last executing test programs: 3m33.628427309s ago: executing program 1 (id=2339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x50}}) 3m27.588357425s ago: executing program 1 (id=2348): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)='TV'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 3m26.55677472s ago: executing program 1 (id=2350): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d", 0x38}], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/4096, 0x1000}, 0xdc1}], 0x1, 0x40000000, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) 3m25.489423676s ago: executing program 1 (id=2351): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noquota}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 3m25.087041935s ago: executing program 1 (id=2354): gettid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000002380)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x1}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x24004041) 3m22.877010429s ago: executing program 1 (id=2358): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ff", 0x54}], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/4096, 0x1000}, 0xdc1}], 0x1, 0x40000000, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) 3m22.260385793s ago: executing program 32 (id=2358): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ff", 0x54}], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/4096, 0x1000}, 0xdc1}], 0x1, 0x40000000, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) 13.869933586s ago: executing program 2 (id=2791): socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4004004) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x2, 0x4800103b, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000010280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4008010) 13.109015614s ago: executing program 2 (id=2793): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12.820792261s ago: executing program 0 (id=2795): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 11.465078404s ago: executing program 2 (id=2796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd=r2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.284766748s ago: executing program 0 (id=2798): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 10.195965745s ago: executing program 3 (id=2801): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa12, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x4}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000a80)={0x13, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500010007"], 0x1c}}, 0x40000) r8 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185647, &(0x7f0000000100)={0x9b0000, 0x5, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98f90d, 0xffffffff, '\x00', @value64=0x2}}) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 8.871737696s ago: executing program 3 (id=2804): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 7.640277366s ago: executing program 3 (id=2806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r2, 0x2000) fanotify_mark(0xffffffffffffffff, 0x101, 0x1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.577796128s ago: executing program 2 (id=2807): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x220, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}]}]}}}, @IFLA_LINK={0x8}]}, 0x4c}}, 0x20000090) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000480)={&(0x7f00000008c0)=""/203, 0x118}) shutdown(0xffffffffffffffff, 0x2) r4 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0xab07, 0x1) getdents64(r6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.365085353s ago: executing program 4 (id=2809): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0', 0xc) 7.248403666s ago: executing program 4 (id=2810): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 7.0574831s ago: executing program 0 (id=2811): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 6.270424169s ago: executing program 3 (id=2812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x50}}) 6.173051652s ago: executing program 4 (id=2813): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) write(r4, &(0x7f0000000040)='add syz', 0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x24008800) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x7) 5.695125163s ago: executing program 0 (id=2814): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}]}, 0x28}}, 0x0) 5.150446146s ago: executing program 3 (id=2815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd=r2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.066230932s ago: executing program 4 (id=2816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0xfc) 3.908855856s ago: executing program 0 (id=2817): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa12, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x4}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000a80)={0x13, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500010007"], 0x1c}}, 0x40000) r8 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185647, &(0x7f0000000100)={0x9b0000, 0x5, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98f90d, 0xffffffff, '\x00', @value64=0x2}}) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 3.640996603s ago: executing program 2 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) prlimit64(r0, 0x2, &(0x7f0000000000)={0x6, 0x4}, &(0x7f00000000c0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.046284651s ago: executing program 4 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0', 0xc) 1.2557984s ago: executing program 0 (id=2820): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noquota}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000080)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='file0', 0x5) 538.956958ms ago: executing program 3 (id=2821): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r4, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 336.983332ms ago: executing program 4 (id=2822): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 0s ago: executing program 2 (id=2823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x50}}) kernel console output (not intermixed with test programs): d. Some data may be corrupt. Please run fsck. [ 689.138634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 692.209797][T10833] loop1: detected capacity change from 0 to 8 [ 696.325806][T10854] loop2: detected capacity change from 0 to 512 [ 696.481777][T10854] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 696.514718][T10854] EXT4-fs (loop2): 1 truncate cleaned up [ 696.521867][T10854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.905379][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.474288][T10897] loop0: detected capacity change from 0 to 8 [ 700.215890][T10907] loop2: detected capacity change from 0 to 512 [ 700.288178][T10907] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 700.294129][T10907] EXT4-fs (loop2): 1 truncate cleaned up [ 700.295252][T10907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.350367][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.947038][T10961] loop2: detected capacity change from 0 to 512 [ 705.975372][T10961] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 706.090763][T10961] EXT4-fs (loop2): 1 truncate cleaned up [ 706.135257][T10961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.737522][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.989634][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 709.996998][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 710.052711][T11007] ceph: No mds server is up or the cluster is laggy [ 713.921308][T11034] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 714.738635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 715.148522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 716.546608][T11048] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 716.557500][T11048] cramfs: wrong magic [ 716.644921][T11051] loop3: detected capacity change from 0 to 8 [ 716.832655][T11055] SQUASHFS error: Unable to read inode 0xe3 [ 717.599659][T11054] loop2: detected capacity change from 0 to 512 [ 717.792004][T11054] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 718.089817][T11054] EXT4-fs (loop2): 1 truncate cleaned up [ 718.919976][T11054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.071717][T11071] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 719.864513][T11073] loop3: detected capacity change from 0 to 512 [ 719.872522][T11073] EXT4-fs: inline encryption not supported [ 719.881462][T11073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 719.952483][T11073] EXT4-fs (loop3): 1 truncate cleaned up [ 719.959992][T11073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.096206][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.844135][T11094] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 721.860901][T11094] cramfs: wrong magic [ 721.872758][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.076250][T11100] loop1: detected capacity change from 0 to 8 [ 725.611871][T11108] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 725.740529][T11114] loop2: detected capacity change from 0 to 8 [ 725.980944][T11118] SQUASHFS error: zlib decompression failed, data probably corrupt [ 725.989929][T11118] SQUASHFS error: Failed to read block 0x4e8: -5 [ 726.382516][T11116] loop3: detected capacity change from 0 to 512 [ 726.388762][ T28] audit: type=1800 audit(1786578147.011:4): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1397" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 726.410557][T11116] EXT4-fs: inline encryption not supported [ 726.498071][T11116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 726.670065][T11122] loop1: detected capacity change from 0 to 1024 [ 726.685822][T11116] EXT4-fs (loop3): 1 truncate cleaned up [ 726.693598][T11116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.880197][T11122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.410834][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.680570][ T789] libceph: connect (1)[c::]:6789 error -101 [ 727.689114][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 727.730186][T11135] ceph: No mds server is up or the cluster is laggy [ 727.786409][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.379759][T11144] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 729.476618][T11149] loop3: detected capacity change from 0 to 512 [ 729.491884][T11149] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 729.522536][T11149] EXT4-fs (loop3): 1 truncate cleaned up [ 729.529951][T11149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.966142][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.245909][T11167] loop0: detected capacity change from 0 to 512 [ 730.285860][T11167] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 730.340746][T11167] EXT4-fs (loop0): 1 truncate cleaned up [ 730.364339][T11167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.823867][T11170] loop3: detected capacity change from 0 to 512 [ 730.849684][T11170] EXT4-fs: inline encryption not supported [ 730.868497][T11170] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 731.008717][T11170] EXT4-fs (loop3): 1 truncate cleaned up [ 731.099335][T11170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.220964][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.393773][T11189] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 733.241047][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.792323][T11222] loop2: detected capacity change from 0 to 512 [ 736.882135][T11222] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 736.930032][T11222] EXT4-fs (loop2): 1 truncate cleaned up [ 736.937205][T11222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.846508][T11230] loop0: detected capacity change from 0 to 512 [ 737.970877][T11230] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 738.010006][T11230] EXT4-fs (loop0): 1 truncate cleaned up [ 738.073773][T11230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.175578][T11236] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 739.152027][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.192420][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.472896][T11271] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 742.308077][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'. [ 743.424131][T11283] loop0: detected capacity change from 0 to 512 [ 744.355240][T11283] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 744.514493][T11283] EXT4-fs (loop0): 1 truncate cleaned up [ 744.520710][T11283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.654751][T11290] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 745.719052][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.752713][T11299] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 747.622414][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 747.638598][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 747.645564][T11302] ceph: No mds server is up or the cluster is laggy [ 747.664491][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.671210][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.156647][T11337] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 752.505076][ T173] libceph: connect (1)[c::]:6789 error -101 [ 752.505256][ T173] libceph: mon0 (1)[c::]:6789 connect error [ 752.520283][T11341] loop2: detected capacity change from 0 to 512 [ 752.537387][T11341] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 752.544447][T11342] loop3: detected capacity change from 0 to 512 [ 752.569451][T11345] ceph: No mds server is up or the cluster is laggy [ 752.619246][T11342] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 752.643096][T11341] EXT4-fs (loop2): 1 truncate cleaned up [ 752.644503][T11341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.722759][T11342] EXT4-fs (loop3): 1 truncate cleaned up [ 752.724281][T11342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.524295][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.707680][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.999075][T11376] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 757.027604][T11379] loop1: detected capacity change from 0 to 256 [ 757.044916][T11379] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 757.110294][T11379] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 757.604522][T11388] loop1: detected capacity change from 0 to 8 [ 757.654217][T11389] loop3: detected capacity change from 0 to 512 [ 757.676702][T11389] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 757.769042][T11389] EXT4-fs (loop3): 1 truncate cleaned up [ 757.775647][T11389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.100465][T11397] SQUASHFS error: zlib decompression failed, data probably corrupt [ 758.108823][T11397] SQUASHFS error: Failed to read block 0x4e8: -5 [ 758.120657][ T28] audit: type=1800 audit(1786578179.131:5): pid=11397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1470" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 760.136138][T11411] loop2: detected capacity change from 0 to 512 [ 760.185735][T11411] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 760.257521][T11411] EXT4-fs (loop2): 1 truncate cleaned up [ 760.260235][T11411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.865706][T11419] loop1: detected capacity change from 0 to 512 [ 760.883955][T11419] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 760.947433][T11419] EXT4-fs (loop1): 1 truncate cleaned up [ 760.949596][T11419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.982880][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.211120][T11426] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 763.833042][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.874656][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.050721][T11441] loop2: detected capacity change from 0 to 8 [ 764.205398][T11444] SQUASHFS error: zlib decompression failed, data probably corrupt [ 764.213882][T11444] SQUASHFS error: Failed to read block 0x4e8: -5 [ 764.224113][ T28] audit: type=1800 audit(1786578185.231:6): pid=11444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1481" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 765.714216][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 766.133231][T11463] loop1: detected capacity change from 0 to 512 [ 766.297353][T11463] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 766.338556][T11466] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 766.397526][T11463] EXT4-fs (loop1): 1 truncate cleaned up [ 766.405417][T11463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.544974][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.990954][T11484] loop0: detected capacity change from 0 to 512 [ 769.022200][T11484] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 769.188035][T11484] EXT4-fs (loop0): 1 truncate cleaned up [ 769.235805][T11484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.498213][T11496] loop1: detected capacity change from 0 to 512 [ 770.581204][T11496] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 770.590171][T11496] EXT4-fs (loop1): 1 truncate cleaned up [ 770.591659][T11496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.651168][T11502] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 770.651442][T11502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 771.152339][T11506] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 773.132267][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.728525][T11525] loop0: detected capacity change from 0 to 512 [ 774.778067][T11525] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 775.027055][T11525] EXT4-fs (loop0): 1 truncate cleaned up [ 775.033841][T11525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.297211][T11528] loop2: detected capacity change from 0 to 8 [ 775.507831][T11530] SQUASHFS error: zlib decompression failed, data probably corrupt [ 775.519895][T11530] SQUASHFS error: Failed to read block 0x4e8: -5 [ 775.549073][ T28] audit: type=1800 audit(1786578196.541:7): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1503" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 776.385482][T11538] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 776.480419][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.515444][T11545] loop2: detected capacity change from 0 to 512 [ 777.569441][T11545] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 777.590177][T11543] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 777.597515][T11543] cramfs: wrong magic [ 777.609811][T11545] EXT4-fs (loop2): 1 truncate cleaned up [ 777.616899][T11545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.833724][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.284157][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.859795][T11580] loop3: detected capacity change from 0 to 512 [ 780.865641][T11580] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 780.923636][T11580] EXT4-fs (loop3): 1 truncate cleaned up [ 780.924928][T11580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.300041][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.274867][T11627] loop2: detected capacity change from 0 to 512 [ 786.294203][T11627] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 786.328776][T11627] EXT4-fs (loop2): 1 truncate cleaned up [ 786.335913][T11627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.676563][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.718256][T11638] loop0: detected capacity change from 0 to 8 [ 789.934009][T11656] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 792.818201][T11677] loop1: detected capacity change from 0 to 8 [ 792.885334][T11677] SQUASHFS error: Unable to read inode 0xe3 [ 795.916398][T11706] loop2: detected capacity change from 0 to 8 [ 796.034094][T11706] SQUASHFS error: Unable to read inode 0xe3 [ 796.186561][T11708] loop2: detected capacity change from 0 to 256 [ 796.200910][T11708] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 796.261949][T11708] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 797.699070][T11697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 797.827458][T11721] loop2: detected capacity change from 0 to 8 [ 799.702076][T11734] loop0: detected capacity change from 0 to 256 [ 799.755751][T11734] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 799.846515][T11734] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 802.347296][T11759] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1573'. [ 802.683000][T11764] loop0: detected capacity change from 0 to 256 [ 802.711989][T11764] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 803.462844][T11764] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.937248][T11789] binder: BINDER_SET_CONTEXT_MGR already set [ 804.944160][T11789] binder: 11788:11789 ioctl 4018620d 2000000002c0 returned -16 [ 805.102423][T11792] loop3: detected capacity change from 0 to 8 [ 805.209565][T11796] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 805.217333][T11796] cramfs: wrong magic [ 805.289087][T11794] loop0: detected capacity change from 0 to 4096 [ 805.297958][T11794] EXT4-fs: inline encryption not supported [ 805.320874][T11794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 805.360726][T11794] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 805.495611][T11794] System zones: 0-5 [ 805.524211][T11794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.450408][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.104347][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.111423][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.380048][T11831] loop0: detected capacity change from 0 to 32768 [ 812.424569][T11831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1595 (11831) [ 812.827811][T11831] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 813.033282][T11831] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 813.248179][T11831] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 813.286727][T11831] BTRFS info (device loop0): trying to use backup root at mount time [ 813.295936][T11831] BTRFS info (device loop0): enabling ssd optimizations [ 813.304527][T11831] BTRFS info (device loop0): using spread ssd allocation scheme [ 813.314144][T11831] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 813.324273][T11831] BTRFS info (device loop0): use lzo compression, level 0 [ 813.331554][T11831] BTRFS info (device loop0): turning on flush-on-commit [ 813.340116][T11831] BTRFS info (device loop0): not using spread ssd allocation scheme [ 813.348360][T11831] BTRFS info (device loop0): using free space tree [ 813.421332][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 814.024033][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 814.034077][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 814.044123][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 814.054819][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 814.064550][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 814.075992][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 814.087050][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 814.097312][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 814.107183][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 814.117703][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 814.129666][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 814.140536][T11831] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 814.180153][T11831] BTRFS error (device loop0): open_ctree failed: -12 [ 814.283390][T11873] loop2: detected capacity change from 0 to 256 [ 815.062331][T11881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1605'. [ 815.073449][T11881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1605'. [ 815.181792][T11885] binder: 11884:11885 ioctl 4018620d 0 returned -22 [ 815.263377][ T6753] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6753) [ 816.284576][T11895] loop2: detected capacity change from 0 to 256 [ 816.332441][T11895] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 816.573967][T11895] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 818.193297][T11910] loop3: detected capacity change from 0 to 512 [ 818.206480][T11910] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 818.230964][T11910] EXT4-fs (loop3): 1 truncate cleaned up [ 818.237458][T11910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.926002][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.801453][T11934] loop1: detected capacity change from 0 to 256 [ 820.829617][T11934] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 820.953356][T11934] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 822.338146][T11953] loop3: detected capacity change from 0 to 512 [ 822.351004][T11953] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 822.368914][T11953] EXT4-fs (loop3): 1 truncate cleaned up [ 822.375441][T11953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.567964][T11963] program syz.0.1628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.628592][T11963] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 824.645911][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.003229][T11977] loop1: detected capacity change from 0 to 256 [ 826.040664][T11977] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 826.113772][T11977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 826.159416][T11980] binder: 11978:11980 ioctl 4018620d 0 returned -22 [ 826.179645][T11981] loop0: detected capacity change from 0 to 512 [ 826.216742][T11981] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 826.301500][T11981] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1633: Allocating blocks 41-42 which overlap fs metadata [ 826.486815][T11981] EXT4-fs (loop0): Remounting filesystem read-only [ 826.587140][T11981] Quota error (device loop0): write_blk: dquota write failed [ 826.711439][T11981] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 826.927307][T11981] Quota error (device loop0): write_blk: dquota write failed [ 827.117908][T11981] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 827.202967][T11981] EXT4-fs (loop0): 1 truncate cleaned up [ 827.210163][T11981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.647386][T12014] program syz.3.1642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 828.662472][T12014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 833.123307][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 835.653843][T12060] program syz.1.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 835.670093][T12060] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 835.894221][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.548996][T12068] loop2: detected capacity change from 0 to 8 [ 838.684136][T12069] SQUASHFS error: zlib decompression failed, data probably corrupt [ 838.695640][T12069] SQUASHFS error: Failed to read block 0x4e8: -5 [ 838.733510][ T28] audit: type=1800 audit(1786578259.721:8): pid=12069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1659" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 841.199483][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 841.219360][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 841.260371][T12075] ceph: No mds server is up or the cluster is laggy [ 841.342758][T12088] loop0: detected capacity change from 0 to 512 [ 841.532414][T12088] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 842.167704][T12088] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1665: Allocating blocks 41-42 which overlap fs metadata [ 842.191023][T12088] EXT4-fs (loop0): Remounting filesystem read-only [ 842.197890][T12088] Quota error (device loop0): write_blk: dquota write failed [ 842.208018][T12088] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 842.220311][T12088] Quota error (device loop0): write_blk: dquota write failed [ 842.220472][T12088] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 842.220607][T12088] EXT4-fs (loop0): 1 truncate cleaned up [ 842.222006][T12088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.603122][T12108] lo speed is unknown, defaulting to 1000 [ 842.610077][T12108] lo speed is unknown, defaulting to 1000 [ 842.627162][T12108] lo speed is unknown, defaulting to 1000 [ 842.663051][T12108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 842.701481][T12108] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 842.793695][T12108] lo speed is unknown, defaulting to 1000 [ 842.808663][T12108] lo speed is unknown, defaulting to 1000 [ 842.826612][T12108] lo speed is unknown, defaulting to 1000 [ 842.838736][T12108] lo speed is unknown, defaulting to 1000 [ 844.553703][T12118] program syz.3.1671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.574207][T12118] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 846.745805][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.600818][T12130] loop0: detected capacity change from 0 to 8 [ 849.321050][T12136] loop2: detected capacity change from 0 to 512 [ 850.568286][T12136] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 850.679184][T12136] EXT4-fs (loop2): 1 truncate cleaned up [ 850.719312][T12136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.057083][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.674553][T12152] loop0: detected capacity change from 0 to 256 [ 851.931352][T12156] loop2: detected capacity change from 0 to 512 [ 851.980868][T12156] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 852.029335][T12156] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.1682: Allocating blocks 41-42 which overlap fs metadata [ 852.064812][T12156] EXT4-fs (loop2): Remounting filesystem read-only [ 852.106338][T12156] Quota error (device loop2): write_blk: dquota write failed [ 852.146530][T12156] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 852.199966][T12156] Quota error (device loop2): write_blk: dquota write failed [ 852.238119][T12156] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 852.284160][T12156] EXT4-fs (loop2): 1 truncate cleaned up [ 852.316423][T12156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.958788][T12179] loop1: detected capacity change from 0 to 1024 [ 855.081498][T12179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.151852][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.441099][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.876677][T12221] loop2: detected capacity change from 0 to 1024 [ 858.292581][T12221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.332048][T12229] loop1: detected capacity change from 0 to 512 [ 858.411033][T12229] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 858.470269][T12229] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.1705: Allocating blocks 41-42 which overlap fs metadata [ 858.538728][T12229] EXT4-fs (loop1): Remounting filesystem read-only [ 858.545442][T12229] Quota error (device loop1): write_blk: dquota write failed [ 858.568273][T12229] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 858.584607][T12229] Quota error (device loop1): write_blk: dquota write failed [ 858.597768][T12229] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 858.611197][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.629100][T12229] EXT4-fs (loop1): 1 truncate cleaned up [ 858.642359][T12229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.912288][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 861.563071][T12263] loop3: detected capacity change from 0 to 1024 [ 861.632221][T12263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.893380][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.895128][T12259] loop0: detected capacity change from 0 to 40427 [ 862.039904][T12259] F2FS-fs (loop0): invalid crc value [ 862.097281][T12259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 862.326017][T12259] F2FS-fs (loop0): Start checkpoint disabled! [ 862.373665][T12259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 862.431942][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.758662][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'. [ 864.746407][ T2943] kworker/u4:8: attempt to access beyond end of device [ 864.746407][ T2943] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 864.908510][ T2943] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 866.030694][T12305] loop2: detected capacity change from 0 to 8 [ 866.150397][T12305] SQUASHFS error: zlib decompression failed, data probably corrupt [ 866.158560][T12305] SQUASHFS error: Failed to read block 0x4e8: -5 [ 866.166022][ T28] audit: type=1800 audit(1786578287.171:9): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1727" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 866.171654][T12309] loop1: detected capacity change from 0 to 512 [ 866.240161][T12311] loop0: detected capacity change from 0 to 512 [ 866.260570][T12311] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 866.276487][T12309] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 866.299346][T12311] EXT4-fs (loop0): 1 truncate cleaned up [ 866.306564][T12311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.392002][T12309] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.1728: Allocating blocks 41-42 which overlap fs metadata [ 866.421330][T12309] EXT4-fs (loop1): Remounting filesystem read-only [ 866.438855][T12309] Quota error (device loop1): write_blk: dquota write failed [ 866.454944][T12309] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 866.477894][T12309] Quota error (device loop1): write_blk: dquota write failed [ 866.487887][T12309] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 866.513285][T12309] EXT4-fs (loop1): 1 truncate cleaned up [ 866.559067][T12309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.659522][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.239611][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 868.709696][T12334] Can't find ip_set type hash: [ 868.710069][T12333] Can't find ip_set type hash: [ 870.132884][T12350] loop2: detected capacity change from 0 to 8 [ 870.201460][T12354] loop0: detected capacity change from 0 to 8 [ 870.269143][T12354] SQUASHFS error: zlib decompression failed, data probably corrupt [ 870.277401][T12354] SQUASHFS error: Failed to read block 0x4e8: -5 [ 870.285647][ T28] audit: type=1800 audit(1786578291.301:10): pid=12354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1739" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 870.548997][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.556047][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.834662][T12363] loop2: detected capacity change from 0 to 512 [ 870.870851][T12363] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 870.932239][T12363] EXT4-fs (loop2): 1 truncate cleaned up [ 870.989562][T12363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.539555][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.110431][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 872.401207][T12376] Can't find ip_set type hash [ 872.401513][T12374] Can't find ip_set type hash [ 874.639722][T12393] loop3: detected capacity change from 0 to 8 [ 874.824859][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.021283][T12404] loop3: detected capacity change from 0 to 512 [ 876.216850][T12404] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 876.454678][T12404] EXT4-fs (loop3): 1 truncate cleaned up [ 876.462105][T12404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.334437][T12417] Can't find ip_set type hash [ 877.340204][T12416] Can't find ip_set type hash [ 877.788788][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.912315][T12438] loop2: detected capacity change from 0 to 512 [ 878.954148][T12439] loop0: detected capacity change from 0 to 8 [ 878.980685][T12438] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 879.699930][T12438] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.1758: Allocating blocks 41-42 which overlap fs metadata [ 879.828744][T12438] EXT4-fs (loop2): Remounting filesystem read-only [ 879.835696][T12438] Quota error (device loop2): write_blk: dquota write failed [ 879.852362][T12438] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 879.862242][T12438] Quota error (device loop2): write_blk: dquota write failed [ 879.870398][T12438] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 879.880769][T12438] EXT4-fs (loop2): 1 truncate cleaned up [ 879.889172][T12438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.914628][T12466] Can't find ip_set type hash [ 881.915041][T12465] Can't find ip_set type hash [ 883.410044][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.337619][T12489] loop2: detected capacity change from 0 to 8 [ 884.609168][T12489] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.009295][T12489] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.025253][ T28] audit: type=1800 audit(1786578306.021:11): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1770" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 885.200330][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.207155][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.213695][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.220196][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.226659][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.233147][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.240760][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.259825][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.266369][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.273694][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.558624][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.565221][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.571809][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.578435][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.584987][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.591580][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.598210][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.604851][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.611521][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.618416][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.625136][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.631682][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.638179][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.645671][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.652226][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.658750][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.665229][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.671763][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.678251][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.684775][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.691296][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.697862][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.704443][T12500] SQUASHFS error: Failed to read block 0x4de: -5 [ 885.796868][T12502] loop1: detected capacity change from 0 to 8192 [ 887.361853][T12502] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 890.693318][T12511] Can't find ip_set type hash: [ 891.893241][T12526] loop2: detected capacity change from 0 to 512 [ 891.917464][T12526] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 892.007781][T12526] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.1778: Allocating blocks 41-42 which overlap fs metadata [ 892.247386][T12526] EXT4-fs (loop2): Remounting filesystem read-only [ 892.260919][T12526] Quota error (device loop2): write_blk: dquota write failed [ 892.274021][T12526] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 893.071934][T12526] Quota error (device loop2): write_blk: dquota write failed [ 893.338849][T12526] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 893.358779][T12526] EXT4-fs (loop2): 1 truncate cleaned up [ 893.365210][T12526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.149829][T12564] Can't find ip_set type hash: [ 898.386815][T12574] program syz.1.1789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.404274][T12574] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 901.511803][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 901.522082][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1794'. [ 902.959847][T12593] Can't find ip_set type hash: [ 904.941454][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.903897][T12632] Can't find ip_set type hash: [ 908.303923][T12645] loop0: detected capacity change from 0 to 8 [ 909.044457][T12651] loop3: detected capacity change from 0 to 512 [ 909.185679][T12651] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 910.050451][T12651] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.1813: Allocating blocks 41-42 which overlap fs metadata [ 910.112467][T12651] EXT4-fs (loop3): Remounting filesystem read-only [ 910.155175][T12651] Quota error (device loop3): write_blk: dquota write failed [ 910.164368][T12651] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 910.175650][T12651] Quota error (device loop3): write_blk: dquota write failed [ 910.188516][T12651] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 910.207708][T12651] EXT4-fs (loop3): 1 truncate cleaned up [ 910.264183][T12651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.153285][T12678] binder: 12677:12678 ioctl 4018620d 0 returned -22 [ 911.421161][T12683] program syz.2.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 911.440916][T12683] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 914.170131][T12664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.805561][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.019069][T12706] binder: 12702:12706 ioctl 4018620d 0 returned -22 [ 919.344947][T12729] program syz.2.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.362405][T12729] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 923.194120][T12744] binder: 12743:12744 ioctl c0306201 0 returned -14 [ 926.146921][T12777] program syz.2.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.806312][T12777] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 928.949952][T12783] loop1: detected capacity change from 0 to 8 [ 929.067777][T12788] SQUASHFS error: zlib decompression failed, data probably corrupt [ 929.082144][T12788] SQUASHFS error: Failed to read block 0x4e8: -5 [ 929.098839][ T28] audit: type=1800 audit(1786578350.111:12): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1851" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 931.982314][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.021293][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.361686][T12821] program syz.2.1863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 934.378237][T12821] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 940.762644][T12869] program syz.2.1877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.777883][T12869] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 945.518412][ T5880] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 946.010764][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 946.036102][T12901] loop0: detected capacity change from 0 to 164 [ 946.529527][ T5880] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0x79, skipping [ 946.583599][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0 [ 946.664983][ T5880] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 946.810942][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 946.946497][ T5880] usb 3-1: Product: syz [ 947.029698][ T5880] usb 3-1: Manufacturer: syz [ 947.097067][ T5880] usb 3-1: SerialNumber: syz [ 947.343544][ T5880] usb 3-1: config 0 descriptor?? [ 948.523285][ T5880] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 948.758623][ T5880] usb 3-1: USB disconnect, device number 7 [ 948.778900][ T5787] udevd[5787]: setting mode of /dev/bus/usb/003/007 to 020664 failed: No such file or directory [ 949.109801][ T5787] udevd[5787]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 949.150020][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.263942][T12921] program syz.0.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.280986][T12921] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 949.800191][T12923] loop3: detected capacity change from 0 to 512 [ 949.939470][T12923] EXT4-fs: Ignoring removed oldalloc option [ 950.085937][T12923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 950.304934][T12923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.459871][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.149049][T12979] program syz.2.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 957.169434][T12979] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 960.507015][T12988] loop3: detected capacity change from 0 to 512 [ 960.563500][T12988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.767577][T12988] ext4 filesystem being mounted at /482/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.274589][ T28] audit: type=1326 audit(1786578382.261:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5eb99e0d9 code=0x0 [ 961.990350][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.933993][T13027] program syz.3.1918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 964.949560][T13027] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 974.352124][T13077] program syz.0.1931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 974.471010][T13077] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 977.121839][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 981.334687][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 982.173520][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 984.355341][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 988.030777][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 991.133961][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 991.175441][T13232] loop3: detected capacity change from 0 to 164 [ 993.469399][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.490075][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.351045][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 995.370919][T13271] loop1: detected capacity change from 0 to 164 [ 995.951141][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 995.968130][T13273] loop2: detected capacity change from 0 to 164 [ 1001.188406][T13297] syz.0.2003 (13297): drop_caches: 2 [ 1002.134447][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 1002.152796][T13333] loop0: detected capacity change from 0 to 164 [ 1004.430589][T13350] syzkaller0: entered promiscuous mode [ 1004.436511][T13350] syzkaller0: entered allmulticast mode [ 1005.792086][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 1005.832690][T13369] loop1: detected capacity change from 0 to 164 [ 1006.769008][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 1006.809673][T13381] loop3: detected capacity change from 0 to 164 [ 1009.188474][T13392] loop2: detected capacity change from 0 to 8192 [ 1010.217310][T13392] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1010.704107][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 1010.746716][T13399] loop3: detected capacity change from 0 to 164 [ 1013.513096][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 1013.559166][T13423] loop0: detected capacity change from 0 to 164 [ 1015.508453][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 1015.549907][T13445] loop3: detected capacity change from 0 to 164 [ 1017.746710][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 1017.789274][T13462] loop3: detected capacity change from 0 to 164 [ 1019.645159][T13471] loop0: detected capacity change from 0 to 512 [ 1019.893914][T13471] EXT4-fs (loop0): 1 truncate cleaned up [ 1019.929692][T13471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.704597][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.696602][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 1024.711384][T13495] loop1: detected capacity change from 0 to 164 [ 1025.154776][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 1027.343712][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 1027.385837][T13530] loop1: detected capacity change from 0 to 164 [ 1027.601314][T13498] bridge0: port 3(syz_tun) entered disabled state [ 1028.214806][T13498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.222380][T13498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.378488][ T5816] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1029.314075][ T5816] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1029.327046][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.356325][ T5816] usb 3-1: config 0 descriptor?? [ 1029.371668][ T5816] cp210x 3-1:0.0: cp210x converter detected [ 1030.021383][ T5816] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1030.224627][ T5816] usb 3-1: USB disconnect, device number 8 [ 1030.279487][ T5816] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1030.357125][ T5816] cp210x 3-1:0.0: device disconnected [ 1030.569953][T13498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.672082][T13498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.640683][T13543] syz.1.2069 (13543): drop_caches: 2 [ 1036.146057][T13498] gtp0: left promiscuous mode [ 1036.152530][T13498] gtp0: left allmulticast mode [ 1036.251435][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 1037.201311][T13498] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.210445][T13498] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.220923][T13498] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.238508][T13498] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.557769][T13607] syz.2.2089 (13607): drop_caches: 2 [ 1046.537143][T13644] program syz.0.2098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.609958][T13644] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1051.351970][T13666] dummy0: entered promiscuous mode [ 1051.357334][T13666] dummy0: entered allmulticast mode [ 1054.873728][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.882060][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.205439][T13695] program syz.1.2114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.954478][T13738] program syz.3.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.484870][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 1066.526083][T13744] loop0: detected capacity change from 0 to 164 [ 1069.909121][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 1069.923774][T13769] loop2: detected capacity change from 0 to 164 [ 1070.700924][T13781] program syz.0.2139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.814028][T13782] loop1: detected capacity change from 0 to 128 [ 1077.552541][T13811] syz.3.2149 (13811): drop_caches: 2 [ 1079.927636][T13831] program syz.1.2153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.000611][T13902] loop2: detected capacity change from 0 to 8192 [ 1092.072485][T13902] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1094.383628][T13924] dummy0: entered promiscuous mode [ 1094.389303][T13924] dummy0: entered allmulticast mode [ 1096.850992][T13953] Mass Storage Function, version: 2009/09/11 [ 1096.857685][T13953] LUN: removable file: (no medium) [ 1096.889427][ T28] audit: type=1800 audit(1786578517.881:14): pid=13953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2188" name="cdrom" dev="configfs" ino=33676 res=0 errno=0 [ 1097.246903][T13963] loop1: detected capacity change from 0 to 8192 [ 1097.292691][T13963] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1097.460290][T13974] dummy0: entered promiscuous mode [ 1097.465629][T13974] dummy0: entered allmulticast mode [ 1101.037303][T13995] mmap: syz.0.2199 (13995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1102.226054][T14008] loop3: detected capacity change from 0 to 8192 [ 1102.288763][T14008] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1102.678353][ T5872] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1103.499563][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 1104.305842][ T5872] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1104.330421][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1104.350682][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1104.374709][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1104.452575][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.490021][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1104.615811][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.807781][T14038] loop3: detected capacity change from 0 to 8 [ 1104.996123][T14038] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1105.004255][T14038] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1105.016553][ T5872] usb 2-1: GET_CAPABILITIES returned 0 [ 1105.025261][ T28] audit: type=1800 audit(1786578526.021:15): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2211" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1105.027181][ T5872] usbtmc 2-1:16.0: can't read capabilities [ 1106.197423][ T23] usb 2-1: USB disconnect, device number 16 [ 1106.448106][T14054] loop3: detected capacity change from 0 to 8192 [ 1106.487749][T14054] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1109.804532][T14074] loop3: detected capacity change from 0 to 8 [ 1110.101940][T14078] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1110.112567][T14078] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1110.378993][ T28] audit: type=1800 audit(1786578531.131:16): pid=14078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2222" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1112.203134][T14089] loop0: detected capacity change from 0 to 8192 [ 1112.653860][T14089] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1116.773138][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.779589][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.168171][T14136] loop3: detected capacity change from 0 to 8192 [ 1118.238410][T14136] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1121.028928][T14152] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.035023][T14152] binder: 14151:14152 ioctl 4018620d 2000000002c0 returned -16 [ 1129.946072][T14210] program syz.0.2261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1129.963974][T14210] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1134.652706][T14223] binder: BINDER_SET_CONTEXT_MGR already set [ 1134.675505][T14223] binder: 14222:14223 ioctl 4018620d 2000000002c0 returned -16 [ 1134.777784][T14229] binder: 14222:14229 ioctl c0306201 0 returned -14 [ 1136.000326][T14235] Config c/1 of g1 needs at least one function. [ 1136.079287][T14235] udc dummy_udc.0: failed to start g1: -22 [ 1136.098473][T14235] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1136.912789][T14235] UDC core: g1: couldn't find an available UDC or it's busy [ 1138.790799][T14266] binder: 14264:14266 ioctl c0306201 0 returned -14 [ 1140.352433][T14275] loop1: detected capacity change from 0 to 8192 [ 1140.471775][T14275] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1142.788784][T14295] overlay: Unknown parameter '/' [ 1143.555508][T14309] binder: 14304:14309 ioctl c0306201 0 returned -14 [ 1144.285133][T14316] loop1: detected capacity change from 0 to 8192 [ 1144.301595][T14316] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1147.610642][T14338] overlay: Unknown parameter '/' [ 1148.634391][T14344] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1149.759792][T14355] loop3: detected capacity change from 0 to 8192 [ 1150.530335][T14355] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1151.087311][T14368] overlay: Unknown parameter '/' [ 1152.484490][T14377] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1155.554200][T14389] loop0: detected capacity change from 0 to 16 [ 1155.647865][T14389] erofs: (device loop0): mounted with root inode @ nid 36. [ 1156.399370][T14392] binder: BINDER_SET_CONTEXT_MGR already set [ 1156.423261][T14392] binder: 14391:14392 ioctl 4018620d 2000000002c0 returned -16 [ 1157.827294][T14402] loop2: detected capacity change from 0 to 8192 [ 1157.840558][T14402] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1159.958430][T14419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.975161][ T5772] bridge0: port 3(syz_tun) entered disabled state [ 1159.982669][T14419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.997016][T14419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1160.010864][T14419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1160.021675][T14419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1160.030185][T14419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1160.101134][ T5772] syz_tun (unregistering): left allmulticast mode [ 1160.107610][ T5772] syz_tun (unregistering): left promiscuous mode [ 1160.192322][ T5772] bridge0: port 3(syz_tun) entered disabled state [ 1160.294180][T14418] lo speed is unknown, defaulting to 1000 [ 1160.451595][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.736381][T14427] loop3: detected capacity change from 0 to 164 [ 1161.893277][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.143221][T14419] Bluetooth: hci0: command tx timeout [ 1162.202904][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.839479][T14440] loop3: detected capacity change from 0 to 8192 [ 1162.963568][T14440] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1163.360341][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.591776][T14453] overlay: Unknown parameter '/' [ 1164.220211][T14419] Bluetooth: hci0: command tx timeout [ 1164.795718][T14418] chnl_net:caif_netlink_parms(): no params data found [ 1165.292924][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.317225][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.333236][T14418] bridge_slave_0: entered allmulticast mode [ 1165.380410][T14418] bridge_slave_0: entered promiscuous mode [ 1165.407323][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.439179][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.463344][T14418] bridge_slave_1: entered allmulticast mode [ 1165.489457][T14418] bridge_slave_1: entered promiscuous mode [ 1166.300174][T14419] Bluetooth: hci0: command tx timeout [ 1166.711661][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.980812][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.990279][T14498] loop3: detected capacity change from 0 to 8192 [ 1168.012957][T14498] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1168.116637][T14418] team0: Port device team_slave_0 added [ 1168.130821][T14418] team0: Port device team_slave_1 added [ 1168.199384][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1168.378332][T14419] Bluetooth: hci0: command tx timeout [ 1168.423664][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1168.437493][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.445591][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.472168][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.500196][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1168.517869][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1168.529281][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.536316][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.572964][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1168.614198][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1168.624497][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.678762][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.728295][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1168.748575][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.997760][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 1169.024446][ T23] usbtmc 2-1:16.0: can't read capabilities [ 1169.231365][T10289] usb 2-1: USB disconnect, device number 17 [ 1169.275744][T14418] hsr_slave_0: entered promiscuous mode [ 1169.307231][T14418] hsr_slave_1: entered promiscuous mode [ 1169.323599][T14418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.333922][T14418] Cannot create hsr debugfs directory [ 1170.038494][ T59] hsr_slave_0: left promiscuous mode [ 1170.060438][ T59] hsr_slave_1: left promiscuous mode [ 1170.077394][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.118486][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.148453][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.165580][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.219781][ T59] bridge_slave_1: left allmulticast mode [ 1170.225566][ T59] bridge_slave_1: left promiscuous mode [ 1170.233491][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.245775][ T59] bridge_slave_0: left allmulticast mode [ 1170.251742][ T59] bridge_slave_0: left promiscuous mode [ 1170.257475][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.291007][ T59] veth1_macvtap: left promiscuous mode [ 1170.297239][ T59] veth0_macvtap: left promiscuous mode [ 1170.303221][ T59] veth1_vlan: left promiscuous mode [ 1170.309664][ T59] veth0_vlan: left promiscuous mode [ 1173.604889][T14549] loop3: detected capacity change from 0 to 8192 [ 1173.655381][T14549] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1174.399752][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1174.486280][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1174.575456][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.659137][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.270653][ T59] bond0 (unregistering): Released all slaves [ 1176.051005][T10289] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1176.288320][T10289] usb 4-1: Using ep0 maxpacket: 8 [ 1176.308778][T10289] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1176.337177][T10289] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.362988][T10289] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.377433][T10289] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.393288][T10289] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.410972][T10289] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1176.423923][T10289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.694791][T14418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1176.727843][T14418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1176.770605][T14418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1176.807186][T14418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1177.044080][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.146469][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.175207][T10289] usb 4-1: GET_CAPABILITIES returned 0 [ 1177.185228][T10289] usbtmc 4-1:16.0: can't read capabilities [ 1177.646054][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.653312][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.746075][T12747] usb 4-1: USB disconnect, device number 5 [ 1177.798628][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.065804][T14588] loop1: detected capacity change from 0 to 512 [ 1178.082140][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.089403][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.143816][T14588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.190803][T14588] ext4 filesystem being mounted at /591/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.349089][ T28] audit: type=1800 audit(1786578599.331:17): pid=14588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2351" name="file" dev="configfs" ino=36985 res=0 errno=0 [ 1178.458055][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1178.520511][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1178.562392][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1178.656273][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1178.805689][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1178.977119][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1179.190988][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1179.385227][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1179.434474][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1179.446430][ T5774] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 1179.540130][T14418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.598577][T14418] veth0_vlan: entered promiscuous mode [ 1179.623764][T14418] veth1_vlan: entered promiscuous mode [ 1179.800558][T14418] veth0_macvtap: entered promiscuous mode [ 1179.815577][T14418] veth1_macvtap: entered promiscuous mode [ 1179.863707][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.900738][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.925532][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.964382][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.989931][T14418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.036777][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.077746][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.097187][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.109363][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.136162][T14418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.156779][T14418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.171325][T14418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.184813][T14418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.200426][T14418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.240156][ T5774] bridge0: port 3(syz_tun) entered disabled state [ 1180.315989][ T5774] syz_tun (unregistering): left allmulticast mode [ 1180.334902][ T5774] syz_tun (unregistering): left promiscuous mode [ 1180.372674][ T5774] bridge0: port 3(syz_tun) entered disabled state [ 1180.473296][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.723975][ T2943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.995035][ T2943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.192310][ T2943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.259198][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.267658][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.364409][ T2943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.859598][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.867499][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.284211][T12747] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1182.494396][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1182.506665][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1182.515975][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1182.530154][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1182.539856][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1182.547458][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1182.558713][T12747] usb 1-1: Using ep0 maxpacket: 8 [ 1182.566259][T12747] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1182.579769][T12747] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1182.617909][T12747] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1182.649533][T12747] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1182.660891][T12747] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1182.674447][T12747] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1182.683801][T12747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.929637][T12747] usb 1-1: GET_CAPABILITIES returned 0 [ 1182.945783][T12747] usbtmc 1-1:16.0: can't read capabilities [ 1183.047269][T14645] lo speed is unknown, defaulting to 1000 [ 1183.144152][T10289] usb 1-1: USB disconnect, device number 13 [ 1184.739979][T14419] Bluetooth: hci2: command tx timeout [ 1186.563362][T14645] chnl_net:caif_netlink_parms(): no params data found [ 1186.743151][ T2943] hsr_slave_0: left promiscuous mode [ 1186.757307][ T2943] hsr_slave_1: left promiscuous mode [ 1186.777104][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.778374][T14419] Bluetooth: hci2: command tx timeout [ 1186.822967][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.875779][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.928915][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.988958][ T2943] bridge_slave_1: left allmulticast mode [ 1186.994708][ T2943] bridge_slave_1: left promiscuous mode [ 1187.088804][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.134946][ T2943] bridge_slave_0: left allmulticast mode [ 1187.151334][ T2943] bridge_slave_0: left promiscuous mode [ 1187.156350][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'. [ 1187.197940][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.341152][ T2943] veth1_macvtap: left promiscuous mode [ 1187.346903][ T2943] veth0_macvtap: left promiscuous mode [ 1187.377421][ T2943] veth1_vlan: left promiscuous mode [ 1187.403685][ T2943] veth0_vlan: left promiscuous mode [ 1187.971101][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 1188.009662][T14729] loop0: detected capacity change from 0 to 164 [ 1188.887020][T14419] Bluetooth: hci2: command tx timeout [ 1190.952332][T14419] Bluetooth: hci2: command tx timeout [ 1191.161895][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1191.398233][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 1191.405329][ T5872] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1191.415067][ T5872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1191.443042][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1191.521056][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1191.567385][T14760] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1193.258682][ T5872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.308503][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1193.336017][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.569187][ T5872] usb 4-1: GET_CAPABILITIES returned 0 [ 1193.574712][ T5872] usbtmc 4-1:16.0: can't read capabilities [ 1193.775247][ T5872] usb 4-1: USB disconnect, device number 6 [ 1193.942666][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 1194.070316][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 1194.195623][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.287230][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.745639][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 1194.787111][T14770] loop3: detected capacity change from 0 to 164 [ 1195.956577][ T2943] bond0 (unregistering): Released all slaves [ 1196.150049][T14759] bridge0: port 3(syz_tun) entered blocking state [ 1196.166992][T14759] bridge0: port 3(syz_tun) entered disabled state [ 1196.176220][T14759] syz_tun: entered allmulticast mode [ 1196.187410][T14759] syz_tun: entered promiscuous mode [ 1196.197748][T14759] bridge0: port 3(syz_tun) entered blocking state [ 1196.204377][T14759] bridge0: port 3(syz_tun) entered forwarding state [ 1196.369119][T14645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.415937][T14645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.447662][T14645] bridge_slave_0: entered allmulticast mode [ 1197.329941][T14645] bridge_slave_0: entered promiscuous mode [ 1197.375391][T14645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.654557][T14645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.709815][T14645] bridge_slave_1: entered allmulticast mode [ 1197.770537][T14645] bridge_slave_1: entered promiscuous mode [ 1199.085297][T14645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.299428][T14645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.540192][T14645] team0: Port device team_slave_0 added [ 1199.633275][T14645] team0: Port device team_slave_1 added [ 1199.836591][T14645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.859272][T14645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.104098][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 1200.143921][T14813] loop2: detected capacity change from 0 to 164 [ 1200.461545][T14809] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1200.526449][T14645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.750077][T14645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.757363][T14645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.852976][T14645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.626793][T14645] hsr_slave_0: entered promiscuous mode [ 1201.731469][T14645] hsr_slave_1: entered promiscuous mode [ 1201.768366][T14645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1201.776003][T14645] Cannot create hsr debugfs directory [ 1201.907881][T14829] tipc: Started in network mode [ 1201.956920][T14829] tipc: Node identity da7be9620d1a, cluster identity 4711 [ 1201.989479][T14829] tipc: Enabled bearer , priority 0 [ 1202.157290][T14830] tipc: Resetting bearer [ 1202.253477][T14836] syzkaller0: entered promiscuous mode [ 1202.262280][T14836] syzkaller0: entered allmulticast mode [ 1202.354325][T14828] tipc: Resetting bearer [ 1202.385326][T14828] tipc: Disabling bearer [ 1202.904296][T14851] loop0: detected capacity change from 0 to 64 [ 1202.935001][T14851] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1203.004485][T14645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1203.331723][T14645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1203.541917][T14645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1203.726452][T14645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1204.280131][T14645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.430768][T14645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.497535][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.504928][T12930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.549723][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.556973][T12930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.019352][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 1205.057129][T14871] loop2: detected capacity change from 0 to 164 [ 1205.954867][T14877] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1207.365171][T14903] loop0: detected capacity change from 0 to 64 [ 1207.402717][T14901] loop3: detected capacity change from 0 to 16 [ 1207.409638][T14903] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1207.763175][T14901] erofs: (device loop3): mounted with root inode @ nid 36. [ 1208.208071][T14645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.650307][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 1209.684346][T14928] loop0: detected capacity change from 0 to 164 [ 1211.072407][T14645] veth0_vlan: entered promiscuous mode [ 1211.114630][T14645] veth1_vlan: entered promiscuous mode [ 1211.150430][T14645] veth0_macvtap: entered promiscuous mode [ 1211.161860][T14645] veth1_macvtap: entered promiscuous mode [ 1211.207639][T14645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.224720][T14645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.241979][T14645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.262652][T14645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.282447][T14645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.311827][T14645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.333586][T14645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.369437][T14645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.394982][T14645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.420547][T14645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.453377][T14645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.480999][T14645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.495649][T14645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.515283][T14645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.816149][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.851966][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.964162][T12930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.049201][T12930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.694180][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1212.731779][T14968] loop2: detected capacity change from 0 to 164 [ 1213.435454][T14979] loop3: detected capacity change from 0 to 64 [ 1213.727501][T14979] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1215.399067][T14982] loop2: detected capacity change from 0 to 64 [ 1215.439882][T14982] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1216.892447][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1216.904509][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1216.935854][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1216.947105][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1216.956186][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1216.963703][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1217.155328][ T5771] bridge0: port 3(syz_tun) entered disabled state [ 1217.297827][ T5771] syz_tun (unregistering): left allmulticast mode [ 1217.324899][ T5771] syz_tun (unregistering): left promiscuous mode [ 1217.371885][ T5771] bridge0: port 3(syz_tun) entered disabled state [ 1217.438410][T15015] lo speed is unknown, defaulting to 1000 [ 1217.500995][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 1217.545979][T15021] loop4: detected capacity change from 0 to 164 [ 1218.351262][ T9967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.573094][ T9967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.790303][ T9967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.929430][T15041] loop4: detected capacity change from 0 to 64 [ 1219.095459][T15041] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1219.277858][ T5788] Bluetooth: hci4: command tx timeout [ 1219.935455][ T9967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.394894][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 1220.434914][T15052] loop4: detected capacity change from 0 to 164 [ 1221.338563][ T5788] Bluetooth: hci4: command tx timeout [ 1221.394073][T15015] chnl_net:caif_netlink_parms(): no params data found [ 1221.808347][T10289] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1221.868991][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 1221.905122][T15068] loop0: detected capacity change from 0 to 164 [ 1222.598818][T10289] usb 3-1: Using ep0 maxpacket: 32 [ 1222.631608][T10289] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1222.650762][T10289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.674050][T10289] usb 3-1: Product: syz [ 1222.687710][T10289] usb 3-1: Manufacturer: syz [ 1222.698464][T10289] usb 3-1: SerialNumber: syz [ 1222.706933][T10289] usb 3-1: config 0 descriptor?? [ 1222.908618][T15015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.931932][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.962770][T15015] bridge_slave_0: entered allmulticast mode [ 1222.992972][T15015] bridge_slave_0: entered promiscuous mode [ 1223.418605][ T5788] Bluetooth: hci4: command tx timeout [ 1223.860624][T10289] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1223.888621][T10289] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1223.898565][T15015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.905750][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.918579][T10289] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1224.007809][T15015] bridge_slave_1: entered allmulticast mode [ 1224.017049][T15015] bridge_slave_1: entered promiscuous mode [ 1224.311308][T10289] peak_usb: probe of 3-1:0.0 failed with error -22 [ 1224.393649][T10289] usb 3-1: USB disconnect, device number 9 [ 1224.633562][T15087] dummy0: entered promiscuous mode [ 1224.638862][T15087] dummy0: entered allmulticast mode [ 1224.886611][T15015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.092585][T15015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.406544][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1225.425911][T15108] loop2: detected capacity change from 0 to 164 [ 1225.598354][ T5788] Bluetooth: hci4: command tx timeout [ 1226.791935][T15015] team0: Port device team_slave_0 added [ 1226.870206][T15015] team0: Port device team_slave_1 added [ 1227.129276][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 1227.166166][T15121] loop4: detected capacity change from 0 to 164 [ 1227.324853][T15015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.526051][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.804937][T15015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.155954][T15015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.165576][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.236609][T15129] loop2: detected capacity change from 0 to 16 [ 1230.114860][T15129] erofs: (device loop2): mounted with root inode @ nid 36. [ 1230.173091][T15015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.825800][T15135] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1231.150189][T15139] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1231.189514][T15134] bridge0: port 3(syz_tun) entered blocking state [ 1231.219890][T15134] bridge0: port 3(syz_tun) entered disabled state [ 1231.392750][T15134] syz_tun: entered allmulticast mode [ 1231.410643][T15134] syz_tun: entered promiscuous mode [ 1231.417651][T15134] bridge0: port 3(syz_tun) entered blocking state [ 1231.424337][T15134] bridge0: port 3(syz_tun) entered forwarding state [ 1231.443165][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1231.458865][T15145] loop0: detected capacity change from 0 to 164 [ 1232.091313][T15156] loop2: detected capacity change from 0 to 8192 [ 1232.118852][T15156] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1232.367692][T15015] hsr_slave_0: entered promiscuous mode [ 1232.400753][T15015] hsr_slave_1: entered promiscuous mode [ 1232.414188][T15015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1232.426900][T15015] Cannot create hsr debugfs directory [ 1232.563277][T15166] loop2: detected capacity change from 0 to 64 [ 1232.594976][T15166] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1232.648506][T13549] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1232.755995][ T9967] hsr_slave_0: left promiscuous mode [ 1232.782003][ T9967] hsr_slave_1: left promiscuous mode [ 1232.811280][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.829124][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.846344][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.868394][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.906090][ T9967] bridge_slave_1: left allmulticast mode [ 1232.908327][T13549] usb 1-1: Using ep0 maxpacket: 8 [ 1232.927764][ T9967] bridge_slave_1: left promiscuous mode [ 1232.945686][T13549] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1232.955287][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.002427][T13549] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1233.056801][ T9967] bridge_slave_0: left allmulticast mode [ 1233.066343][T13549] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1233.100663][ T9967] bridge_slave_0: left promiscuous mode [ 1233.106596][T13549] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1233.109926][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.157079][T13549] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.209534][T13549] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1233.235317][T13549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.335425][ T9967] veth1_macvtap: left promiscuous mode [ 1233.354486][ T9967] veth0_macvtap: left promiscuous mode [ 1233.378494][ T9967] veth1_vlan: left promiscuous mode [ 1233.394156][ T9967] veth0_vlan: left promiscuous mode [ 1233.574404][T15186] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1233.801582][T13549] usb 1-1: usb_control_msg returned -71 [ 1233.881556][T13549] usbtmc 1-1:16.0: can't read capabilities [ 1234.273180][T13549] usb 1-1: USB disconnect, device number 14 [ 1235.220019][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 1235.241711][T15198] loop0: detected capacity change from 0 to 164 [ 1235.972603][T15203] loop4: detected capacity change from 0 to 8192 [ 1235.994060][T15203] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1236.340335][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 1236.404011][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 1236.466087][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.533355][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.012788][ T9967] bond0 (unregistering): Released all slaves [ 1237.146029][T12747] lo speed is unknown, defaulting to 1000 [ 1237.674580][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 1239.191702][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.635388][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 1239.654161][T15236] loop0: detected capacity change from 0 to 164 [ 1239.876366][T15242] loop2: detected capacity change from 0 to 64 [ 1239.934469][T15242] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1240.809950][T15243] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1240.950947][T15015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1241.061097][T15015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1241.153177][T15253] loop0: detected capacity change from 0 to 8192 [ 1241.248300][ T28] audit: type=1800 audit(1786578662.131:18): pid=15256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2475" name="cdrom" dev="configfs" ino=40170 res=0 errno=0 [ 1241.289182][T15253] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1241.334718][T15015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1241.347109][T15015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1241.448472][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 1243.355249][T15015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.436959][T15015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.520138][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.527362][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.676388][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.683676][T12930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.877715][T15015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1243.889312][T15015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1243.927227][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 1243.943049][T15292] loop2: detected capacity change from 0 to 164 [ 1245.774181][T15294] loop4: detected capacity change from 0 to 64 [ 1245.945048][T15294] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1246.231377][ T28] audit: type=1800 audit(1786578667.221:19): pid=15300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2484" name="cdrom" dev="configfs" ino=40264 res=0 errno=0 [ 1246.511919][T15308] loop0: detected capacity change from 0 to 8192 [ 1246.562721][T15308] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1246.625362][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 1246.837375][T15015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.038931][T15015] veth0_vlan: entered promiscuous mode [ 1247.064273][T15015] veth1_vlan: entered promiscuous mode [ 1247.143659][T15015] veth0_macvtap: entered promiscuous mode [ 1247.178865][T15015] veth1_macvtap: entered promiscuous mode [ 1247.384392][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.488099][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.651836][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.787705][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.027570][T15015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.442656][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.512539][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.533409][T15015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.635893][T15015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.842298][T15015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.132113][T15015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.215691][T15015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.224831][T15015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.233722][T15015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.312873][ T28] audit: type=1800 audit(1786578670.301:20): pid=15345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2494" name="cdrom" dev="configfs" ino=40382 res=0 errno=0 [ 1249.519597][T15350] loop4: detected capacity change from 0 to 16 [ 1249.534141][T15350] erofs: (device loop4): mounted with root inode @ nid 36. [ 1251.227816][T15358] loop0: detected capacity change from 0 to 64 [ 1251.246505][T15358] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1251.446628][T15359] loop4: detected capacity change from 0 to 8192 [ 1251.491291][T15359] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1252.041998][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.083547][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.360329][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.400002][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1254.758873][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.077751][ T28] audit: type=1800 audit(1786578676.061:21): pid=15376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2503" name="cdrom" dev="configfs" ino=40586 res=0 errno=0 [ 1256.353429][T15401] loop4: detected capacity change from 0 to 16 [ 1256.362004][T15401] erofs: (device loop4): mounted with root inode @ nid 36. [ 1257.971294][T15403] loop2: detected capacity change from 0 to 8192 [ 1257.997107][T15403] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1258.212466][T15410] loop4: detected capacity change from 0 to 64 [ 1259.879964][T15411] overlay: Unknown parameter '/' [ 1260.074072][T15410] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1262.989657][ T28] audit: type=1800 audit(1786578683.991:22): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2513" name="cdrom" dev="configfs" ino=39874 res=0 errno=0 [ 1263.165381][T15430] loop2: detected capacity change from 0 to 64 [ 1263.243126][T14419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1263.275289][T14419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1263.285008][T14419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1263.298451][T14419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1263.329475][T14419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1263.343374][T14419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1264.419811][ T5773] syz_tun (unregistering): left allmulticast mode [ 1264.426328][ T5773] syz_tun (unregistering): left promiscuous mode [ 1264.434610][ T5773] bridge0: port 3(syz_tun) entered disabled state [ 1264.487538][T15446] loop4: detected capacity change from 0 to 64 [ 1264.501385][T15446] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1264.900998][T15448] loop2: detected capacity change from 0 to 8192 [ 1264.936605][T15448] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1265.420583][T14419] Bluetooth: hci1: command tx timeout [ 1265.821495][T15458] overlay: Unknown parameter '/' [ 1267.498234][T14419] Bluetooth: hci1: command tx timeout [ 1268.267825][T15483] loop3: detected capacity change from 0 to 64 [ 1268.976430][T15482] loop4: detected capacity change from 0 to 8192 [ 1269.001291][T15483] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1269.115112][T15482] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1269.581232][T14419] Bluetooth: hci1: command tx timeout [ 1271.403105][T15434] chnl_net:caif_netlink_parms(): no params data found [ 1271.658335][T14419] Bluetooth: hci1: command tx timeout [ 1271.841733][T15517] loop4: detected capacity change from 0 to 64 [ 1271.857267][T15517] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1273.749085][ T9967] tipc: Left network mode [ 1273.755979][T15532] loop4: detected capacity change from 0 to 64 [ 1273.834543][T15532] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1274.718788][T15434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.746433][T15434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.807666][T15434] bridge_slave_0: entered allmulticast mode [ 1274.844113][T15434] bridge_slave_0: entered promiscuous mode [ 1274.963071][T15434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.981577][T15434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.997881][T15434] bridge_slave_1: entered allmulticast mode [ 1275.012916][T15434] bridge_slave_1: entered promiscuous mode [ 1275.078458][ T5761] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1275.136403][T15434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.243030][T15434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.288358][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 1275.326733][T15554] loop2: detected capacity change from 0 to 64 [ 1276.144748][ T5761] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1277.030182][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.039451][ T5761] usb 4-1: Product: syz [ 1277.053808][ T5761] usb 4-1: Manufacturer: syz [ 1277.059325][ T5761] usb 4-1: SerialNumber: syz [ 1277.071765][ T5761] usb 4-1: config 0 descriptor?? [ 1277.102831][T15554] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1277.318646][T15434] team0: Port device team_slave_0 added [ 1277.482461][T15434] team0: Port device team_slave_1 added [ 1278.378357][ T5761] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1278.436003][ T5761] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1278.448312][ T5761] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1278.654299][ T5761] peak_usb: probe of 4-1:0.0 failed with error -22 [ 1278.697945][ T5761] usb 4-1: USB disconnect, device number 7 [ 1278.915333][T15434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.934439][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.994879][T15434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.170138][T15434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.217004][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.308404][T15434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.684221][T15434] hsr_slave_0: entered promiscuous mode [ 1279.774349][T15434] hsr_slave_1: entered promiscuous mode [ 1279.822143][T14419] Bluetooth: hci1: command tx timeout [ 1279.859872][T15434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1279.933625][T15434] Cannot create hsr debugfs directory [ 1280.813269][ T9967] hsr_slave_0: left promiscuous mode [ 1280.870373][ T9967] hsr_slave_1: left promiscuous mode [ 1280.990394][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.068817][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.129157][ T9967] bridge_slave_1: left allmulticast mode [ 1281.134886][ T9967] bridge_slave_1: left promiscuous mode [ 1281.259938][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.361727][ T9967] bridge_slave_0: left allmulticast mode [ 1281.367728][ T9967] bridge_slave_0: left promiscuous mode [ 1281.388377][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.532583][T15629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1282.218550][T14419] Bluetooth: hci0: command 0x0406 tx timeout [ 1282.267782][ T9967] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1284.698546][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 1284.716009][T15664] loop3: detected capacity change from 0 to 164 [ 1284.930915][T15666] loop2: detected capacity change from 0 to 1024 [ 1284.939311][T15666] EXT4-fs: Ignoring removed bh option [ 1284.993375][ T9967] bond1 (unregistering): Released all slaves [ 1285.023405][T15666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1285.064704][T15671] loop4: detected capacity change from 0 to 64 [ 1286.454841][T14418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.707829][T15689] loop3: detected capacity change from 0 to 64 [ 1288.910670][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 1288.928325][T15701] loop3: detected capacity change from 0 to 164 [ 1289.469489][T10289] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1289.670419][T10289] usb 3-1: device descriptor read/64, error -71 [ 1289.705307][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 1289.872676][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 1289.961970][T10289] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1290.090606][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.148503][T10289] usb 3-1: device descriptor read/64, error -71 [ 1290.288357][T10289] usb usb3-port1: attempt power cycle [ 1290.341038][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.864787][T10289] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1290.945049][T10289] usb 3-1: device descriptor read/8, error -71 [ 1291.258460][T10289] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1291.299238][T10289] usb 3-1: device descriptor read/8, error -71 [ 1292.141419][T10289] usb usb3-port1: unable to enumerate USB device [ 1293.231709][ T9967] bond0 (unregistering): Released all slaves [ 1293.366632][T15734] loop2: detected capacity change from 0 to 64 [ 1294.471138][T15739] dummy0: entered promiscuous mode [ 1294.493589][T15739] dummy0: entered allmulticast mode [ 1295.862265][T10289] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1296.024271][T15769] loop2: detected capacity change from 0 to 64 [ 1296.032534][T10289] usb 4-1: device descriptor read/64, error -71 [ 1296.330477][T10289] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1296.501349][T10289] usb 4-1: device descriptor read/64, error -71 [ 1296.673190][T10289] usb usb4-port1: attempt power cycle [ 1297.227283][T10289] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1297.321642][T10289] usb 4-1: device descriptor read/8, error -71 [ 1297.328870][T15779] dummy0: entered promiscuous mode [ 1297.352373][T15779] dummy0: entered allmulticast mode [ 1297.628477][T10289] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1297.690848][T10289] usb 4-1: device descriptor read/8, error -71 [ 1298.601441][T15434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1298.648750][T10289] usb usb4-port1: unable to enumerate USB device [ 1298.660744][T15434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1298.733468][T15434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1298.791936][T15434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1299.177483][T15434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.411529][T15434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.474526][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.481922][ T9967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.576462][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.584914][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.694493][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.148534][T15864] loop2: detected capacity change from 0 to 64 [ 1303.169037][T15864] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1303.728012][T15434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.201134][T15434] veth0_vlan: entered promiscuous mode [ 1304.234589][T15434] veth1_vlan: entered promiscuous mode [ 1304.910504][T15434] veth0_macvtap: entered promiscuous mode [ 1305.002849][T15434] veth1_macvtap: entered promiscuous mode [ 1305.088354][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.128298][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.148623][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.214024][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.059302][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.070017][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.086873][T15434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.151647][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.198344][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.248303][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.301876][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.348200][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.380918][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.432602][T15434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.652151][T15434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.676450][T15434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.699448][T15434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.725879][T15434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.772681][T15914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1307.882107][T12930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.148458][T14419] Bluetooth: hci2: command 0x0406 tx timeout [ 1308.679358][T12930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.962186][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.023790][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.419068][T15942] Config c/1 of g1 needs at least one function. [ 1310.438097][T15942] udc dummy_udc.0: failed to start g1: -22 [ 1310.449090][T15942] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1310.471305][T15942] UDC core: g1: couldn't find an available UDC or it's busy [ 1313.436829][T15957] dummy0: entered promiscuous mode [ 1313.458543][T15957] dummy0: entered allmulticast mode [ 1314.164610][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'. [ 1314.182991][T15974] loop3: detected capacity change from 0 to 164 [ 1314.718946][T15976] Config c/1 of g1 needs at least one function. [ 1314.738405][T15976] udc dummy_udc.0: failed to start g1: -22 [ 1314.762511][T15976] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1314.768386][T15983] loop3: detected capacity change from 0 to 64 [ 1314.787762][T15976] UDC core: g1: couldn't find an available UDC or it's busy [ 1316.029176][T15991] vicodec vicodec.0: Removing vicodec [ 1318.295519][T16006] loop3: detected capacity change from 0 to 1024 [ 1318.454912][T16006] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1318.632080][T16006] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1319.322390][T16010] Config c/1 of g1 needs at least one function. [ 1319.322504][T16006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1319.354226][T16010] udc dummy_udc.0: failed to start g1: -22 [ 1319.368429][T16010] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1319.389325][T16010] UDC core: g1: couldn't find an available UDC or it's busy [ 1320.465859][T16016] loop0: detected capacity change from 0 to 32768 [ 1320.764485][T16016] JBD2: Ignoring recovery information on journal [ 1320.991963][T16016] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1321.001674][T16024] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.2657: corrupted in-inode xattr: bad e_name length [ 1321.392334][T15015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.530443][T15434] ocfs2: Unmounting device (7,0) on (node local) [ 1324.760706][T16050] Config c/1 of g1 needs at least one function. [ 1324.799886][T16050] udc dummy_udc.0: failed to start g1: -22 [ 1324.816583][T16051] loop2: detected capacity change from 0 to 16 [ 1325.980961][T16051] erofs: (device loop2): mounted with root inode @ nid 36. [ 1326.191656][T16050] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1326.945080][T16050] UDC core: g1: couldn't find an available UDC or it's busy [ 1329.056678][T16081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1329.933478][T16080] Config c/1 of g1 needs at least one function. [ 1330.070586][T16080] udc dummy_udc.0: failed to start g1: -22 [ 1330.076532][T16080] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1330.121409][T16080] UDC core: g1: couldn't find an available UDC or it's busy [ 1330.128773][T16085] loop4: detected capacity change from 0 to 16 [ 1330.164586][T16085] erofs: (device loop4): mounted with root inode @ nid 36. [ 1330.551519][T16094] loop4: detected capacity change from 0 to 8192 [ 1330.582274][T16094] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1335.201250][T16127] Config c/1 of g1 needs at least one function. [ 1335.234853][T16127] udc dummy_udc.0: failed to start g1: -22 [ 1335.240955][T16127] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1335.332328][T16127] UDC core: g1: couldn't find an available UDC or it's busy [ 1339.138207][T16172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1339.367778][T16175] Config c/1 of g1 needs at least one function. [ 1339.400142][T16175] udc dummy_udc.0: failed to start g1: -22 [ 1339.406449][T16175] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1339.420469][T16175] UDC core: g1: couldn't find an available UDC or it's busy [ 1342.521499][T16211] Config c/1 of g1 needs at least one function. [ 1342.528036][T16211] udc dummy_udc.0: failed to start g1: -22 [ 1342.540611][T16211] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1342.577026][T16211] UDC core: g1: couldn't find an available UDC or it's busy [ 1343.219953][T16217] loop2: detected capacity change from 0 to 16 [ 1343.383450][T16217] erofs: (device loop2): mounted with root inode @ nid 36. [ 1343.722580][T14419] Bluetooth: hci4: command 0x0406 tx timeout [ 1347.048310][T16244] loop2: detected capacity change from 0 to 1024 [ 1347.219908][T16244] EXT4-fs: Ignoring removed bh option [ 1347.421326][T16244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.434806][T16248] Config c/1 of g1 needs at least one function. [ 1347.458994][T16248] udc dummy_udc.0: failed to start g1: -22 [ 1347.464913][T16248] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1347.489358][T16248] UDC core: g1: couldn't find an available UDC or it's busy [ 1348.383111][T14418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.638215][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1349.335334][T16267] loop0: detected capacity change from 0 to 1024 [ 1349.343591][T16267] EXT4-fs: Ignoring removed bh option [ 1349.588398][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1349.678947][T16267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.781077][ T23] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1350.335473][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.391766][ T23] usb 5-1: Product: syz [ 1350.415877][ T23] usb 5-1: Manufacturer: syz [ 1350.450909][ T23] usb 5-1: SerialNumber: syz [ 1351.319502][ T23] usb 5-1: config 0 descriptor?? [ 1351.457070][ T23] usb 5-1: can't set config #0, error -71 [ 1351.476825][ T23] usb 5-1: USB disconnect, device number 2 [ 1351.544041][T15434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.629892][T16284] loop3: detected capacity change from 0 to 64 [ 1351.645647][T16284] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1351.873510][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 1352.434238][T16287] overlay: Unknown parameter '/' [ 1355.145722][T16314] loop0: detected capacity change from 0 to 64 [ 1355.182073][T16314] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1357.149692][T16319] overlay: Unknown parameter '/' [ 1357.258331][ T5872] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1357.285806][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2756'. [ 1357.607162][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 1358.357467][ T5872] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1358.367052][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.378271][ T5872] usb 3-1: Product: syz [ 1358.383284][ T5872] usb 3-1: Manufacturer: syz [ 1358.388066][ T5872] usb 3-1: SerialNumber: syz [ 1358.400354][ T5872] usb 3-1: config 0 descriptor?? [ 1358.828349][ T5872] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1358.851369][ T5872] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1359.788906][ T5872] peak_usb: probe of 3-1:0.0 failed with error -32 [ 1359.809684][ T5872] usb 3-1: USB disconnect, device number 14 [ 1362.026837][T16354] overlay: Unknown parameter '/' [ 1362.063359][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.018342][T10289] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1363.938336][T10289] usb 4-1: Using ep0 maxpacket: 32 [ 1363.987538][T10289] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1364.016762][T10289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.081879][T10289] usb 4-1: Product: syz [ 1364.086232][T10289] usb 4-1: Manufacturer: syz [ 1364.091441][T10289] usb 4-1: SerialNumber: syz [ 1364.109757][T10289] usb 4-1: config 0 descriptor?? [ 1364.636974][T10289] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1364.707124][T10289] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1365.507628][T16390] overlay: Unknown parameter '/' [ 1366.170972][T10289] peak_usb: probe of 4-1:0.0 failed with error -32 [ 1366.181716][T10289] usb 4-1: USB disconnect, device number 12 [ 1368.634442][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 1369.967412][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1369.985741][T16435] loop0: detected capacity change from 0 to 164 [ 1372.732667][T10289] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1373.032391][T10289] usb 3-1: Using ep0 maxpacket: 8 [ 1373.111019][T10289] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1373.198300][T10289] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.281842][T10289] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1373.345491][T10289] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1373.418241][T10289] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1373.445743][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 1373.507487][T10289] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1373.569768][T10289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.734965][T10289] usbtmc 3-1:16.0: bulk endpoints not found [ 1375.879371][ T5816] usb 3-1: USB disconnect, device number 15 [ 1379.628335][ T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1379.818831][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 1379.836542][ T789] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1380.518559][T16533] loop2: detected capacity change from 0 to 16 [ 1381.406600][ T789] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.100279][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1382.150633][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1382.198178][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1382.479387][T16533] erofs: (device loop2): mounted with root inode @ nid 36. [ 1382.518652][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1382.778327][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.888824][ T789] usb 4-1: can't set config #16, error -71 [ 1382.962287][ T789] usb 4-1: USB disconnect, device number 13 [ 1383.066853][T16538] loop0: detected capacity change from 0 to 512 [ 1383.217106][T16538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.373918][T16538] ext4 filesystem being mounted at /45/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.527449][ T28] audit: type=1800 audit(1786578804.531:23): pid=16538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2820" name="file" dev="configfs" ino=43971 res=0 errno=0 [ 1383.549629][T16538] [ 1383.552012][T16538] ====================================================== [ 1383.559068][T16538] WARNING: possible circular locking dependency detected [ 1383.566128][T16538] syzkaller #0 Not tainted [ 1383.570565][T16538] ------------------------------------------------------ [ 1383.577602][T16538] syz.0.2820/16538 is trying to acquire lock: [ 1383.583768][T16538] ffff8880594ca418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1383.592555][T16538] [ 1383.592555][T16538] but task is already holding lock: [ 1383.600289][T16538] ffff888059061128 (&common->filesem){++++}-{3:3}, at: fsg_store_file+0x178/0x530 [ 1383.609590][T16538] [ 1383.609590][T16538] which lock already depends on the new lock. [ 1383.609590][T16538] [ 1383.620008][T16538] [ 1383.620008][T16538] the existing dependency chain (in reverse order) is: [ 1383.629115][T16538] [ 1383.629115][T16538] -> #4 (&common->filesem){++++}-{3:3}: [ 1383.636855][T16538] down_read+0x46/0x2e0 [ 1383.641558][T16538] fsg_show_file+0x2d/0x130 [ 1383.646590][T16538] configfs_read_iter+0x29d/0x570 [ 1383.652265][T16538] __kernel_read+0x2e5/0x730 [ 1383.657390][T16538] integrity_kernel_read+0x8a/0xd0 [ 1383.663338][T16538] ima_calc_file_hash+0xb1f/0x1960 [ 1383.668979][T16538] ima_collect_measurement+0x4d4/0xa30 [ 1383.674970][T16538] process_measurement+0x123a/0x1d50 [ 1383.680882][T16538] ima_file_check+0xcc/0x110 [ 1383.686018][T16538] path_openat+0x2910/0x3270 [ 1383.691152][T16538] do_filp_open+0x1f2/0x430 [ 1383.696187][T16538] do_sys_openat2+0x134/0x1d0 [ 1383.701486][T16538] __x64_sys_openat+0x139/0x160 [ 1383.706994][T16538] do_syscall_64+0x55/0xb0 [ 1383.711970][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.718455][T16538] [ 1383.718455][T16538] -> #3 (&p->frag_sem){.+.+}-{3:3}: [ 1383.725992][T16538] down_read+0x46/0x2e0 [ 1383.730969][T16538] configfs_read_iter+0x1a5/0x570 [ 1383.736544][T16538] __kernel_read+0x2e5/0x730 [ 1383.741869][T16538] integrity_kernel_read+0x8a/0xd0 [ 1383.747510][T16538] ima_calc_file_hash+0xb1f/0x1960 [ 1383.753242][T16538] ima_collect_measurement+0x4d4/0xa30 [ 1383.759235][T16538] process_measurement+0x123a/0x1d50 [ 1383.765044][T16538] ima_file_check+0xcc/0x110 [ 1383.770247][T16538] path_openat+0x2910/0x3270 [ 1383.775372][T16538] do_filp_open+0x1f2/0x430 [ 1383.780403][T16538] do_sys_openat2+0x134/0x1d0 [ 1383.785617][T16538] __x64_sys_openat+0x139/0x160 [ 1383.791002][T16538] do_syscall_64+0x55/0xb0 [ 1383.795947][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.802467][T16538] [ 1383.802467][T16538] -> #2 (&buffer->mutex#2){+.+.}-{3:3}: [ 1383.810236][T16538] __mutex_lock+0x135/0xc80 [ 1383.815289][T16538] configfs_read_iter+0x72/0x570 [ 1383.820842][T16538] __kernel_read+0x2e5/0x730 [ 1383.826136][T16538] integrity_kernel_read+0x8a/0xd0 [ 1383.831780][T16538] ima_calc_file_hash+0xb1f/0x1960 [ 1383.837419][T16538] ima_collect_measurement+0x4d4/0xa30 [ 1383.843404][T16538] process_measurement+0x123a/0x1d50 [ 1383.849233][T16538] ima_file_check+0xcc/0x110 [ 1383.854354][T16538] path_openat+0x2910/0x3270 [ 1383.859471][T16538] do_filp_open+0x1f2/0x430 [ 1383.864512][T16538] do_sys_openat2+0x134/0x1d0 [ 1383.869733][T16538] __x64_sys_openat+0x139/0x160 [ 1383.875115][T16538] do_syscall_64+0x55/0xb0 [ 1383.880057][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.886481][T16538] [ 1383.886481][T16538] -> #1 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 1383.894844][T16538] __mutex_lock+0x135/0xc80 [ 1383.899878][T16538] process_measurement+0x739/0x1d50 [ 1383.905614][T16538] ima_file_check+0xcc/0x110 [ 1383.910734][T16538] path_openat+0x2910/0x3270 [ 1383.915849][T16538] do_filp_open+0x1f2/0x430 [ 1383.921227][T16538] do_sys_openat2+0x134/0x1d0 [ 1383.926450][T16538] __x64_sys_open+0x11f/0x140 [ 1383.931664][T16538] do_syscall_64+0x55/0xb0 [ 1383.936618][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.943049][T16538] [ 1383.943049][T16538] -> #0 (sb_writers#4){.+.+}-{0:0}: [ 1383.950622][T16538] __lock_acquire+0x37ef/0x7d80 [ 1383.956189][T16538] lock_acquire+0x19e/0x420 [ 1383.961249][T16538] sb_start_write+0x4d/0x1c0 [ 1383.966393][T16538] mnt_want_write+0x41/0x90 [ 1383.971528][T16538] path_openat+0x768/0x3270 [ 1383.976563][T16538] do_filp_open+0x1f2/0x430 [ 1383.981591][T16538] filp_open+0x180/0x1e0 [ 1383.986399][T16538] fsg_lun_open+0x67/0xec0 [ 1383.991344][T16538] fsg_store_file+0x1a9/0x530 [ 1383.996550][T16538] configfs_write_iter+0x312/0x400 [ 1384.002207][T16538] vfs_write+0x474/0x9a0 [ 1384.006979][T16538] ksys_write+0x151/0x260 [ 1384.011935][T16538] do_syscall_64+0x55/0xb0 [ 1384.016877][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.023304][T16538] [ 1384.023304][T16538] other info that might help us debug this: [ 1384.023304][T16538] [ 1384.033545][T16538] Chain exists of: [ 1384.033545][T16538] sb_writers#4 --> &p->frag_sem --> &common->filesem [ 1384.033545][T16538] [ 1384.046168][T16538] Possible unsafe locking scenario: [ 1384.046168][T16538] [ 1384.053627][T16538] CPU0 CPU1 [ 1384.059001][T16538] ---- ---- [ 1384.064383][T16538] lock(&common->filesem); [ 1384.068898][T16538] lock(&p->frag_sem); [ 1384.075590][T16538] lock(&common->filesem); [ 1384.082623][T16538] rlock(sb_writers#4); [ 1384.086881][T16538] [ 1384.086881][T16538] *** DEADLOCK *** [ 1384.086881][T16538] [ 1384.095203][T16538] 5 locks held by syz.0.2820/16538: [ 1384.100402][T16538] #0: ffff8880243c54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 1384.109753][T16538] #1: ffff888018bac418 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1384.118739][T16538] #2: ffff88802f499488 (&buffer->mutex#2){+.+.}-{3:3}, at: configfs_write_iter+0x81/0x400 [ 1384.128872][T16538] #3: ffff8880256afa78 (&p->frag_sem){.+.+}-{3:3}, at: configfs_write_iter+0x215/0x400 [ 1384.138725][T16538] #4: ffff888059061128 (&common->filesem){++++}-{3:3}, at: fsg_store_file+0x178/0x530 [ 1384.148389][T16538] [ 1384.148389][T16538] stack backtrace: [ 1384.154276][T16538] CPU: 1 PID: 16538 Comm: syz.0.2820 Not tainted syzkaller #0 [ 1384.161757][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.171816][T16538] Call Trace: [ 1384.175099][T16538] [ 1384.178124][T16538] dump_stack_lvl+0x18c/0x250 [ 1384.183077][T16538] ? load_image+0x420/0x420 [ 1384.187597][T16538] ? show_regs_print_info+0x20/0x20 [ 1384.192897][T16538] ? print_circular_bug+0x12b/0x1a0 [ 1384.198119][T16538] check_noncircular+0x2fc/0x400 [ 1384.203076][T16538] ? print_deadlock_bug+0x5d0/0x5d0 [ 1384.208287][T16538] ? lockdep_lock+0xf5/0x230 [ 1384.212893][T16538] ? __lock_acquire+0x357f/0x7d80 [ 1384.217937][T16538] ? _find_first_zero_bit+0xd6/0x100 [ 1384.223319][T16538] __lock_acquire+0x37ef/0x7d80 [ 1384.228189][T16538] ? verify_lock_unused+0x140/0x140 [ 1384.233558][T16538] ? mark_lock+0x94/0x320 [ 1384.237907][T16538] lock_acquire+0x19e/0x420 [ 1384.242432][T16538] ? mnt_want_write+0x41/0x90 [ 1384.247146][T16538] ? leave_rcu+0xf4/0x160 [ 1384.251489][T16538] ? __might_sleep+0xe0/0xe0 [ 1384.256100][T16538] ? read_lock_is_recursive+0x20/0x20 [ 1384.261491][T16538] sb_start_write+0x4d/0x1c0 [ 1384.266094][T16538] ? mnt_want_write+0x41/0x90 [ 1384.271048][T16538] mnt_want_write+0x41/0x90 [ 1384.275565][T16538] path_openat+0x768/0x3270 [ 1384.280092][T16538] ? kmem_cache_alloc+0x17e/0x2c0 [ 1384.285130][T16538] ? getname_kernel+0x5a/0x2f0 [ 1384.289911][T16538] ? ksys_write+0x151/0x260 [ 1384.294426][T16538] ? do_filp_open+0x430/0x430 [ 1384.299113][T16538] do_filp_open+0x1f2/0x430 [ 1384.303640][T16538] ? vfs_tmpfile+0x620/0x620 [ 1384.308240][T16538] ? rcu_is_watching+0x15/0xb0 [ 1384.313101][T16538] ? getname_kernel+0x146/0x2f0 [ 1384.318326][T16538] filp_open+0x180/0x1e0 [ 1384.322666][T16538] ? file_open_name+0x1c0/0x1c0 [ 1384.327612][T16538] fsg_lun_open+0x67/0xec0 [ 1384.332040][T16538] ? down_read_killable+0x340/0x340 [ 1384.337607][T16538] fsg_store_file+0x1a9/0x530 [ 1384.342293][T16538] configfs_write_iter+0x312/0x400 [ 1384.347412][T16538] ? fsg_lun_opts_file_show+0x90/0x90 [ 1384.352806][T16538] vfs_write+0x474/0x9a0 [ 1384.357063][T16538] ? file_end_write+0x250/0x250 [ 1384.361934][T16538] ? __fget_files+0x3fc/0x460 [ 1384.366710][T16538] ? __fdget_pos+0x2a3/0x330 [ 1384.372008][T16538] ? ksys_write+0x74/0x260 [ 1384.377740][T16538] ksys_write+0x151/0x260 [ 1384.382092][T16538] ? __ia32_sys_read+0x90/0x90 [ 1384.386967][T16538] ? lockdep_hardirqs_on+0x98/0x150 [ 1384.392218][T16538] do_syscall_64+0x55/0xb0 [ 1384.396680][T16538] ? clear_bhb_loop+0x40/0x90 [ 1384.401554][T16538] ? clear_bhb_loop+0x40/0x90 [ 1384.406237][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.412140][T16538] RIP: 0033:0x7eff1a59e0d9 [ 1384.416564][T16538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.436269][T16538] RSP: 002b:00007eff1b3ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1384.444869][T16538] RAX: ffffffffffffffda RBX: 00007eff1a825fa0 RCX: 00007eff1a59e0d9 [ 1384.452873][T16538] RDX: 0000000000000005 RSI: 0000200000000380 RDI: 0000000000000004 [ 1384.460875][T16538] RBP: 00007eff1a635024 R08: 0000000000000000 R09: 0000000000000000 [ 1384.468857][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1384.477097][T16538] R13: 00007eff1a826038 R14: 00007eff1a825fa0 R15: 00007ffffd5edd58 [ 1384.485625][T16538] [ 1384.607659][T16538] mass_storage.0/lun.0: unable to open backing file: file0 [ 1385.183050][T14418] bridge0: port 3(syz_tun) entered disabled state [ 1385.222997][T14418] syz_tun (unregistering): left allmulticast mode [ 1385.229958][T14418] syz_tun (unregistering): left promiscuous mode [ 1385.236435][T14418] bridge0: port 3(syz_tun) entered disabled state [ 1385.274996][T16546] bridge0: port 3(syz_tun) entered disabled state [ 1385.285115][T16546] syz_tun (unregistering): left allmulticast mode [ 1385.295588][T16546] syz_tun (unregistering): left promiscuous mode [ 1385.303117][T16546] bridge0: port 3(syz_tun) entered disabled state [ 1385.367289][ T1081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.443847][ T1081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.495912][ T1081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.596590][T16538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.630904][ T1081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.384475][ T1081] hsr_slave_0: left promiscuous mode [ 1386.392553][ T1081] hsr_slave_1: left promiscuous mode [ 1386.400287][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.407742][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.417556][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.431398][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.439773][ T1081] bridge_slave_1: left allmulticast mode [ 1386.445460][ T1081] bridge_slave_1: left promiscuous mode [ 1386.452851][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.462747][ T1081] bridge_slave_0: left allmulticast mode [ 1386.470106][ T1081] bridge_slave_0: left promiscuous mode [ 1386.475867][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.489255][ T1081] veth1_macvtap: left promiscuous mode [ 1386.494834][ T1081] veth0_macvtap: left promiscuous mode [ 1386.502519][ T1081] veth1_vlan: left promiscuous mode [ 1386.507881][ T1081] veth0_vlan: left promiscuous mode [ 1386.724342][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 1386.741217][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 1386.753419][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.794476][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.875551][ T1081] bond0 (unregistering): Released all slaves [ 1387.259881][ T1081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.322772][ T1081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.374983][ T1081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.414105][ T1081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.529285][ T1081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.566931][ T1081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.644002][ T1081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.707093][ T1081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.835501][ T1081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.894870][ T1081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.944269][ T1081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.014060][ T1081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.400878][ T1081] hsr_slave_0: left promiscuous mode [ 1389.406853][ T1081] hsr_slave_1: left promiscuous mode [ 1389.414245][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.422225][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.430092][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.437565][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.445475][ T1081] bridge_slave_1: left allmulticast mode [ 1389.451159][ T1081] bridge_slave_1: left promiscuous mode [ 1389.456824][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.465139][ T1081] bridge_slave_0: left allmulticast mode [ 1389.471890][ T1081] bridge_slave_0: left promiscuous mode [ 1389.477680][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.489628][ T1081] hsr_slave_0: left promiscuous mode [ 1389.495532][ T1081] hsr_slave_1: left promiscuous mode [ 1389.501419][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.509160][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.517141][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.525077][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.532805][ T1081] bridge_slave_1: left allmulticast mode [ 1389.538532][ T1081] bridge_slave_1: left promiscuous mode [ 1389.544235][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.552683][ T1081] bridge_slave_0: left allmulticast mode [ 1389.558475][ T1081] bridge_slave_0: left promiscuous mode [ 1389.564120][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.575490][ T1081] hsr_slave_0: left promiscuous mode [ 1389.581746][ T1081] hsr_slave_1: left promiscuous mode [ 1389.587429][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.594994][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.603623][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.611282][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.619655][ T1081] bridge_slave_1: left allmulticast mode [ 1389.625319][ T1081] bridge_slave_1: left promiscuous mode [ 1389.631142][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.639784][ T1081] bridge_slave_0: left allmulticast mode [ 1389.645417][ T1081] bridge_slave_0: left promiscuous mode [ 1389.651352][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.665254][ T1081] veth1_macvtap: left promiscuous mode [ 1389.670799][ T1081] veth0_macvtap: left promiscuous mode [ 1389.676616][ T1081] veth1_vlan: left promiscuous mode [ 1389.682156][ T1081] veth0_vlan: left promiscuous mode [ 1389.688690][ T1081] veth1_macvtap: left promiscuous mode [ 1389.694195][ T1081] veth0_macvtap: left promiscuous mode [ 1389.699948][ T1081] veth1_vlan: left promiscuous mode [ 1389.705233][ T1081] veth0_vlan: left promiscuous mode [ 1389.711713][ T1081] veth1_macvtap: left promiscuous mode [ 1389.717200][ T1081] veth0_macvtap: left promiscuous mode [ 1389.723238][ T1081] veth1_vlan: left promiscuous mode [ 1389.728984][ T1081] veth0_vlan: left promiscuous mode [ 1390.005340][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 1390.043322][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 1390.073070][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.086428][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.174907][ T1081] bond0 (unregistering): Released all slaves [ 1390.332144][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 1390.344258][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 1390.379304][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.413013][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.504427][ T1081] bond0 (unregistering): Released all slaves [ 1390.656997][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 1390.669964][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 1390.704862][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.719313][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.812211][ T1081] bond0 (unregistering): Released all slaves