last executing test programs: 52.358333474s ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) 51.80985958s ago: executing program 2 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x44}}, 0x440088c4) 51.060228516s ago: executing program 2 (id=132): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000600)={0xa0000013}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22c4a93f5248f816481bcbc547361ad9f72743d7fdcdbbd8cb8a0e797421cabfc93ec38bb4bc628ba5bc2fe202196458becaa682057fd9a43a25ec7f3ad0e4bbc108a5737c522d105ac80f"], 0x1, 0x5dd, &(0x7f0000001800)="$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") r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) write$binfmt_misc(r3, &(0x7f0000000100)="3eefcc", 0x3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x149) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r4, 0x1, &(0x7f00000017c0)=[0x0]) socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x12e9d42baba4e8e7, 0x0) 49.052301221s ago: executing program 2 (id=134): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x3, 0x28011, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) 47.59610238s ago: executing program 2 (id=139): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="81ec00000700"/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) 44.00018946s ago: executing program 2 (id=144): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000600)={0xa0000013}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22c4a93f5248f816481bcbc547361ad9f72743d7fdcdbbd8cb8a0e797421cabfc93ec38bb4bc628ba5bc2fe202196458becaa682057fd9a43a25ec7f3ad0e4bbc108a5737c522d105ac80f"], 0x1, 0x5dd, &(0x7f0000001800)="$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") r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) write$binfmt_misc(r3, &(0x7f0000000100)="3eefcc", 0x3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x149) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r4, 0x1, &(0x7f00000017c0)=[0x0]) socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x12e9d42baba4e8e7, 0x0) 28.668249889s ago: executing program 32 (id=144): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000600)={0xa0000013}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22c4a93f5248f816481bcbc547361ad9f72743d7fdcdbbd8cb8a0e797421cabfc93ec38bb4bc628ba5bc2fe202196458becaa682057fd9a43a25ec7f3ad0e4bbc108a5737c522d105ac80f"], 0x1, 0x5dd, &(0x7f0000001800)="$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") r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) write$binfmt_misc(r3, &(0x7f0000000100)="3eefcc", 0x3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x149) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r4, 0x1, &(0x7f00000017c0)=[0x0]) socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x12e9d42baba4e8e7, 0x0) 18.700680042s ago: executing program 3 (id=175): socket$netlink(0x10, 0x3, 0x8000000004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x50) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x2, 0x1000000000000c5, 0x0, 0x1000007, 0x8000000000000001, 0x10000003, 0xfffffffffffffffa, 0x5166}) 17.236064822s ago: executing program 3 (id=177): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf2503000000140001800d0001006574683a6772653000000000f6c94d75fe8775ae3d4f743785d429492200525363d6e0a5cbe34135fac2e8c29539740f8f4662a40a4c7029dce81d26d73b8213eff1a27f2935d72965bcbf217ce8f8c2002168a00a8308c534024c47157190dc7d7292617a0abf3be09f6b2a6f858d"], 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000180)={0x27, 0x0, 0xfffffffd, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3c}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000140)="030000000000000001") 15.540195852s ago: executing program 0 (id=179): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="746872656164733d3030303030303030302e921b38aeed86e902d7728c30303030303030303030352c00"], 0x1, 0x19c, &(0x7f0000000000)="$eJzs0L9qFFEUx/HvuXP3XyDqqlisYBYMrhOCuzOKhdVitQEXLGwEUyybNSvOqslsoZJAGgnIYl5Bq7RiYSWiYB0sRAsdm7SZIliIqIzMzFXwGXI/MHPn/Jg55zDDcCUsAb/31/q0yTgc4j2CBmYkz5TKz5em/pXktvKSyyafCOmbBRNTCx88vN0LgsFq/VKd6n8B8C3L/kXhDCcUsdBGPu2v9Xtp16TNSC1V4IjpueI+oaanOa5wSBoTFj4u5CMPN8eje83wZ5Iko97yYHlwx/fPX2xdaJXwmzdvBYMpEPexKJ6yjtul1KXirlNY5NGOnmJeEHeoIkfmYoqLbO04Z0/Pxyh3jwThTSOm9EUP6+oaZyjfSJfvcEx4htNl9goVhSYd1OogV9UL8fQH/b2gKG84zrn+3WBp87qSH8XttuyVxdul0PDw57xs+xpHectmxGxEJ2I7YvcrIq/SKRPzf/VGen9uqpOcgiL3e+PxqleEd9Lo4qdXFaazdirbqwqvzTfm4PPfB8uyLMuyLMuyLOsA+BMAAP//afJoUg==") r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xa, 0x2, 0x0, 0x0, 0x400000) fcntl$setstatus(r0, 0x4, 0x40000) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 12.42820267s ago: executing program 1 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x10}, 0x50) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.12353698s ago: executing program 1 (id=182): syz_open_procfs(0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) r1 = io_uring_setup(0x1cd1, &(0x7f0000000240)={0x0, 0x36e3, 0x80, 0x1, 0x3d1}) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000003c0)) syz_io_uring_complete(0x0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x44504, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r4) io_uring_setup(0x39e9, 0x0) 8.477662698s ago: executing program 0 (id=183): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) preadv(r3, &(0x7f000001bb40)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 8.474635778s ago: executing program 1 (id=184): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x0, 0x0}, 0x10) 8.473837688s ago: executing program 3 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 6.704651622s ago: executing program 0 (id=186): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x0) getdents64(r1, &(0x7f0000001f40)=""/4123, 0x101b) write(0xffffffffffffffff, 0x0, 0x0) 6.704389962s ago: executing program 1 (id=187): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00']) 6.704233812s ago: executing program 3 (id=188): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') fcntl$lock(r2, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x90, &(0x7f0000000980)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x0, 0x6a2, &(0x7f0000000100)="$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") ptrace$setregs(0xd, r1, 0x5bd, 0x0) ptrace$getregset(0x4204, r1, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 4.85262995s ago: executing program 0 (id=189): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x34) 4.8483927s ago: executing program 1 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./mnt/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x3ff, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xa, 0x2, 0x0, 0x0, 0x400000) execve(&(0x7f0000001b40)='./mnt/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001240)={[&(0x7f0000001200)=']!(%.).-\x02\x00']}, &(0x7f00000011c0)={[&(0x7f00000012c0)='\'}.\x00', &(0x7f00000013c0)='nfs\x00']}) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001300)=[{0x0}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.84762687s ago: executing program 3 (id=191): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x4008044, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000200)={r1, 0x0, 0x381800, 0x0, 0x800, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x41000, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 2.909036992s ago: executing program 0 (id=192): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000100)={[], [{@appraise}]}, 0x2, 0x7a1, &(0x7f00000001c0)="$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") ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0xc, 0x0) 2.907180412s ago: executing program 1 (id=193): syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r5, 0x2007ffb) close(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) openat(r5, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 2.906252352s ago: executing program 3 (id=194): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) preadv(r3, &(0x7f000001bb40)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=195): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004, 0xff]}) unlink(&(0x7f0000000240)='./file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 83.884771][ T5765] cgroup: Unknown subsys name 'net' [ 84.022866][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.724556][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.165293][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.177076][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.188617][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.197297][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.206412][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.214836][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.222160][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.230910][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.239305][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.264563][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.281004][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.288567][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.290668][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.303929][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.312733][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.331092][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.332296][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.340371][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.348231][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.353436][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.361961][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.381662][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.393874][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.401478][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.767432][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.928169][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.935546][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.942979][ T5778] bridge_slave_0: entered allmulticast mode [ 88.951440][ T5778] bridge_slave_0: entered promiscuous mode [ 88.988208][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.004378][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.011717][ T5778] bridge_slave_1: entered allmulticast mode [ 89.036728][ T5778] bridge_slave_1: entered promiscuous mode [ 89.096242][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.110610][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 89.122477][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.140481][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.217304][ T5778] team0: Port device team_slave_0 added [ 89.273091][ T5778] team0: Port device team_slave_1 added [ 89.344042][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.364264][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.371510][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.379430][ T5777] bridge_slave_0: entered allmulticast mode [ 89.387711][ T5777] bridge_slave_0: entered promiscuous mode [ 89.397162][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.404460][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.430520][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.475133][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.482359][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.489962][ T5780] bridge_slave_0: entered allmulticast mode [ 89.497387][ T5780] bridge_slave_0: entered promiscuous mode [ 89.505528][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.512679][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.520482][ T5777] bridge_slave_1: entered allmulticast mode [ 89.529406][ T5777] bridge_slave_1: entered promiscuous mode [ 89.548247][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.555383][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.581480][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.617969][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.625427][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.632636][ T5780] bridge_slave_1: entered allmulticast mode [ 89.640044][ T5780] bridge_slave_1: entered promiscuous mode [ 89.722287][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.734958][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.748138][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.781803][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.839200][ T5778] hsr_slave_0: entered promiscuous mode [ 89.847204][ T5778] hsr_slave_1: entered promiscuous mode [ 89.855163][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.862355][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.870979][ T5779] bridge_slave_0: entered allmulticast mode [ 89.878578][ T5779] bridge_slave_0: entered promiscuous mode [ 89.889304][ T5780] team0: Port device team_slave_0 added [ 89.909739][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.917467][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.925110][ T5779] bridge_slave_1: entered allmulticast mode [ 89.932204][ T5779] bridge_slave_1: entered promiscuous mode [ 89.952824][ T5780] team0: Port device team_slave_1 added [ 89.964938][ T5777] team0: Port device team_slave_0 added [ 90.007229][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.018379][ T5777] team0: Port device team_slave_1 added [ 90.046560][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.053577][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.080365][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.095505][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.152101][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.159287][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.185332][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.223551][ T5779] team0: Port device team_slave_0 added [ 90.230628][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.238303][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.265794][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.278630][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.285931][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.312339][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.334797][ T5779] team0: Port device team_slave_1 added [ 90.405276][ T5785] Bluetooth: hci3: command tx timeout [ 90.432321][ T5780] hsr_slave_0: entered promiscuous mode [ 90.439297][ T5780] hsr_slave_1: entered promiscuous mode [ 90.446453][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.454567][ T5780] Cannot create hsr debugfs directory [ 90.460935][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.470686][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.496980][ T5785] Bluetooth: hci0: command tx timeout [ 90.504872][ T5783] Bluetooth: hci1: command tx timeout [ 90.510685][ T5785] Bluetooth: hci2: command tx timeout [ 90.511367][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.530331][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.537598][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.563923][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.652718][ T5777] hsr_slave_0: entered promiscuous mode [ 90.662004][ T5777] hsr_slave_1: entered promiscuous mode [ 90.668962][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.676863][ T5777] Cannot create hsr debugfs directory [ 90.753192][ T5779] hsr_slave_0: entered promiscuous mode [ 90.760319][ T5779] hsr_slave_1: entered promiscuous mode [ 90.767422][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.775280][ T5779] Cannot create hsr debugfs directory [ 91.037948][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.079057][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.091125][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.107417][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.234826][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.266779][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.279200][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.317126][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.391192][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.413644][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.433960][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.463766][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.531995][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.542866][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.560198][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.574885][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.715805][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.746931][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.802912][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.843770][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.860177][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.867697][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.891179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.898370][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.908930][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.916238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.931285][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.979608][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.986934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.015570][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.072308][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.079581][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.118274][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.125549][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.159680][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.188296][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.268062][ T1212] cfg80211: failed to load regulatory.db [ 92.270863][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.355455][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.362696][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.403474][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.423267][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.456096][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.463358][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.502843][ T5785] Bluetooth: hci3: command tx timeout [ 92.566317][ T5785] Bluetooth: hci2: command tx timeout [ 92.571851][ T5783] Bluetooth: hci1: command tx timeout [ 92.578362][ T5783] Bluetooth: hci0: command tx timeout [ 92.728249][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.793991][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.860249][ T5778] veth0_vlan: entered promiscuous mode [ 92.907133][ T5778] veth1_vlan: entered promiscuous mode [ 93.002854][ T5780] veth0_vlan: entered promiscuous mode [ 93.028121][ T5778] veth0_macvtap: entered promiscuous mode [ 93.053743][ T5780] veth1_vlan: entered promiscuous mode [ 93.108248][ T5778] veth1_macvtap: entered promiscuous mode [ 93.163436][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.180305][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.196912][ T5780] veth0_macvtap: entered promiscuous mode [ 93.217969][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.230301][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.250984][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.265046][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.273889][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.283290][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.300410][ T5780] veth1_macvtap: entered promiscuous mode [ 93.412976][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.427520][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.439804][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.451355][ T5777] veth0_vlan: entered promiscuous mode [ 93.506768][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.522815][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.528061][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.535897][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.555397][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.569293][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.578349][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.588885][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.598194][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.636374][ T5777] veth1_vlan: entered promiscuous mode [ 93.659819][ T5779] veth0_vlan: entered promiscuous mode [ 93.694518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.702417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.722707][ T5779] veth1_vlan: entered promiscuous mode [ 93.824059][ T5777] veth0_macvtap: entered promiscuous mode [ 93.860100][ T5777] veth1_macvtap: entered promiscuous mode [ 93.879864][ T5779] veth0_macvtap: entered promiscuous mode [ 93.949126][ T5779] veth1_macvtap: entered promiscuous mode [ 93.967515][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.982374][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.027672][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.043298][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.054590][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.067364][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.079864][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.111349][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.127818][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.139458][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.155734][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.172126][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.198697][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208607][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218925][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.241661][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.278200][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.290744][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.302542][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.313454][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.324267][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.336652][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.349443][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.361722][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.372659][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.383086][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.394468][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.406791][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.417882][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.430704][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.450682][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.459951][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.478291][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.488629][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.498115][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.509431][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.579858][ T5783] Bluetooth: hci3: command tx timeout [ 94.645973][ T5783] Bluetooth: hci2: command tx timeout [ 94.651484][ T5783] Bluetooth: hci1: command tx timeout [ 94.657205][ T5785] Bluetooth: hci0: command tx timeout [ 94.753521][ T5853] syz.0.1[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.782099][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.793221][ T5853] loop0: detected capacity change from 0 to 1024 [ 94.810635][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.830931][ T5853] ======================================================= [ 94.830931][ T5853] WARNING: The mand mount option has been deprecated and [ 94.830931][ T5853] and is ignored by this kernel. Remove the mand [ 94.830931][ T5853] option from the mount to silence this warning. [ 94.830931][ T5853] ======================================================= [ 94.890908][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.899965][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.948841][ T5853] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 94.973460][ T28] audit: type=1326 audit(1789294740.749:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.052062][ T5853] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.064429][ T28] audit: type=1326 audit(1789294740.749:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.106915][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.131568][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.138975][ T5853] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 95.139056][ T5853] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.139666][ T5853] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 95.216760][ T28] audit: type=1326 audit(1789294740.779:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.263666][ T5853] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1: Failed to acquire dquot type 0 [ 95.278196][ T28] audit: type=1326 audit(1789294740.779:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.288637][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.324464][ T5853] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 95.349998][ T28] audit: type=1326 audit(1789294740.779:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.364319][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.378564][ T5853] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1: mark_inode_dirty error [ 95.415020][ T5853] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 95.429888][ T5853] EXT4-fs (loop0): 1 orphan inode deleted [ 95.446131][ T28] audit: type=1326 audit(1789294740.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.455118][ T49] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.484371][ T5853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.542924][ T49] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 95.572032][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 95.574590][ T28] audit: type=1326 audit(1789294740.779:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.6" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 95.671924][ T5853] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1: Invalid inode table block 1 in block_group 0 [ 95.862133][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.882495][ T5780] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.902468][ T5780] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 95.913888][ T5780] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 95.960481][ T5867] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 96.207947][ T5875] Zero length message leads to an empty skb [ 96.380549][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.419840][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.462536][ T5879] loop1: detected capacity change from 0 to 2048 [ 96.550625][ T5879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.274200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.498821][ T5785] Bluetooth: hci3: command tx timeout [ 98.498849][ T5088] Bluetooth: hci0: command tx timeout [ 98.504697][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.509774][ T5088] Bluetooth: hci2: command tx timeout [ 98.516186][ T5785] Bluetooth: hci1: command tx timeout [ 98.521709][ T5088] Bluetooth: hci4: command 0x1003 tx timeout [ 98.651061][ T5890] loop3: detected capacity change from 0 to 1024 [ 98.710240][ T5890] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 98.902726][ T5890] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.17: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.132449][ T5890] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.17: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.255978][ T5890] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.17: Failed to acquire dquot type 0 [ 99.345601][ T5890] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 99.436435][ T5890] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.17: mark_inode_dirty error [ 99.491142][ T5890] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 99.543769][ T5890] EXT4-fs (loop3): 1 orphan inode deleted [ 99.564439][ T1135] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.584659][ T1135] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 99.615759][ T5890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.727893][ T5890] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.17: Invalid inode table block 1 in block_group 0 [ 99.794932][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.815144][ T5778] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 99.855018][ T5778] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 99.891432][ T5778] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 100.170722][ T5904] loop1: detected capacity change from 0 to 1024 [ 100.206298][ T5904] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 100.240505][ T5904] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.29: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.266784][ T5904] __quota_error: 6 callbacks suppressed [ 100.266811][ T5904] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 100.299404][ T5904] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.29: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.351206][ T5904] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 100.362999][ T5904] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.29: Failed to acquire dquot type 0 [ 100.400221][ T5904] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 100.412541][ T5904] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.29: mark_inode_dirty error [ 100.436603][ T5904] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.464861][ T1135] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.483548][ T5904] EXT4-fs (loop1): 1 orphan inode deleted [ 100.494028][ T5904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.511221][ T1135] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 100.520345][ T1135] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 100.562979][ T5904] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.29: Invalid inode table block 1 in block_group 0 [ 100.689068][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.708881][ T5779] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 100.738979][ T5779] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 100.754015][ T5779] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 102.577252][ T5783] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.586745][ T5783] Bluetooth: hci2: Injecting HCI hardware error event [ 102.598158][ T5783] Bluetooth: hci2: hardware error 0x00 [ 102.743852][ T5916] Bluetooth: MGMT ver 1.22 [ 102.847870][ T5925] loop2: detected capacity change from 0 to 128 [ 103.004529][ T5927] loop3: detected capacity change from 0 to 2048 [ 103.016416][ T5925] FAT-fs (loop2): Directory bread(block 32) failed [ 103.033713][ T5925] FAT-fs (loop2): Directory bread(block 33) failed [ 103.070442][ T5925] FAT-fs (loop2): Directory bread(block 34) failed [ 103.079521][ T5927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.111892][ T5925] FAT-fs (loop2): Directory bread(block 35) failed [ 103.132553][ T5925] FAT-fs (loop2): Directory bread(block 36) failed [ 103.247502][ T5925] FAT-fs (loop2): Directory bread(block 37) failed [ 103.276079][ T5925] FAT-fs (loop2): Directory bread(block 38) failed [ 103.315104][ T5925] FAT-fs (loop2): Directory bread(block 39) failed [ 103.323455][ T5925] FAT-fs (loop2): Directory bread(block 40) failed [ 103.356158][ T5925] FAT-fs (loop2): Directory bread(block 41) failed [ 104.056271][ T5925] syz.2.26: attempt to access beyond end of device [ 104.056271][ T5925] loop2: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 104.142552][ T5925] syz.2.26: attempt to access beyond end of device [ 104.142552][ T5925] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 104.160566][ T28] audit: type=1800 audit(1789294749.939:12): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.26" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 104.376134][ T5940] loop0: detected capacity change from 0 to 2048 [ 104.442209][ T5940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.579268][ T5941] loop3: detected capacity change from 0 to 512 [ 104.914611][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 105.271451][ T5941] EXT4-fs error (device loop3): ext4_quota_enable:7144: comm syz.3.34: inode #50331648: comm syz.3.34: iget: illegal inode # [ 105.348222][ T5941] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.34: Bad quota inode: 50331648, type: 2 [ 105.413766][ T5941] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 105.522013][ T5941] EXT4-fs (loop3): mount failed [ 107.285272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 107.738536][ T1212] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 107.929495][ T5968] loop1: detected capacity change from 0 to 256 [ 107.972312][ T5968] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa7918649, utbl_chksum : 0xe619d30d) [ 108.159047][ T1212] usb 3-1: config 0 has no interfaces? [ 108.219998][ T5971] netlink: 104 bytes leftover after parsing attributes in process `syz.3.40'. [ 108.243575][ T1212] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 108.274209][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.284162][ T1212] usb 3-1: SerialNumber: syz [ 108.362562][ T5971] loop3: detected capacity change from 0 to 512 [ 108.404169][ T1212] usb 3-1: config 0 descriptor?? [ 109.874128][ C0] sched: RT throttling activated [ 109.880394][ T5971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.254816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.664426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.080867][ T789] usb 3-1: USB disconnect, device number 2 [ 111.110954][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.282471][ T5783] Bluetooth: unknown link type 85 [ 111.288756][ T5783] Bluetooth: hci3: connection err: -111 [ 112.814787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.674197][ T28] audit: type=1326 audit(1789294759.429:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.1.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc67259e159 code=0x0 [ 114.455542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.965260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.374874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.765600][ T5783] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.775014][ T5783] Bluetooth: hci1: Injecting HCI hardware error event [ 117.785299][ T5088] Bluetooth: hci1: hardware error 0x00 [ 120.496932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.904424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.171712][ T5088] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 122.076635][ T5826] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.295764][ T5826] usb 2-1: config 0 has no interfaces? [ 123.302927][ T5826] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 123.322584][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.331093][ T5826] usb 2-1: SerialNumber: syz [ 123.354931][ T5826] usb 2-1: config 0 descriptor?? [ 123.826622][ T5821] usb 2-1: USB disconnect, device number 2 [ 128.095038][ T28] audit: type=1800 audit(1789294773.809:14): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.74" name="bus" dev="ramfs" ino=8227 res=0 errno=0 [ 128.664918][ T6078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.69'. [ 129.144563][ T6078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.750795][ T6081] loop3: detected capacity change from 0 to 1024 [ 133.621532][ T28] audit: type=1326 audit(1789294778.419:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 133.629831][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.688634][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.721489][ T28] audit: type=1326 audit(1789294778.419:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.3.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 133.794207][ T1212] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 134.015732][ T1212] usb 2-1: config 0 has no interfaces? [ 134.045016][ T1212] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 134.067367][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.112867][ T1212] usb 2-1: SerialNumber: syz [ 134.129534][ T1212] usb 2-1: config 0 descriptor?? [ 134.366803][ T6105] loop2: detected capacity change from 0 to 1024 [ 135.356933][ T6109] loop0: detected capacity change from 0 to 1024 [ 135.364396][ T6109] hfsplus: unable to parse mount options [ 135.479722][ T5792] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.697714][ T23] usb 2-1: USB disconnect, device number 3 [ 136.461043][ T6124] loop2: detected capacity change from 0 to 2048 [ 138.044261][ T28] audit: type=1326 audit(1789294782.869:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 138.131789][ T6124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.160108][ T28] audit: type=1326 audit(1789294782.879:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 140.118400][ T6139] loop1: detected capacity change from 0 to 1024 [ 141.427911][ T6147] loop3: detected capacity change from 0 to 2048 [ 141.597188][ T6147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.734250][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 141.875371][ T6151] loop2: detected capacity change from 0 to 512 [ 141.998015][ T23] usb 2-1: config 0 has no interfaces? [ 142.150360][ T23] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 142.313065][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.154235][ T23] usb 2-1: SerialNumber: syz [ 143.193622][ T23] usb 2-1: config 0 descriptor?? [ 144.850234][ T5821] usb 2-1: USB disconnect, device number 4 [ 144.866145][ T28] audit: type=1800 audit(1789294790.649:19): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.102" name="bus" dev="ramfs" ino=8338 res=0 errno=0 [ 145.360579][ T6162] loop1: detected capacity change from 0 to 2048 [ 145.557220][ T6162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.646389][ T6187] loop1: detected capacity change from 0 to 1024 [ 151.762216][ T6187] hfsplus: unable to parse mount options [ 151.800046][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 152.020508][ T27] usb 3-1: config 0 has no interfaces? [ 152.043964][ T27] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 152.073607][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.104011][ T27] usb 3-1: SerialNumber: syz [ 152.120723][ T27] usb 3-1: config 0 descriptor?? [ 152.489697][ T6192] loop3: detected capacity change from 0 to 512 [ 152.584370][ T6192] ext4: Unknown parameter 'noacl' [ 153.230034][ T5826] usb 3-1: USB disconnect, device number 3 [ 153.984254][ T5786] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 154.213095][ T5786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.235067][ T5786] usb 2-1: not running at top speed; connect to a high speed hub [ 154.287437][ T5786] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 154.306643][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.334612][ T5786] usb 2-1: Product: syz [ 154.349151][ T5786] usb 2-1: Manufacturer: syz [ 154.353842][ T5786] usb 2-1: SerialNumber: syz [ 156.041497][ T6203] loop3: detected capacity change from 0 to 512 [ 156.299909][ T5786] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.399949][ T5786] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 156.503970][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.629183][ T5786] usb 2-1: USB disconnect, device number 5 [ 158.676994][ T6217] loop1: detected capacity change from 0 to 2048 [ 158.736179][ T6217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.297278][ T6221] loop3: detected capacity change from 0 to 1024 [ 159.305730][ T6221] hfsplus: unable to parse mount options [ 159.660251][ T6228] loop2: detected capacity change from 0 to 2048 [ 161.365010][ T6228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.827651][ T5821] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 162.214271][ T5821] usb 2-1: config 0 has no interfaces? [ 162.246864][ T5821] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 162.275639][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.304527][ T5821] usb 2-1: SerialNumber: syz [ 163.426856][ T5821] usb 2-1: config 0 descriptor?? [ 166.826447][ T6255] loop2: detected capacity change from 0 to 1024 [ 166.950843][ T6257] loop0: detected capacity change from 0 to 512 [ 166.958420][ T6255] hfsplus: unable to parse mount options [ 167.039907][ T6257] ext4: Unknown parameter 'noacl' [ 167.101833][ T5786] usb 2-1: USB disconnect, device number 6 [ 168.113459][ T6264] loop2: detected capacity change from 0 to 256 [ 168.172412][ T6264] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.187501][ T6267] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 168.311191][ T6269] loop3: detected capacity change from 0 to 512 [ 168.403082][ T6269] EXT4-fs: Ignoring removed i_version option [ 168.447989][ T6269] EXT4-fs: Ignoring removed oldalloc option [ 168.565163][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.610525][ T6274] loop0: detected capacity change from 0 to 512 [ 168.627561][ T6274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.915639][ T6274] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.129: bad orphan inode 15 [ 169.125263][ T6274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.643507][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.194774][ T6276] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 172.804200][ T5786] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 173.106269][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.274301][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 179.734206][ T9] usb 4-1: config 0 has no interfaces? [ 179.825386][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 179.874243][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.882325][ T9] usb 4-1: SerialNumber: syz [ 179.906699][ T9] usb 4-1: config 0 descriptor?? [ 182.443418][ T6325] loop2: detected capacity change from 0 to 1024 [ 182.470106][ T5821] usb 4-1: USB disconnect, device number 3 [ 182.608970][ T6325] hfsplus: unable to parse mount options [ 183.427748][ T6336] loop1: detected capacity change from 0 to 512 [ 183.506733][ T6336] EXT4-fs: Ignoring removed i_version option [ 183.512905][ T6336] ext4: Unknown parameter 'smackfstransmute' [ 186.424233][ T5826] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 186.779762][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 186.844311][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.932765][ T5826] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 186.954340][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.011432][ T5826] usb 4-1: Product: syz [ 187.037456][ T5826] usb 4-1: Manufacturer: syz [ 187.078286][ T5826] usb 4-1: SerialNumber: syz [ 187.177030][ T5826] usb 4-1: config 0 descriptor?? [ 187.233144][ T5826] hub 4-1:0.0: bad descriptor, ignoring hub [ 187.316069][ T5826] hub: probe of 4-1:0.0 failed with error -5 [ 187.421066][ T5826] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 187.513976][ T6349] loop0: detected capacity change from 0 to 2048 [ 187.688296][ T6349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.230988][ T6374] hub 8-0:1.0: USB hub found [ 191.237728][ T6374] hub 8-0:1.0: 1 port detected [ 191.324041][ T6374] loop0: detected capacity change from 0 to 8192 [ 192.270715][ T6380] loop1: detected capacity change from 0 to 512 [ 192.283822][ T6380] ext4: Unknown parameter 'noacl' [ 194.649233][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.660199][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.928243][ T5826] usb 4-1: USB disconnect, device number 4 [ 195.178370][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.507095][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.765700][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.013331][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.304179][ T5786] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.517274][ T5786] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 196.537270][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.554682][ T5786] usb 4-1: Product: syz [ 196.568711][ T5786] usb 4-1: Manufacturer: syz [ 196.604136][ T5786] usb 4-1: SerialNumber: syz [ 196.870675][ T5786] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 196.884470][ T5786] usb 4-1: MIDIStreaming interface descriptor not found [ 196.953125][ T6158] udevd[6158]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.992364][ T5786] usb 4-1: USB disconnect, device number 5 [ 197.781043][ T12] hsr_slave_0: left promiscuous mode [ 197.787411][ T12] hsr_slave_1: left promiscuous mode [ 197.793635][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.801619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.811625][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.819562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.827699][ T12] bridge_slave_1: left allmulticast mode [ 197.833398][ T12] bridge_slave_1: left promiscuous mode [ 197.840634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.853129][ T12] bridge_slave_0: left allmulticast mode [ 197.858957][ T12] bridge_slave_0: left promiscuous mode [ 197.865969][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.893825][ T12] veth1_macvtap: left promiscuous mode [ 197.900150][ T12] veth0_macvtap: left promiscuous mode [ 197.906401][ T12] veth1_vlan: left promiscuous mode [ 197.913284][ T12] veth0_vlan: left promiscuous mode [ 198.237306][ T28] audit: type=1326 audit(1789294844.019:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 198.950397][ T28] audit: type=1326 audit(1789294844.039:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 199.055059][ T28] audit: type=1326 audit(1789294844.039:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 199.081787][ T28] audit: type=1326 audit(1789294844.039:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9aab19e159 code=0x7ffc0000 [ 199.125325][ T6409] loop3: detected capacity change from 0 to 1024 [ 199.134969][ T28] audit: type=1326 audit(1789294844.039:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9aab19dec2 code=0x7ffc0000 [ 199.162738][ T28] audit: type=1326 audit(1789294844.039:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9aab15e98e code=0x7ffc0000 [ 199.189371][ T6409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.211876][ T28] audit: type=1326 audit(1789294844.839:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9aab19df87 code=0x7ffc0000 [ 199.237209][ T28] audit: type=1326 audit(1789294844.839:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9aab15e98e code=0x7ffc0000 [ 199.238296][ T6409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.294378][ T28] audit: type=1326 audit(1789294844.839:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9aab19ddeb code=0x7ffc0000 [ 199.329311][ T6409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 199.340612][ T6409] System zones: 0-1, 3-36 [ 199.358401][ T28] audit: type=1326 audit(1789294844.969:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9aab15e98e code=0x7ffc0000 [ 199.401377][ T6409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.615948][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.733829][ T6418] loop1: detected capacity change from 0 to 2048 [ 201.399521][ T6418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.791465][ T5088] Bluetooth: hci3: link tx timeout [ 201.797262][ T5088] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.911710][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.118675][ T5088] Bluetooth: hci3: link tx timeout [ 202.123871][ T5088] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.167381][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.295661][ T6437] loop0: detected capacity change from 0 to 8 [ 202.342129][ T5781] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.639688][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.042664][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.364026][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 204.568319][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.911292][ T12] bond0 (unregistering): Released all slaves [ 207.117112][ T6430] tipc: Started in network mode [ 207.122150][ T6430] tipc: Node identity , cluster identity 4711 [ 207.144340][ T6430] tipc: Failed to obtain node identity [ 207.149876][ T6430] tipc: Enabling of bearer rejected, failed to enable media [ 207.178835][ T6438] syz_tun: entered allmulticast mode [ 210.388630][ T6470] loop3: detected capacity change from 0 to 1024 [ 210.410788][ T6470] hfsplus: unable to parse mount options [ 214.226779][ T6490] loop0: detected capacity change from 0 to 2048 [ 214.306961][ T6490] ext4: Unknown parameter 'appraise' [ 216.768141][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 216.768158][ T28] audit: type=1800 audit(1789294862.549:54): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="bus" dev="ramfs" ino=9036 res=0 errno=0 SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=4 req=163 state=1 status=67 (errno 9: Bad file descriptor) [ 218.381178][ T1135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.537960][ T1135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.639771][ T1135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.780748][ T1135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.009990][ T1135] hsr_slave_0: left promiscuous mode [ 220.016870][ T1135] hsr_slave_1: left promiscuous mode [ 220.026854][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.043868][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.055112][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.062582][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.073884][ T1135] bridge_slave_1: left allmulticast mode [ 220.079937][ T1135] bridge_slave_1: left promiscuous mode [ 220.089568][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.099855][ T1135] bridge_slave_0: left allmulticast mode [ 220.106403][ T1135] bridge_slave_0: left promiscuous mode [ 220.112210][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.145760][ T1135] veth1_macvtap: left promiscuous mode [ 220.151399][ T1135] veth0_macvtap: left promiscuous mode [ 220.157298][ T1135] veth1_vlan: left promiscuous mode [ 220.162739][ T1135] veth0_vlan: left promiscuous mode [ 220.807419][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 220.848059][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 220.888707][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.935560][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.268091][ T1135] bond0 (unregistering): Released all slaves [ 221.383517][ T5780] syz_tun (unregistering): left allmulticast mode [ 221.893372][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.953255][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.018498][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.094757][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.229726][ T1135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.333507][ T1135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.394240][ T1135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.458379][ T1135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.656696][ T1135] hsr_slave_0: left promiscuous mode [ 223.662782][ T1135] hsr_slave_1: left promiscuous mode [ 223.668985][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.676856][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.686354][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.693812][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.701791][ T1135] bridge_slave_1: left allmulticast mode [ 223.707676][ T1135] bridge_slave_1: left promiscuous mode [ 223.713405][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.722698][ T1135] bridge_slave_0: left allmulticast mode [ 223.728564][ T1135] bridge_slave_0: left promiscuous mode [ 223.734510][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.751349][ T1135] hsr_slave_0: left promiscuous mode [ 223.757517][ T1135] hsr_slave_1: left promiscuous mode [ 223.763535][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.774221][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.783989][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.793167][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.801076][ T1135] bridge_slave_1: left allmulticast mode [ 223.806923][ T1135] bridge_slave_1: left promiscuous mode [ 223.812643][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.822730][ T1135] bridge_slave_0: left allmulticast mode [ 223.828774][ T1135] bridge_slave_0: left promiscuous mode [ 223.834661][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.869562][ T1135] veth1_macvtap: left promiscuous mode [ 223.876955][ T1135] veth0_macvtap: left promiscuous mode [ 223.882655][ T1135] veth1_vlan: left promiscuous mode [ 223.888123][ T1135] veth0_vlan: left promiscuous mode [ 223.895944][ T1135] veth1_macvtap: left promiscuous mode [ 223.901527][ T1135] veth0_macvtap: left promiscuous mode [ 223.907387][ T1135] veth1_vlan: left promiscuous mode [ 223.912725][ T1135] veth0_vlan: left promiscuous mode [ 224.572090][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 224.617521][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 224.659965][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.706182][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.020789][ T1135] bond0 (unregistering): Released all slaves [ 225.562739][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 225.602543][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 225.647010][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.693300][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.996505][ T1135] bond0 (unregistering): Released all slaves