuous mode [ 118.899857][ T4866] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.944715][ T4866] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.960252][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 119.033034][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.056287][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.086363][ T26] audit: type=1800 audit(1778718998.060:23): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 119.114428][ T4851] device bridge_slave_1 entered promiscuous mode [ 119.435821][ T4851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.503314][ T4851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.703116][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.022503][ T11] device hsr_slave_0 left promiscuous mode [ 120.075414][ T11] device hsr_slave_1 left promiscuous mode [ 120.094078][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.119482][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.180602][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.188095][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.270412][ T11] device bridge_slave_1 left promiscuous mode [ 120.280672][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.341546][ T11] device bridge_slave_0 left promiscuous mode [ 120.347862][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.943287][ T11] device veth1_macvtap left promiscuous mode [ 121.024122][ T11] device veth0_macvtap left promiscuous mode [ 121.048157][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 121.104922][ T11] device veth1_vlan left promiscuous mode [ 121.114993][ T11] device veth0_vlan left promiscuous mode [ 121.263126][ T4950] loop5: detected capacity change from 0 to 128 [ 121.384342][ T4950] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 121.426834][ T4950] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.635780][ T4957] loop2: detected capacity change from 0 to 512 [ 121.678632][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 121.770101][ T4957] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.170: inode has both inline data and extents flags [ 121.794256][ T4957] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.170: couldn't read orphan inode 15 (err -117) [ 121.976006][ T4957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.574939][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 123.129979][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 123.678898][ T4960] Set syz1 is full, maxelem 65536 reached [ 124.062741][ T4979] loop5: detected capacity change from 0 to 128 [ 124.368265][ T11] team0 (unregistering): Port device team_slave_1 removed [ 124.439924][ T11] team0 (unregistering): Port device team_slave_0 removed [ 124.528065][ T4988] loop5: detected capacity change from 0 to 512 [ 124.546427][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.604895][ T4988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 124.634145][ T4988] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.646922][ T4992] loop3: detected capacity change from 0 to 512 [ 124.658793][ T4992] EXT4-fs: Ignoring removed i_version option [ 124.703682][ T4992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.725993][ T4988] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 124.753337][ T4992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.766099][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.789157][ T4992] ext4 filesystem being mounted at /44/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.872037][ T4995] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 124.880775][ T4383] udevd[4383]: incorrect ext4dev checksum on /dev/loop3 [ 124.912428][ T4992] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.184: dir seems corrupt? Run e2fsck -D. [ 124.937784][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 124.944628][ T4992] EXT4-fs (loop3): Remounting filesystem read-only [ 124.977049][ T4992] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.184: Directory index failed checksum [ 125.017488][ T4992] EXT4-fs (loop3): Remounting filesystem read-only [ 125.131862][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 125.159377][ T4273] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 119259 in block_group 0 [ 125.182133][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 125.197029][ T4273] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 125.209999][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 125.230563][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 125.237284][ T4273] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 125.257542][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 125.272482][ T4273] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 119259 in block_group 0 [ 125.301273][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 125.307867][ T4273] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 125.346001][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 125.369457][ T4273] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 125.392121][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 125.676223][ T11] bond0 (unregistering): Released all slaves [ 125.826628][ T4851] team0: Port device team_slave_0 added [ 125.959037][ T4851] team0: Port device team_slave_1 added [ 126.027783][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.048891][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.167284][ T4851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.256524][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.281475][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.349312][ T4851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.479863][ T4648] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.506779][ T4851] device hsr_slave_0 entered promiscuous mode [ 126.524474][ T4851] device hsr_slave_1 entered promiscuous mode [ 126.544738][ T4851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.568338][ T4851] Cannot create hsr debugfs directory [ 126.681464][ T4648] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.718947][ T4648] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.739945][ T4648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.748016][ T4648] usb 6-1: Product: syz [ 126.793502][ T4648] usb 6-1: Manufacturer: syz [ 126.813242][ T4648] usb 6-1: SerialNumber: syz [ 127.089979][ T4851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.110384][ T4851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.148924][ T4851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.179349][ T4851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.311928][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.330902][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.346566][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.354593][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.364254][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 127.376103][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.508440][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 127.525621][ T5039] validate_nla: 43 callbacks suppressed [ 127.525640][ T5039] netlink: 'syz.2.199': attribute type 14 has an invalid length. [ 127.549249][ T5039] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.559108][ T5039] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.567997][ T5039] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.576931][ T5039] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.597011][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 127.617818][ T5039] netlink: 'syz.2.199': attribute type 14 has an invalid length. [ 127.626365][ T5039] Zero length message leads to an empty skb [ 127.675313][ T4851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.725182][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.743014][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.761009][ T4286] Bluetooth: hci3: command 0x1003 tx timeout [ 127.761120][ T4284] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 127.801739][ T4851] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.876121][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.885740][ T4648] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 127.892397][ T4648] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 127.900355][ T4648] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 127.908656][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.960475][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.967692][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.016847][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.070181][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.086709][ T4648] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 128.100673][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.128598][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.135852][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.185786][ T4648] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 128.216832][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.251980][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.317556][ T4648] usb 6-1: USB disconnect, device number 2 [ 128.345212][ T4648] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 128.367398][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.383476][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.395211][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.406101][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.499220][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.520854][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.535983][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.545038][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.554883][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.574441][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.617259][ T5035] chnl_net:caif_netlink_parms(): no params data found [ 128.668612][ T5057] loop2: detected capacity change from 0 to 512 [ 128.791693][ T5057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.815975][ T5057] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.833807][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.899818][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.936769][ T5035] device bridge_slave_0 entered promiscuous mode [ 128.976175][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.006870][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.027042][ T5035] device bridge_slave_1 entered promiscuous mode [ 129.047320][ T5070] syz.5.205 uses obsolete (PF_INET,SOCK_PACKET) [ 129.056991][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 129.173761][ T5035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.241436][ T5035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.449696][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 129.503850][ T5035] team0: Port device team_slave_0 added [ 129.535833][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.556877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.589343][ T4851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.617509][ T5035] team0: Port device team_slave_1 added [ 129.708722][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.740718][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.797532][ T5035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.837439][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.849876][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.937087][ T5035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.111318][ T5035] device hsr_slave_0 entered promiscuous mode [ 130.132798][ T5035] device hsr_slave_1 entered promiscuous mode [ 130.183039][ T5035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.211300][ T5035] Cannot create hsr debugfs directory [ 130.914193][ T5035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 130.944956][ T5035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.001244][ T5035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.114331][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.133161][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.152856][ T5116] overlayfs: failed to set xattr on upper [ 131.169453][ T5116] overlayfs: ...falling back to index=off,metacopy=off. [ 131.175766][ T5035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.254488][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.270855][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.310290][ T4851] device veth0_vlan entered promiscuous mode [ 131.347175][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.376428][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.461698][ T4851] device veth1_vlan entered promiscuous mode [ 131.530262][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 131.562069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.587325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.626145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.664920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.144024][ T5135] loop3: detected capacity change from 0 to 256 [ 132.599615][ C1] sched: RT throttling activated [ 132.607175][ T4851] device veth0_macvtap entered promiscuous mode [ 132.624580][ T5127] loop2: detected capacity change from 0 to 131072 [ 132.658555][ T5035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.670235][ T4851] device veth1_macvtap entered promiscuous mode [ 132.684898][ T5127] F2FS-fs (loop2): invalid crc value [ 132.702012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.712696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.738187][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.781257][ T5127] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.803759][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810832][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.842791][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.870063][ T5127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 132.979766][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.999425][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.037509][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.055089][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.090985][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.101749][ T5035] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.117533][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.150799][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.183484][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.295916][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.329631][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.348586][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.368785][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.419680][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.452260][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.489090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.558755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.600237][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 133.602695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.636143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.666350][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.673580][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.700433][ T5158] loop5: detected capacity change from 0 to 128 [ 133.752707][ T4851] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.763981][ T5158] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.771422][ T4851] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.799740][ T4851] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.818777][ T4851] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.829696][ T5158] hpfs: filesystem error: improperly stopped [ 133.835754][ T5158] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.870593][ T5158] hpfs: You really don't want any checks? You are crazy... [ 133.878578][ T5158] hpfs: hpfs_map_sector(): read error [ 133.890026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.898236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.921983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.930576][ T5158] hpfs: code page support is disabled [ 133.936153][ T5158] hpfs: hpfs_map_4sectors(): unaligned read [ 133.955047][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.962287][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.979868][ T5158] hpfs: hpfs_map_4sectors(): unaligned read [ 133.990229][ T5158] hpfs: filesystem error: unable to find root dir [ 134.000337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.031142][ T5161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 134.041428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.051070][ T5158] hpfs: hpfs_map_4sectors(): unaligned read [ 134.058142][ T5158] hpfs: hpfs_map_sector(): read error [ 134.113331][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.138233][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.241141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.280598][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.378381][ T5166] tipc: Started in network mode [ 134.417772][ T5166] tipc: Node identity 9, cluster identity 4711 [ 134.430181][ T5166] tipc: Node number set to 9 [ 134.439918][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.448115][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.468179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.478782][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.496149][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.515687][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.659518][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.669964][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.679703][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.687342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.819133][ T4947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.838916][ T4947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.858558][ T5177] loop3: detected capacity change from 0 to 128 [ 134.868319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.879911][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 134.887809][ T27] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 134.897618][ T5177] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.915718][ T27] usb 6-1: config 0 has no interface number 0 [ 134.944824][ T27] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 134.959536][ T5177] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.977081][ T27] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 135.028348][ T27] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 135.077175][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.124453][ T27] usb 6-1: Product: syz [ 135.141259][ T27] usb 6-1: Manufacturer: syz [ 135.159188][ T27] usb 6-1: SerialNumber: syz [ 135.178742][ T27] usb 6-1: config 0 descriptor?? [ 135.208127][ T5169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.230288][ T5169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.251198][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.144'. [ 135.268413][ T4334] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.473555][ T5169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.521422][ T5169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.680270][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 135.739697][ T27] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 135.896479][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.908695][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.945191][ T5035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.128843][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.238'. [ 136.184067][ T5205] device team1 entered promiscuous mode [ 136.205690][ T5205] 8021q: adding VLAN 0 to HW filter on device team1 [ 136.228753][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.238'. [ 136.312244][ T5209] device team2 entered promiscuous mode [ 136.347667][ T5209] 8021q: adding VLAN 0 to HW filter on device team2 [ 136.405881][ T5213] netlink: 'syz.2.240': attribute type 18 has an invalid length. [ 136.426952][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 136.438444][ T5213] netlink: 'syz.2.240': attribute type 18 has an invalid length. [ 136.481815][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 136.757407][ T27] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 136.790316][ T27] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 136.794785][ T5222] loop3: detected capacity change from 0 to 8 [ 136.838221][ T5220] loop2: detected capacity change from 0 to 2048 [ 136.850233][ T27] asix: probe of 6-1:0.34 failed with error -71 [ 136.900901][ T27] usb 6-1: USB disconnect, device number 3 [ 136.919343][ T5220] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.965830][ T5222] SQUASHFS error: lzo decompression failed, data probably corrupt [ 136.974658][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 136.981019][ T5220] NILFS (loop2): mounting unchecked fs [ 136.985277][ T5222] SQUASHFS error: Failed to read block 0xff: -5 [ 136.998856][ T5222] SQUASHFS error: lzo decompression failed, data probably corrupt [ 137.006929][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.019678][ T26] audit: type=1800 audit(1778719015.990:24): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 137.039991][ T5222] SQUASHFS error: lzo decompression failed, data probably corrupt [ 137.047909][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.066031][ T26] audit: type=1800 audit(1778719016.030:25): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 137.099073][ T5222] SQUASHFS error: Failed to read block 0x6a4: -5 [ 137.106210][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.113651][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.120638][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.126880][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.134380][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.141293][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.147538][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.155338][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.162336][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.169876][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.177221][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.184113][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.190496][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.197842][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.206936][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.213240][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.220621][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.227458][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.234104][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.241506][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.248353][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.254641][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.262503][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.269351][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.275696][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.283421][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.290350][ T5222] SQUASHFS error: Failed to read block 0x0: -5 [ 137.297135][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.304637][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.312163][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.319952][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.327055][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.334501][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.341430][ T5222] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 137.348763][ T5222] SQUASHFS error: read_indexes: reading block [6a2:0] [ 137.362393][ T5220] NILFS (loop2): recovery complete [ 137.414414][ T5225] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.704092][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.246'. [ 137.922488][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.937271][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.058813][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.072872][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.129778][ T5035] device veth0_vlan entered promiscuous mode [ 138.148055][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.159062][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.214684][ T5035] device veth1_vlan entered promiscuous mode [ 138.222412][ T5241] loop5: detected capacity change from 0 to 256 [ 138.353825][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.382410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.406087][ T5251] loop2: detected capacity change from 0 to 2048 [ 138.420731][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.476248][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.506908][ T5251] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 138.532372][ T5035] device veth0_macvtap entered promiscuous mode [ 138.583929][ T5251] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 138.596219][ T5035] device veth1_macvtap entered promiscuous mode [ 138.675675][ T5256] netlink: 'syz.6.252': attribute type 1 has an invalid length. [ 138.714992][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.769701][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.806956][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.854162][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.914181][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.944885][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.006430][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.032791][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.060634][ T5267] loop3: detected capacity change from 0 to 512 [ 139.078820][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.107806][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.138406][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.154146][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.173600][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.244105][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.297971][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.343955][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.393566][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.428829][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.447460][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.489671][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.520252][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.564530][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.614986][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.672373][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.735144][ T5035] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.779067][ T5035] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.819675][ T5035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.828455][ T5035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.932335][ T5287] loop5: detected capacity change from 0 to 128 [ 139.977563][ T5291] capability: warning: `syz.2.265' uses 32-bit capabilities (legacy support in use) [ 140.034183][ T5287] FAT-fs (loop5): bogus logical sector size 65535 [ 140.103209][ T5291] overlayfs: upper fs does not support file handles, falling back to index=off. [ 140.118208][ T5287] FAT-fs (loop5): Can't find a valid FAT filesystem [ 140.187535][ T4590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.205764][ T4590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.291230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.389180][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.408650][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.459157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.829333][ T5307] loop2: detected capacity change from 0 to 512 [ 140.881055][ T5307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.000936][ T5307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.015954][ T5307] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.143846][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 141.951629][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.279'. [ 142.199703][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.264033][ T5349] loop5: detected capacity change from 0 to 4096 [ 142.346596][ T5349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.389731][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 142.408640][ T27] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 142.470274][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.478345][ T27] usb 4-1: Product: syz [ 142.523054][ T27] usb 4-1: Manufacturer: syz [ 142.553768][ T27] usb 4-1: SerialNumber: syz [ 142.656002][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 143.017829][ T5364] loop2: detected capacity change from 0 to 512 [ 143.118698][ T5364] EXT4-fs (loop2): 1 truncate cleaned up [ 143.129996][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 143.217051][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 143.237687][ T5364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.276136][ T27] usb 4-1: USB disconnect, device number 4 [ 143.507708][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 143.841764][ T5368] loop5: detected capacity change from 0 to 32768 [ 143.929880][ T4379] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 143.962966][ T5387] loop3: detected capacity change from 0 to 1024 [ 143.966818][ T5368] XFS (loop5): Mounting V5 Filesystem [ 144.024166][ T4351] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.122992][ T4379] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.136930][ T4379] usb 7-1: config 0 has no interface number 0 [ 144.150021][ T4379] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.173470][ T4379] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.187405][ T4379] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.200586][ T4379] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 144.210427][ T4379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.232081][ T4379] usb 7-1: config 0 descriptor?? [ 144.247919][ T5368] XFS (loop5): Ending clean mount [ 144.729767][ T4468] XFS (loop5): Unmounting Filesystem [ 144.862917][ T4379] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0002/input/input7 [ 144.929982][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 144.950986][ T4379] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 145.121846][ T4379] usb 7-1: USB disconnect, device number 2 [ 145.142678][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.154792][ T27] usb 4-1: not running at top speed; connect to a high speed hub [ 145.175603][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.201147][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.246059][ T27] usb 4-1: string descriptor 0 read error: -22 [ 145.274926][ T5412] fido_id[5412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 145.300001][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.326572][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.389495][ T27] usb 4-1: 0:2 : does not exist [ 145.769903][ T4379] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.969909][ T4379] usb 3-1: Using ep0 maxpacket: 8 [ 145.977683][ T4379] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.997008][ T5425] loop6: detected capacity change from 0 to 1024 [ 146.003623][ T4379] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 146.029811][ T4379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.040796][ T5425] EXT4-fs: Ignoring removed bh option [ 146.058193][ T4379] usb 3-1: config 0 descriptor?? [ 146.086917][ T4379] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 146.110595][ T5425] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 146.182981][ T5417] loop5: detected capacity change from 0 to 32768 [ 146.336691][ T5417] XFS (loop5): Mounting V5 Filesystem [ 146.490572][ T5417] XFS (loop5): Ending clean mount [ 146.556764][ T4851] EXT4-fs (loop6): unmounting filesystem. [ 146.586812][ T5417] XFS (loop5): Quotacheck needed: Please wait. [ 146.796167][ T5417] XFS (loop5): Quotacheck: Done. [ 146.817235][ T27] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 146.849058][ T27] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 146.861288][ T27] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 146.945085][ T27] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 147.034365][ T27] usb 4-1: USB disconnect, device number 5 [ 147.204265][ T5454] loop6: detected capacity change from 0 to 256 [ 147.259087][ T5454] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.309835][ T5454] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 147.339299][ T4468] XFS (loop5): Unmounting Filesystem [ 147.380922][ T5454] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001057d, chksum : 0xc03cc181, utbl_chksum : 0xe619d30d) [ 147.513186][ T4363] usb 3-1: USB disconnect, device number 4 [ 147.779926][ T5468] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 148.272292][ T4318] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 148.472843][ T4318] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.503540][ T4318] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.550940][ T4318] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.605036][ T4318] usb 8-1: config 0 interface 0 has no altsetting 0 [ 148.645542][ T4318] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 148.683741][ T4318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.745116][ T4318] usb 8-1: config 0 descriptor?? [ 149.194270][ T4318] holtek 0003:1241:5015.0003: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.7-1/input0 [ 149.229515][ T4318] holtek 0003:1241:5015.0003: no inputs found [ 149.410241][ T4318] usb 8-1: USB disconnect, device number 2 [ 149.581467][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 149.644617][ T5508] fido_id[5508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 149.818516][ T5516] netlink: 164 bytes leftover after parsing attributes in process `syz.3.321'. [ 150.083528][ T5519] netlink: 60 bytes leftover after parsing attributes in process `syz.5.322'. [ 150.700577][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 150.738196][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 150.815366][ T5548] loop7: detected capacity change from 0 to 16384 [ 151.050035][ T5551] loop7: detected capacity change from 16384 to 0 [ 151.527815][ T5572] fuse: root generation should be zero [ 152.149655][ T4363] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.369919][ T4363] usb 4-1: Using ep0 maxpacket: 32 [ 152.377555][ T4363] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.397564][ T5608] loop2: detected capacity change from 0 to 256 [ 152.409917][ T4363] usb 4-1: config 0 has no interface number 0 [ 152.417001][ T4363] usb 4-1: config 0 interface 184 has no altsetting 0 [ 152.468693][ T4363] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.510343][ T4363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.549912][ T4363] usb 4-1: Product: syz [ 152.554156][ T4363] usb 4-1: Manufacturer: syz [ 152.569795][ T4363] usb 4-1: SerialNumber: syz [ 152.605504][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.349'. [ 152.615762][ T4363] usb 4-1: config 0 descriptor?? [ 152.639347][ T4363] smsc75xx v1.0.0 [ 153.200094][ T27] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 153.389962][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 153.399376][ T27] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 153.409879][ T4933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.432651][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.458937][ T27] usb 8-1: Product: syz [ 153.466954][ T27] usb 8-1: Manufacturer: syz [ 153.475648][ T27] usb 8-1: SerialNumber: syz [ 153.647156][ T4933] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 153.662562][ T4933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.698398][ T4933] usb 6-1: config 0 descriptor?? [ 153.938664][ T27] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 153.968254][ T27] usb 8-1: USB disconnect, device number 3 [ 154.088231][ T4363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 154.115155][ T4363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 154.144292][ T4363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 154.156240][ T4363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 154.189069][ T4363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 154.200827][ T4363] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 154.212765][ T4363] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 154.225266][ T4363] usb 4-1: USB disconnect, device number 6 [ 154.803656][ T5666] loop3: detected capacity change from 0 to 256 [ 155.148871][ T4933] usb 6-1: Cannot set autoneg [ 155.154069][ T4933] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 155.209959][ T4933] usb 6-1: USB disconnect, device number 4 [ 155.301729][ T5673] netlink: 164 bytes leftover after parsing attributes in process `syz.6.365'. [ 155.742137][ T5659] loop7: detected capacity change from 0 to 32768 [ 155.860058][ T4379] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.071674][ T4379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.104802][ T4379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.144026][ T4379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.191025][ T4379] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.220370][ T4379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.275563][ T4379] usb 4-1: config 0 descriptor?? [ 156.712088][ T4379] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 156.775126][ T4379] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.095241][ T7] usb 4-1: USB disconnect, device number 7 [ 157.254989][ T5687] loop7: detected capacity change from 0 to 32768 [ 157.375080][ T5687] XFS (loop7): Mounting V5 Filesystem [ 157.497729][ T5687] XFS (loop7): Ending clean mount [ 157.717592][ T5698] loop2: detected capacity change from 0 to 40427 [ 157.743558][ T5035] XFS (loop7): Unmounting Filesystem [ 157.761416][ T5698] F2FS-fs (loop2): invalid crc value [ 157.807031][ T5698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.029961][ T5698] F2FS-fs (loop2): Start checkpoint disabled! [ 158.110014][ T5698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 158.377929][ T5737] syz.2.374: attempt to access beyond end of device [ 158.377929][ T5737] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.648804][ T5741] loop3: detected capacity change from 0 to 2048 [ 158.748459][ T5741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.900765][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 159.092869][ T4338] kworker/u4:7: attempt to access beyond end of device [ 159.092869][ T4338] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 160.663898][ T5793] loop2: detected capacity change from 0 to 1024 [ 160.708835][ T5793] EXT4-fs: Ignoring removed bh option [ 160.723637][ T5793] EXT4-fs: inline encryption not supported [ 160.740516][ T5793] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.796817][ T5793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.996733][ T5800] loop5: detected capacity change from 0 to 2048 [ 161.082155][ T5800] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 161.349660][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 161.697000][ T4363] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 161.741140][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 161.920401][ T4286] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 162.479970][ T5834] netlink: 164 bytes leftover after parsing attributes in process `syz.7.403'. [ 162.489697][ T4363] usb 7-1: Using ep0 maxpacket: 16 [ 162.498847][ T4363] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 162.519645][ T4363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.527751][ T4363] usb 7-1: Product: syz [ 162.535915][ T4363] usb 7-1: Manufacturer: syz [ 162.540671][ T4363] usb 7-1: SerialNumber: syz [ 162.589189][ T5836] loop5: detected capacity change from 0 to 512 [ 162.617131][ T5836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.716241][ T5836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.833537][ T5836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.895586][ T5836] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.043941][ T5836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.149956][ T5836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.210492][ T5836] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 163.689264][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 163.790944][ T5821] Set syz1 is full, maxelem 65536 reached [ 163.825036][ T4363] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 163.841004][ T4363] usb 7-1: USB disconnect, device number 3 [ 163.963145][ T5850] loop3: detected capacity change from 0 to 256 [ 163.990041][ T5850] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.063886][ T5850] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 164.127121][ T5850] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001057d, chksum : 0xc03cc181, utbl_chksum : 0xe619d30d) [ 164.311500][ T5855] netlink: 60 bytes leftover after parsing attributes in process `syz.7.408'. [ 164.873487][ T5879] loop5: detected capacity change from 0 to 1024 [ 164.918262][ T5879] EXT4-fs: Ignoring removed bh option [ 164.965507][ T5879] EXT4-fs: inline encryption not supported [ 164.988948][ T5879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.087520][ T5879] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.808479][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 166.634289][ T5929] netlink: 164 bytes leftover after parsing attributes in process `syz.5.426'. [ 167.702806][ T5957] loop6: detected capacity change from 0 to 1024 [ 167.718491][ T5957] EXT4-fs: Ignoring removed bh option [ 167.739816][ T5957] EXT4-fs: inline encryption not supported [ 167.748429][ T5957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.798620][ T5957] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 168.136158][ T5966] loop2: detected capacity change from 0 to 512 [ 168.170526][ T5966] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.204630][ T5966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.269112][ T4851] EXT4-fs (loop6): unmounting filesystem. [ 168.341300][ T5966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.360328][ T5966] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.426452][ T5966] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.438351][ T5966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.447825][ T5966] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 168.704777][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 168.917488][ T5993] loop6: detected capacity change from 0 to 256 [ 168.972907][ T5993] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 169.169744][ T4363] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 169.379716][ T4363] usb 8-1: Using ep0 maxpacket: 32 [ 169.386724][ T4363] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.413802][ T4363] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.434963][ T4363] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.466583][ T4363] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.499241][ T4363] usb 8-1: config 0 descriptor?? [ 169.516090][ T4363] hub 8-1:0.0: USB hub found [ 169.730415][ T4363] hub 8-1:0.0: 1 port detected [ 169.794463][ T6010] loop3: detected capacity change from 0 to 1024 [ 169.890917][ T6010] EXT4-fs: Ignoring removed bh option [ 169.896408][ T6010] EXT4-fs: inline encryption not supported [ 169.994322][ T6010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.186029][ T6010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.715978][ T6023] loop2: detected capacity change from 0 to 512 [ 170.772202][ T4363] hub 8-1:0.0: activate --> -90 [ 171.505656][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 171.603094][ T4317] usb 8-1: USB disconnect, device number 4 [ 171.850282][ T6011] Set syz1 is full, maxelem 65536 reached [ 171.857646][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.869313][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.878091][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.886599][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.894307][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.902387][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.911056][ T4363] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 171.933297][ T6032] loop3: detected capacity change from 0 to 512 [ 171.992786][ T6032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.019784][ T6032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.176761][ T6032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.231949][ T6032] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.307884][ T6032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.319448][ T6032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.330554][ T6032] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 172.518267][ T6030] chnl_net:caif_netlink_parms(): no params data found [ 172.655701][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 172.896714][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.904760][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.913250][ T6030] device bridge_slave_0 entered promiscuous mode [ 172.931433][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.938792][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.947643][ T6030] device bridge_slave_1 entered promiscuous mode [ 173.018698][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.099187][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.205401][ T6030] team0: Port device team_slave_0 added [ 173.242691][ T6030] team0: Port device team_slave_1 added [ 173.252060][ T6077] loop6: detected capacity change from 0 to 512 [ 173.297256][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.352811][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.434277][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.502306][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.530360][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.634206][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.795478][ T6030] device hsr_slave_0 entered promiscuous mode [ 173.815404][ T6030] device hsr_slave_1 entered promiscuous mode [ 173.846155][ T6030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.857320][ T6030] Cannot create hsr debugfs directory [ 174.007913][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 174.676651][ T6030] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 174.708840][ T6030] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 174.741954][ T6030] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 174.792586][ T6030] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 175.081342][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.088151][ T6108] loop6: detected capacity change from 0 to 4096 [ 175.118188][ T6108] EXT4-fs: inline encryption not supported [ 175.175261][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.189415][ T6118] loop7: detected capacity change from 0 to 512 [ 175.205396][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.272197][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.280192][ T4351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.755575][ T6108] EXT4-fs (loop6): Test dummy encryption mode enabled [ 175.794023][ T6108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 175.810039][ T6108] System zones: 0-5 [ 175.841869][ T6108] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 176.089640][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 176.499226][ T4851] EXT4-fs (loop6): unmounting filesystem. [ 176.712194][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.719901][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.732082][ T6145] loop6: detected capacity change from 0 to 2048 [ 176.830875][ T6145] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 176.846068][ T6145] UDF-fs: Scanning with blocksize 512 failed [ 176.904428][ T6145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.114663][ T6147] netlink: 'syz.3.481': attribute type 11 has an invalid length. [ 177.722411][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.799045][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.827401][ T6154] loop3: detected capacity change from 0 to 40427 [ 177.853511][ T6154] F2FS-fs (loop3): invalid crc value [ 177.883517][ T6154] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.979342][ T6154] F2FS-fs (loop3): Start checkpoint disabled! [ 178.000088][ T6154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 178.159930][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 178.161233][ T6157] syz.3.485: attempt to access beyond end of device [ 178.161233][ T6157] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.483955][ T4590] kworker/u4:8: attempt to access beyond end of device [ 178.483955][ T4590] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 178.722656][ T6121] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.742486][ T6121] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.759013][ T6121] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.777969][ T6121] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.957389][ T6121] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.966464][ T6121] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.975504][ T6121] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.984600][ T6121] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.004553][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.028483][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.043490][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.050734][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.060398][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.167986][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.482'. [ 179.216527][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.231744][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.262738][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.269973][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.315973][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.366330][ T6164] loop3: detected capacity change from 0 to 512 [ 179.397094][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.409219][ T6164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.444967][ T6164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.462578][ T6164] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.477659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.520214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.596079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.606564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.618262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.671874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.708000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.752889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.793994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.812991][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 179.834045][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.249160][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 180.332261][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.341549][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.349118][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.905769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.916487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.958447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.978944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.001663][ T6030] device veth0_vlan entered promiscuous mode [ 181.019119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.028778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.052534][ T6030] device veth1_vlan entered promiscuous mode [ 181.124630][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.143427][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.163593][ T6030] device veth0_macvtap entered promiscuous mode [ 181.178297][ T6030] device veth1_macvtap entered promiscuous mode [ 181.213093][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.233065][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.248476][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.267366][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.277627][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.308391][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.319548][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.337822][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.357132][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.368503][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.378079][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.386477][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.396388][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.409201][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.421493][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.436221][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.447444][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.457811][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.469290][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.481344][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.492106][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.504371][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.513261][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.526069][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.540945][ T6030] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.551044][ T6030] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.560981][ T6030] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.570922][ T6030] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.676037][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.699047][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.713381][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.754770][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.770553][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.795886][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.968114][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 182.296688][ T6226] loop6: detected capacity change from 0 to 40427 [ 182.310439][ T6226] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 182.318266][ T6226] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 182.368198][ T6226] F2FS-fs (loop6): Found nat_bits in checkpoint [ 182.447789][ T6226] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 182.455689][ T6226] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 183.540971][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.836074][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.023780][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.069548][ T6275] loop2: detected capacity change from 0 to 1024 [ 184.091366][ T6277] loop6: detected capacity change from 0 to 256 [ 184.130618][ T6275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.235000][ T6275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.247307][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.386534][ T6281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.432749][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.480465][ T6281] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 184.633575][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 184.845978][ T6295] loop2: detected capacity change from 0 to 512 [ 185.047260][ T6303] netlink: 'syz.3.510': attribute type 21 has an invalid length. [ 185.065384][ T6295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.089726][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 185.089858][ T6295] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.142310][ T6303] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.151302][ T6303] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.160148][ T6303] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.168906][ T6303] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.250476][ T6295] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 185.312409][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.326371][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.337081][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.347380][ T6310] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 185.354773][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.366827][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.375960][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.414052][ T6303] netlink: 'syz.3.510': attribute type 21 has an invalid length. [ 185.435386][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 185.569507][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 185.777261][ T6321] loop3: detected capacity change from 0 to 2048 [ 185.834256][ T6321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.964738][ T26] audit: type=1800 audit(1778719064.940:26): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.518" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 186.534402][ T6308] chnl_net:caif_netlink_parms(): no params data found [ 186.781733][ T6336] loop8: detected capacity change from 0 to 40427 [ 186.794251][ T6336] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 186.802157][ T6336] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 186.871545][ T6336] F2FS-fs (loop8): Found nat_bits in checkpoint [ 186.944592][ T6336] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 186.951765][ T6336] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 187.210696][ T11] IPVS: stopping backup sync thread 5468 ... [ 187.236236][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.308524][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.360118][ T6308] device bridge_slave_0 entered promiscuous mode [ 187.405251][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.439883][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 187.449873][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.458796][ T6308] device bridge_slave_1 entered promiscuous mode [ 187.616826][ T6308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.690701][ T6308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.035877][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'. [ 188.092681][ T6308] team0: Port device team_slave_0 added [ 188.123880][ T6308] team0: Port device team_slave_1 added [ 188.181217][ T11] device hsr_slave_0 left promiscuous mode [ 188.200021][ T11] device hsr_slave_1 left promiscuous mode [ 188.254469][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.296607][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.335302][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.348472][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.383887][ T11] device bridge_slave_1 left promiscuous mode [ 188.438757][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.960212][ T11] device bridge_slave_0 left promiscuous mode [ 188.970084][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.166172][ T11] device veth1_macvtap left promiscuous mode [ 189.224307][ T11] device veth0_macvtap left promiscuous mode [ 189.260900][ T11] device veth1_vlan left promiscuous mode [ 189.279795][ T11] device veth0_vlan left promiscuous mode [ 189.519975][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 189.918188][ T6413] loop3: detected capacity change from 0 to 32768 [ 189.927426][ T6413] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.540 (6413) [ 189.962699][ T6413] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 189.973036][ T6413] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 189.981877][ T6413] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 189.992561][ T6413] BTRFS info (device loop3): use zstd compression, level 3 [ 190.000246][ T6413] BTRFS info (device loop3): force clearing of disk cache [ 190.007431][ T6413] BTRFS info (device loop3): enabling disk space caching [ 190.014572][ T6413] BTRFS info (device loop3): disk space caching is enabled [ 190.300508][ T6413] BTRFS info (device loop3): enabling ssd optimizations [ 190.310600][ T6413] BTRFS info (device loop3): rebuilding free space tree [ 190.334065][ T6413] BTRFS info (device loop3): disabling free space tree [ 190.341156][ T6413] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.351148][ T6413] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.601362][ T4273] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 190.953103][ T6456] loop3: detected capacity change from 0 to 512 [ 190.966792][ T6456] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.997714][ T6456] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 191.020654][ T6456] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.058899][ T6456] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 191.076187][ T6456] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 191.086149][ T6456] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.543: Failed to acquire dquot type 1 [ 191.106097][ T6456] EXT4-fs (loop3): Remounting filesystem read-only [ 191.142338][ T6456] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.543: bg 0: block 40: padding at end of block bitmap is not set [ 191.157248][ T6456] EXT4-fs (loop3): Remounting filesystem read-only [ 191.163933][ T6456] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 191.175689][ T6456] EXT4-fs (loop3): Remounting filesystem read-only [ 191.182546][ T6456] EXT4-fs (loop3): 1 truncate cleaned up [ 191.188481][ T6456] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.599891][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 191.775382][ T11] team0 (unregistering): Port device team_slave_1 removed [ 191.862953][ T11] team0 (unregistering): Port device team_slave_0 removed [ 191.926133][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 191.960573][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.045743][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.446131][ T11] bond0 (unregistering): Released all slaves [ 192.597380][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.604678][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.631219][ T6308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.670435][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.677960][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.749268][ T6308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.887757][ T6308] device hsr_slave_0 entered promiscuous mode [ 192.902726][ T6308] device hsr_slave_1 entered promiscuous mode [ 192.909484][ T6308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.918337][ T6308] Cannot create hsr debugfs directory [ 193.189537][ T6308] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 193.207124][ T6308] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 193.222836][ T6308] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 193.235378][ T6308] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 193.355280][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.393980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.407450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.422662][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.448304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.457624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.474456][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.481778][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.510849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.520048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.529060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.537920][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.545324][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.556151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.565714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.587736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.598453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.622015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.640585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.650257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.670610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.680046][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 193.692443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.706719][ T6308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.728302][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.739961][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.749244][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.165903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.181409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.207916][ T6308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.245616][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252182][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.706378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.718278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.761229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.780727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.793052][ T6308] device veth0_vlan entered promiscuous mode [ 194.801168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.817148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.833602][ T6308] device veth1_vlan entered promiscuous mode [ 194.874640][ T6308] device veth0_macvtap entered promiscuous mode [ 194.892133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.910381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.919063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.929348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.938839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.962858][ T6308] device veth1_macvtap entered promiscuous mode [ 194.993214][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.013433][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.028083][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.042742][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.053763][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.065908][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.076261][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.087024][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.098932][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.113957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.128736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.147485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.167156][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.180562][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.191930][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.202874][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.213488][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.231870][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.242952][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.253868][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.265385][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.275388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.294272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.311643][ T6308] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.331085][ T6308] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.346470][ T6308] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.355486][ T6308] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.449010][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.466710][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.477571][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.511497][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.519406][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.531585][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.722854][ T6518] netlink: 140 bytes leftover after parsing attributes in process `syz.3.557'. [ 195.959838][ T4302] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 196.069132][ T6528] loop8: detected capacity change from 0 to 128 [ 196.084134][ T6530] sock: sock_set_timeout: `syz.3.561' (pid 6530) tries to set negative timeout [ 196.112586][ T6528] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 196.149006][ T6528] hpfs: filesystem error: improperly stopped [ 196.160163][ T4302] usb 7-1: Using ep0 maxpacket: 32 [ 196.167956][ T4302] usb 7-1: unable to get BOS descriptor or descriptor too short [ 196.183440][ T6528] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 196.197729][ T4302] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.210483][ T6528] hpfs: You really don't want any checks? You are crazy... [ 196.230920][ T6528] hpfs: hpfs_map_sector(): read error [ 196.236451][ T6528] hpfs: code page support is disabled [ 196.246861][ T6528] hpfs: hpfs_map_4sectors(): unaligned read [ 196.252554][ T4302] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.261868][ T6528] hpfs: hpfs_map_4sectors(): unaligned read [ 196.275889][ T6528] hpfs: filesystem error: unable to find root dir [ 196.290388][ T4302] usb 7-1: config 1 interface 0 has no altsetting 0 [ 196.325231][ T4302] usb 7-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 196.355467][ T4302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.374273][ T4302] usb 7-1: Product: syz [ 196.378533][ T4302] usb 7-1: Manufacturer: syz [ 196.416398][ T4302] usb 7-1: SerialNumber: syz [ 196.680487][ T4302] usb 7-1: unit 0 not found! [ 196.752764][ T4302] usb 7-1: USB disconnect, device number 4 [ 196.886965][ T6544] overlayfs: failed to set xattr on upper [ 196.911623][ T6544] overlayfs: ...falling back to index=off,metacopy=off. [ 197.014260][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.117370][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 197.138241][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 197.199017][ T6552] loop8: detected capacity change from 0 to 1024 [ 197.264288][ T6552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.432536][ T6552] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 197.726205][ T6568] loop9: detected capacity change from 0 to 512 [ 197.776973][ T6568] EXT4-fs error (device loop9): __ext4_iget:5102: inode #11: block 1: comm syz.9.560: invalid block [ 197.802899][ T6568] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.560: couldn't read orphan inode 11 (err -117) [ 197.894027][ T6568] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 197.923166][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.931126][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.949421][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.979754][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.050845][ T6568] EXT4-fs error (device loop9): ext4_add_entry:2486: inode #2: comm syz.9.560: Directory hole found for htree leaf block 0 [ 198.193201][ T6308] EXT4-fs (loop9): unmounting filesystem. [ 198.379771][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.400515][ T6030] EXT4-fs (loop8): unmounting filesystem. [ 198.539896][ T6452] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 198.578325][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 198.606473][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.632098][ T7] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 198.633638][ T6594] netlink: 104 bytes leftover after parsing attributes in process `syz.6.570'. [ 198.649789][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.667065][ T7] usb 3-1: Product: syz [ 198.676631][ T7] usb 3-1: Manufacturer: syz [ 198.692277][ T7] usb 3-1: SerialNumber: syz [ 198.737733][ T7] usb 3-1: config 0 descriptor?? [ 198.741031][ T6452] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.768998][ T6582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.773137][ T6452] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.812061][ T7] dm9601: probe of 3-1:0.0 failed with error -22 [ 198.839694][ T6452] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.874944][ T6452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.123040][ T6452] usb 4-1: usb_control_msg returned -32 [ 199.128712][ T6452] usbtmc 4-1:16.0: can't read capabilities [ 199.293764][ T6607] loop6: detected capacity change from 0 to 1024 [ 199.322645][ T6607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.350459][ T6607] EXT4-fs (loop6): filesystem is read-only [ 199.380102][ T6607] EXT4-fs (loop6): Unsupported blocksize for fs-verity [ 199.758962][ T4302] usb 4-1: USB disconnect, device number 8 [ 199.816448][ T6616] loop8: detected capacity change from 0 to 512 [ 199.850970][ T6620] loop9: detected capacity change from 0 to 512 [ 199.858977][ T6616] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.876022][ T6616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.929338][ T6620] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 199.938726][ T6616] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 199.963403][ T6620] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.981024][ T6616] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.034830][ T6620] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #2: comm syz.9.577: corrupted inode contents [ 200.129891][ T6620] EXT4-fs error (device loop9): ext4_dirty_inode:6156: inode #2: comm syz.9.577: mark_inode_dirty error [ 200.170345][ T6631] EXT4-fs error (device loop8): swap_inode_boot_loader:378: comm syz.8.576: inode #5: comm syz.8.576: iget: illegal inode # [ 200.186987][ T6620] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #2: comm syz.9.577: corrupted inode contents [ 200.214541][ T6620] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.577: mark_inode_dirty error [ 200.388853][ T6620] [ 200.391288][ T6620] ====================================================== [ 200.398342][ T6620] WARNING: possible circular locking dependency detected [ 200.405423][ T6620] syzkaller #0 Not tainted [ 200.409868][ T6620] ------------------------------------------------------ [ 200.416919][ T6620] syz.9.577/6620 is trying to acquire lock: [ 200.422845][ T6620] ffff8880707cc428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 200.431828][ T6620] [ 200.431828][ T6620] but task is already holding lock: [ 200.439224][ T6620] ffff88807064b4b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 200.448795][ T6620] [ 200.448795][ T6620] which lock already depends on the new lock. [ 200.448795][ T6620] [ 200.459236][ T6620] [ 200.459236][ T6620] the existing dependency chain (in reverse order) is: [ 200.468291][ T6620] [ 200.468291][ T6620] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 200.476179][ T6620] down_write+0x36/0x60 [ 200.480926][ T6620] ext4_map_blocks+0x910/0x1b70 [ 200.486377][ T6620] ext4_getblk+0x1cc/0x6f0 [ 200.491371][ T6620] ext4_bread+0x26/0x170 [ 200.496177][ T6620] ext4_quota_write+0x236/0x580 [ 200.501650][ T6620] find_free_dqentry+0x673/0xc20 [ 200.506308][ T6030] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 200.507142][ T6620] do_insert_tree+0x70d/0x1040 [ 200.526648][ T6620] do_insert_tree+0x9ae/0x1040 [ 200.531998][ T6620] do_insert_tree+0x9ae/0x1040 [ 200.537340][ T6620] do_insert_tree+0x9ae/0x1040 [ 200.542690][ T6620] qtree_write_dquot+0x49d/0x5d0 [ 200.548201][ T6620] v2_write_dquot+0x108/0x190 [ 200.553459][ T6620] dquot_acquire+0x2d5/0x520 [ 200.558627][ T6620] ext4_acquire_dquot+0x2d9/0x4a0 [ 200.558660][ T6030] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 200.564211][ T6620] dqget+0x778/0xeb0 [ 200.564234][ T6620] __dquot_initialize+0x333/0xcd0 [ 200.564255][ T6620] ext4_file_open+0x2da/0x6f0 [ 200.564280][ T6620] do_dentry_open+0x7e9/0x10d0 [ 200.564307][ T6620] path_openat+0x2635/0x2ee0 [ 200.564327][ T6620] do_filp_open+0x1f1/0x430 [ 200.564346][ T6620] do_sys_openat2+0x150/0x4b0 [ 200.564372][ T6620] __x64_sys_open+0x11b/0x140 [ 200.564398][ T6620] do_syscall_64+0x4c/0xa0 [ 200.564427][ T6620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.564453][ T6620] [ 200.564453][ T6620] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 200.564486][ T6620] down_read+0x42/0x2d0 [ 200.564515][ T6620] v2_read_dquot+0x4a/0x110 [ 200.564538][ T6620] dquot_acquire+0x152/0x520 [ 200.564558][ T6620] ext4_acquire_dquot+0x2d9/0x4a0 [ 200.564582][ T6620] dqget+0x778/0xeb0 [ 200.564602][ T6620] __dquot_initialize+0x3c3/0xcd0 [ 200.564624][ T6620] ext4_symlink+0x1c2/0x970 [ 200.564654][ T6620] vfs_symlink+0x247/0x3d0 [ 200.564675][ T6620] do_symlinkat+0x1b6/0x400 [ 200.564696][ T6620] __x64_sys_symlink+0x7a/0x90 [ 200.624265][ T6030] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 200.626543][ T6620] do_syscall_64+0x4c/0xa0 [ 200.701861][ T6620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.708331][ T6620] [ 200.708331][ T6620] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 200.716035][ T6620] __lock_acquire+0x2d07/0x7d10 [ 200.721473][ T6620] lock_acquire+0x1bb/0x4a0 [ 200.726554][ T6620] __mutex_lock+0x12d/0xaf0 [ 200.731634][ T6620] dquot_commit+0x5a/0x410 [ 200.736626][ T6620] ext4_write_dquot+0x1f0/0x360 [ 200.742045][ T6620] mark_all_dquot_dirty+0xf9/0x400 [ 200.747725][ T6620] __dquot_alloc_space+0x5fc/0xe60 [ 200.753425][ T6620] ext4_mb_new_blocks+0xfc4/0x4610 [ 200.759107][ T6620] ext4_ext_map_blocks+0x195b/0x6810 [ 200.764955][ T6620] ext4_map_blocks+0x9de/0x1b70 [ 200.770392][ T6620] ext4_getblk+0x1cc/0x6f0 [ 200.775380][ T6620] ext4_bread+0x26/0x170 [ 200.780189][ T6620] ext4_append+0x2be/0x560 [ 200.785179][ T6620] ext4_init_new_dir+0x2b8/0x570 [ 200.790702][ T6620] ext4_mkdir+0x4fb/0xce0 [ 200.795618][ T6620] vfs_mkdir+0x387/0x570 [ 200.800437][ T6620] do_mkdirat+0x1d8/0x440 [ 200.805334][ T6620] __x64_sys_mkdirat+0x85/0x90 [ 200.810664][ T6620] do_syscall_64+0x4c/0xa0 [ 200.815739][ T6620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.822201][ T6620] [ 200.822201][ T6620] other info that might help us debug this: [ 200.822201][ T6620] [ 200.832464][ T6620] Chain exists of: [ 200.832464][ T6620] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 200.832464][ T6620] [ 200.846174][ T6620] Possible unsafe locking scenario: [ 200.846174][ T6620] [ 200.853668][ T6620] CPU0 CPU1 [ 200.859065][ T6620] ---- ---- [ 200.864474][ T6620] lock(&ei->i_data_sem/2); [ 200.869110][ T6620] lock(&s->s_dquot.dqio_sem); [ 200.876525][ T6620] lock(&ei->i_data_sem/2); [ 200.883689][ T6620] lock(&dquot->dq_lock); [ 200.888152][ T6620] [ 200.888152][ T6620] *** DEADLOCK *** [ 200.888152][ T6620] [ 200.896330][ T6620] 4 locks held by syz.9.577/6620: [ 200.901387][ T6620] #0: ffff88804fcde460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 200.910608][ T6620] #1: ffff8880706d7258 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 200.921302][ T6620] #2: ffff88807064b4b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 200.931405][ T6620] #3: ffffffff8cc74a48 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 200.941047][ T6620] [ 200.941047][ T6620] stack backtrace: [ 200.946985][ T6620] CPU: 0 PID: 6620 Comm: syz.9.577 Not tainted syzkaller #0 [ 200.954309][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.964424][ T6620] Call Trace: [ 200.967842][ T6620] [ 200.970819][ T6620] dump_stack_lvl+0x188/0x24e [ 200.975562][ T6620] ? load_image+0x400/0x400 [ 200.980117][ T6620] ? show_regs_print_info+0x12/0x12 [ 200.985370][ T6620] ? print_circular_bug+0x12b/0x1a0 [ 200.990625][ T6620] check_noncircular+0x296/0x330 [ 200.995628][ T6620] ? add_chain_block+0x940/0x940 [ 201.000611][ T6620] ? lockdep_lock+0xf1/0x1f0 [ 201.005250][ T6620] ? _find_first_zero_bit+0xcf/0x100 [ 201.010585][ T6620] __lock_acquire+0x2d07/0x7d10 [ 201.015567][ T6620] ? check_path+0x40/0x40 [ 201.019978][ T6620] ? check_noncircular+0x189/0x330 [ 201.025161][ T6620] ? add_chain_block+0x940/0x940 [ 201.030166][ T6620] ? lockdep_unlock+0x142/0x2e0 [ 201.035085][ T6620] ? lockdep_lock+0x1f0/0x1f0 [ 201.039911][ T6620] ? verify_lock_unused+0x140/0x140 [ 201.045171][ T6620] ? __lock_acquire+0x28c4/0x7d10 [ 201.050375][ T6620] lock_acquire+0x1bb/0x4a0 [ 201.054933][ T6620] ? dquot_commit+0x5a/0x410 [ 201.059756][ T6620] ? __might_sleep+0xd0/0xd0 [ 201.064404][ T6620] ? read_lock_is_recursive+0x10/0x10 [ 201.069839][ T6620] __mutex_lock+0x12d/0xaf0 [ 201.074399][ T6620] ? dquot_commit+0x5a/0x410 [ 201.079033][ T6620] ? __might_sleep+0xd0/0xd0 [ 201.083674][ T6620] ? dquot_commit+0x5a/0x410 [ 201.088313][ T6620] ? mutex_lock_nested+0x10/0x10 [ 201.093322][ T6620] ? ext4_journal_check_start+0x17e/0x240 [ 201.099111][ T6620] dquot_commit+0x5a/0x410 [ 201.103581][ T6620] ext4_write_dquot+0x1f0/0x360 [ 201.108495][ T6620] mark_all_dquot_dirty+0xf9/0x400 [ 201.113670][ T6620] __dquot_alloc_space+0x5fc/0xe60 [ 201.118849][ T6620] ? __dquot_alloc_space+0x173/0xe60 [ 201.124195][ T6620] ext4_mb_new_blocks+0xfc4/0x4610 [ 201.129402][ T6620] ? ext4_find_extent+0x367/0xe00 [ 201.134472][ T6620] ? rcu_is_watching+0x11/0xa0 [ 201.139301][ T6620] ? memset+0x1e/0x40 [ 201.143336][ T6620] ? ext4_mb_pa_callback+0xd0/0xd0 [ 201.148507][ T6620] ? ext4_ext_check_overlap+0x15f/0x560 [ 201.154129][ T6620] ? ext4_inode_to_goal_block+0x313/0x450 [ 201.159916][ T6620] ext4_ext_map_blocks+0x195b/0x6810 [ 201.165274][ T6620] ? ext4_ext_release+0x10/0x10 [ 201.170255][ T6620] ? rwsem_write_trylock+0x135/0x1c0 [ 201.175622][ T6620] ? ext4_es_lookup_extent+0x645/0xb10 [ 201.181143][ T6620] ext4_map_blocks+0x9de/0x1b70 [ 201.186058][ T6620] ? ext4_issue_zeroout+0x250/0x250 [ 201.191329][ T6620] ext4_getblk+0x1cc/0x6f0 [ 201.195822][ T6620] ? ext4_get_block_unwritten+0x100/0x100 [ 201.201609][ T6620] ? __ext4_new_inode+0x31ba/0x3ad0 [ 201.206867][ T6620] ext4_bread+0x26/0x170 [ 201.211162][ T6620] ext4_append+0x2be/0x560 [ 201.215685][ T6620] ? ext4_init_new_dir+0x570/0x570 [ 201.220870][ T6620] ? dquot_initialize+0x20/0x20 [ 201.225781][ T6620] ext4_init_new_dir+0x2b8/0x570 [ 201.230778][ T6620] ext4_mkdir+0x4fb/0xce0 [ 201.235175][ T6620] ? ext4_symlink+0x970/0x970 [ 201.239915][ T6620] ? inode_permission+0xef/0x480 [ 201.244889][ T6620] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 201.249963][ T6620] ? security_inode_mkdir+0xb3/0x100 [ 201.255312][ T6620] vfs_mkdir+0x387/0x570 [ 201.259605][ T6620] do_mkdirat+0x1d8/0x440 [ 201.263981][ T6620] ? vfs_mkdir+0x570/0x570 [ 201.268444][ T6620] __x64_sys_mkdirat+0x85/0x90 [ 201.273258][ T6620] do_syscall_64+0x4c/0xa0 [ 201.277739][ T6620] ? clear_bhb_loop+0x60/0xb0 [ 201.282467][ T6620] ? clear_bhb_loop+0x60/0xb0 [ 201.287200][ T6620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.293146][ T6620] RIP: 0033:0x7f8b49b9bcc7 [ 201.297622][ T6620] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.317285][ T6620] RSP: 002b:00007f8b4aa84e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.325763][ T6620] RAX: ffffffffffffffda RBX: 00007f8b4aa84ee0 RCX: 00007f8b49b9bcc7 [ 201.333781][ T6620] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 201.341888][ T6620] RBP: 0000000000000000 R08: 0000200000000180 R09: 0000000000000000 [ 201.349980][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 201.357998][ T6620] R13: 00007f8b4aa84ea0 R14: 0000000000000000 R15: 0000000000000000 [ 201.366026][ T6620] [ 201.376085][ T6030] EXT4-fs (loop8): unmounting filesystem. [ 201.433881][ T7] usb 3-1: USB disconnect, device number 5 [ 201.451568][ T6030] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 201.466011][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 201.469955][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 201.486400][ T6030] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 201.498656][ T6030] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 201.511058][ T6030] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 201.619473][ T6308] EXT4-fs (loop9): unmounting filesystem. [ 201.791970][ T33] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.853811][ T33] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.908435][ T33] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.016504][ T33] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.814146][ T33] device hsr_slave_0 left promiscuous mode [ 202.822654][ T33] device hsr_slave_1 left promiscuous mode [ 202.840992][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.848495][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.882656][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.895957][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.910372][ T33] device bridge_slave_1 left promiscuous mode [ 202.916653][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.940967][ T33] device bridge_slave_0 left promiscuous mode [ 202.947285][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.964132][ T33] device veth1_macvtap left promiscuous mode [ 202.970571][ T33] device veth0_macvtap left promiscuous mode [ 202.976710][ T33] device veth1_vlan left promiscuous mode [ 202.985520][ T33] device veth0_vlan left promiscuous mode [ 203.284746][ T33] team0 (unregistering): Port device team_slave_1 removed [ 203.326543][ T33] team0 (unregistering): Port device team_slave_0 removed [ 203.364495][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.403069][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.476063][ T33] bond0 (unregistering): Released all slaves