last executing test programs: 9m5.188179187s ago: executing program 1 (id=153): r0 = io_uring_setup(0x1757, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x23, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000009580)) close_range(r0, 0xffffffffffffffff, 0x0) 9m4.753776042s ago: executing program 1 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) mount(0x0, 0x0, &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) ioperm(0x100, 0x2, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000b40), 0x3, 0x0) 9m3.669761984s ago: executing program 1 (id=159): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) 9m1.717452637s ago: executing program 1 (id=164): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc5c, &(0x7f0000000080)={[{@errors_remount}, {@grpid}]}, 0x2, 0x459, &(0x7f00000000c0)="$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") mkdir(&(0x7f0000000f80)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000039c0)='./file0\x00') creat(&(0x7f0000003a00)='./bus\x00', 0x182) mount(&(0x7f0000003a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000003a80)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003b00)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003b40)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000003b80)="d4", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000003bc0)='./dev\x00', 0x1ff) 9m0.211999003s ago: executing program 1 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000600)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000680)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000006c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m59.673857789s ago: executing program 1 (id=175): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x8c, 0x200) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xa829c2, 0x20) setxattr$security_capability(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) 8m58.525602438s ago: executing program 32 (id=175): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x8c, 0x200) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xa829c2, 0x20) setxattr$security_capability(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) 8m35.174223532s ago: executing program 4 (id=176): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468a957ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2233f9d5c3b90400000000000000c279f03558083906666813d91dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000001280), &(0x7f00000012c0)='./file2\x00', 0x3000000, &(0x7f0000001300)={[], [{@uid_eq}]}, 0x2, 0x407, &(0x7f0000001340)="$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") mount$bind(&(0x7f0000001780)='.\x00', &(0x7f00000017c0)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001840)='./file0/../file0\x00', &(0x7f0000001880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000018c0)='./file0/../file0\x00', &(0x7f0000001900)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001940)='.\x00', 0x89901) move_mount(r1, &(0x7f0000001980)='.\x00', 0xffffffffffffff9c, &(0x7f00000019c0)='./file0/../file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a00)='mountinfo\x00') read$FUSE(r2, &(0x7f0000001a40)={0x2020}, 0x2020) 8m33.981694946s ago: executing program 4 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300a31414aa080006000600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000580)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 8m30.922739103s ago: executing program 4 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x22a7, 0x20001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000457000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000380)="0f20d835200000000f22d80fd2ea460f3805cb66baa00066edb992090000b800000000ba000000000f300f001981610c5576000047ded3b9800000c00f3235004000000f30c7442400e6000000c74424028e000000ff2c24", 0x58}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x4, 0xe98, 0x2, 0x1000d, 0x82, 0x44233, 0x9, 0x80, 0x945, 0x8, 0x1005, 0x44, 0x5, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84342}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m30.193310799s ago: executing program 33 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x22a7, 0x20001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000457000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000380)="0f20d835200000000f22d80fd2ea460f3805cb66baa00066edb992090000b800000000ba000000000f300f001981610c5576000047ded3b9800000c00f3235004000000f30c7442400e6000000c74424028e000000ff2c24", 0x58}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x4, 0xe98, 0x2, 0x1000d, 0x82, 0x44233, 0x9, 0x80, 0x945, 0x8, 0x1005, 0x44, 0x5, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84342}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.852730771s ago: executing program 0 (id=1557): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) unshare(0x22020600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2003b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15.051123192s ago: executing program 0 (id=1555): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) r3 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12000) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) 15.046001112s ago: executing program 5 (id=1558): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.309747418s ago: executing program 2 (id=1562): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000440)=ANY=[], 0x4, 0x291, &(0x7f0000000480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x149442, 0x40) fallocate(r3, 0x0, 0xfff, 0x9) 13.51159405s ago: executing program 5 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000001300), 0xfea7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x6) copy_file_range(r2, &(0x7f00000014c0), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) 12.361339708s ago: executing program 0 (id=1566): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000c00)={'veth0_to_team\x00', &(0x7f0000000c40)=@ethtool_cmd={0x1}}) 11.645546102s ago: executing program 5 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 11.47221107s ago: executing program 2 (id=1569): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0xca00, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./proc_mnt\x00', 0x4008, &(0x7f0000000180)={[{@fat=@nfs_stale_rw}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@discard}, {@rodir}, {@fat=@usefree}]}, 0x81, 0x2f8, &(0x7f0000000e80)="$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") 8.039982033s ago: executing program 0 (id=1572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffff24d6, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x194, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x9888, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x8, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 7.843115323s ago: executing program 2 (id=1573): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61153c00000000006113340000000000bfa000000000000007000000ee0016055e03010000000000250500000000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.22063084s ago: executing program 3 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000840)=""/4100, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 6.219028631s ago: executing program 5 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(r2, &(0x7f0000000500), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) 6.192863313s ago: executing program 2 (id=1576): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) setitimer(0x1, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x15, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 4.982876577s ago: executing program 5 (id=1577): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000080), 0x4000095, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x3b, 0x3000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900099a453001f", 0x7, 0x20004080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.973116168s ago: executing program 3 (id=1578): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000e9ffffffffffffffe000000100000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 4.750991542s ago: executing program 3 (id=1579): sched_setattr(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.601699326s ago: executing program 2 (id=1580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x8003, @local, 0x7}, 0x1c) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.027571276s ago: executing program 3 (id=1581): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000c00)={'veth0_to_team\x00', &(0x7f0000000c40)=@ethtool_cmd={0x1}}) 4.025256636s ago: executing program 0 (id=1590): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x470, &(0x7f0000000280)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r2, &(0x7f0000000780)=""/102368, 0x18fe0) r3 = syz_open_dev$sndpcmc(&(0x7f000001a780), 0xb, 0x6a980) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) 2.146673899s ago: executing program 3 (id=1582): syz_open_dev$dri(0x0, 0xd21, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x8080) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x2) 2.018044152s ago: executing program 5 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000001500)=""/102368, 0x18fe0) r3 = gettid() timer_create(0x0, &(0x7f00000010c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000013c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000001400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000001480)=0x407) syz_open_dev$sndpcmp(&(0x7f00000014c0), 0x0, 0x14b000) 2.015988303s ago: executing program 0 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000600)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.982734386s ago: executing program 2 (id=1585): io_uring_enter(0xffffffffffffffff, 0x52e6, 0x4e38, 0xd8, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x40, 0xffffffff) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 0s ago: executing program 3 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000000040)) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x2d3b, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x8, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. syzkaller login: [ 68.392805][ T5770] cgroup: Unknown subsys name 'net' [ 68.537379][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.928357][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.361519][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.369269][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.377454][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.386012][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.402191][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.421576][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.429171][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.430933][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.442101][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454993][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.472559][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.474501][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.491422][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.498858][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.506277][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.524972][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.533135][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.540375][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.548110][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.555825][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.555914][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.571721][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.579611][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.586955][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 71.598362][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.598368][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.613052][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.647298][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 71.652917][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.661829][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.670368][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.682943][ T5789] (null): rxe_set_mtu: Set mtu to 1024 [ 71.688664][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.695025][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.736059][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 71.756539][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.924187][ T5785] infiniband rxe0: set active [ 71.931838][ T5785] infiniband rxe0: added rxe_eth0 [ 71.944687][ T174] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.997162][ T5785] RDS/IB: rxe0: added [ 72.002491][ T5785] smc: adding ib device rxe0 with port count 1 [ 72.008755][ T5785] smc: ib device rxe0 port 1 has pnetid [ 72.029493][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.039719][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.157317][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 72.286467][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 72.300169][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.466156][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 72.607146][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.646492][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.654668][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.672291][ T5782] bridge_slave_0: entered allmulticast mode [ 72.685542][ T5782] bridge_slave_0: entered promiscuous mode [ 72.702953][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.710087][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.742007][ T5782] bridge_slave_1: entered allmulticast mode [ 72.758586][ T5782] bridge_slave_1: entered promiscuous mode [ 72.790508][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.798776][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.806515][ T5791] bridge_slave_0: entered allmulticast mode [ 72.814304][ T5791] bridge_slave_0: entered promiscuous mode [ 72.829080][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.867364][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.874934][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.882627][ T5791] bridge_slave_1: entered allmulticast mode [ 72.890010][ T5791] bridge_slave_1: entered promiscuous mode [ 72.951012][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.995524][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.035311][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.051433][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.058648][ T5789] bridge_slave_0: entered allmulticast mode [ 73.066002][ T5789] bridge_slave_0: entered promiscuous mode [ 73.075353][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.090961][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.115819][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.123153][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.130334][ T5789] bridge_slave_1: entered allmulticast mode [ 73.142607][ T5789] bridge_slave_1: entered promiscuous mode [ 73.198539][ T5782] team0: Port device team_slave_0 added [ 73.236293][ T5782] team0: Port device team_slave_1 added [ 73.264085][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.276741][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.289370][ T5791] team0: Port device team_slave_0 added [ 73.302464][ T5791] team0: Port device team_slave_1 added [ 73.327466][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.335455][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.363207][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.452045][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.459350][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.485925][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.497399][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.506790][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.533355][ T5784] Bluetooth: hci1: command tx timeout [ 73.538855][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.555634][ T5789] team0: Port device team_slave_0 added [ 73.573301][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.580252][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.606393][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.617008][ T5784] Bluetooth: hci0: command tx timeout [ 73.625744][ T5789] team0: Port device team_slave_1 added [ 73.633359][ T174] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.657788][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.664849][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.690893][ T5784] Bluetooth: hci3: command tx timeout [ 73.694488][ T5787] Bluetooth: hci2: command tx timeout [ 73.696668][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.740832][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.748006][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.774806][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.800432][ T5782] hsr_slave_0: entered promiscuous mode [ 73.807160][ T5782] hsr_slave_1: entered promiscuous mode [ 73.849469][ T5791] hsr_slave_0: entered promiscuous mode [ 73.855810][ T5791] hsr_slave_1: entered promiscuous mode [ 73.862689][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.870444][ T5791] Cannot create hsr debugfs directory [ 73.953282][ T5789] hsr_slave_0: entered promiscuous mode [ 73.959610][ T5789] hsr_slave_1: entered promiscuous mode [ 73.965841][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.973446][ T5789] Cannot create hsr debugfs directory [ 74.118510][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 74.230149][ T5448] infiniband rxe0: set active [ 74.264556][ T174] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.340472][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.347889][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.355501][ T5785] bridge_slave_0: entered allmulticast mode [ 74.362214][ T5785] bridge_slave_0: entered promiscuous mode [ 74.377383][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.384654][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.392106][ T5785] bridge_slave_1: entered allmulticast mode [ 74.398727][ T5785] bridge_slave_1: entered promiscuous mode [ 74.446362][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.467166][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.494175][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.506724][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.532447][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.555780][ T5785] team0: Port device team_slave_0 added [ 74.564854][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.591734][ T5785] team0: Port device team_slave_1 added [ 74.627405][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.635003][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.661017][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.682326][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.689283][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.715590][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.732762][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.742970][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.777752][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.786828][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.807010][ T5785] hsr_slave_0: entered promiscuous mode [ 74.813246][ T5785] hsr_slave_1: entered promiscuous mode [ 74.819236][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.827015][ T5785] Cannot create hsr debugfs directory [ 74.958283][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.986829][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.999861][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.010648][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.081122][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.101464][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.130620][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.141081][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.181928][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.189741][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.197026][ T5785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.204752][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.211921][ T5785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.235146][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.245017][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.313229][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.326132][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.360192][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.367317][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.395773][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.408000][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.415139][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.437006][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.455384][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.462487][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.502332][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.509448][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.540627][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.590951][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.598147][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.606092][ T5787] Bluetooth: hci1: command tx timeout [ 75.629673][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.636819][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.653010][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.674445][ T5787] Bluetooth: hci0: command tx timeout [ 75.728444][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.752138][ T5787] Bluetooth: hci2: command tx timeout [ 75.752182][ T5784] Bluetooth: hci3: command tx timeout [ 75.785112][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.792324][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.855893][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.863073][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.048107][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.153119][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.181000][ T5791] veth0_vlan: entered promiscuous mode [ 76.218485][ T5791] veth1_vlan: entered promiscuous mode [ 76.258112][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.294724][ T5782] veth0_vlan: entered promiscuous mode [ 76.338668][ T5782] veth1_vlan: entered promiscuous mode [ 76.375304][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.386202][ T5791] veth0_macvtap: entered promiscuous mode [ 76.402696][ T5791] veth1_macvtap: entered promiscuous mode [ 76.447558][ T5789] veth0_vlan: entered promiscuous mode [ 76.457028][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.474680][ T5782] veth0_macvtap: entered promiscuous mode [ 76.498270][ T5789] veth1_vlan: entered promiscuous mode [ 76.506924][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.518496][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.528101][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.537036][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.546516][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.565759][ T5782] veth1_macvtap: entered promiscuous mode [ 76.609507][ T5785] veth0_vlan: entered promiscuous mode [ 76.644730][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.656044][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.666926][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.699414][ T5785] veth1_vlan: entered promiscuous mode [ 76.707634][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.720410][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.733432][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.745596][ T5789] veth0_macvtap: entered promiscuous mode [ 76.766135][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.778292][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.788597][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.798431][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.844544][ T5789] veth1_macvtap: entered promiscuous mode [ 76.864026][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.877455][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.924233][ T5785] veth0_macvtap: entered promiscuous mode [ 76.949212][ T5785] veth1_macvtap: entered promiscuous mode [ 76.988873][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.000282][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.011208][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.022101][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.034879][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.046934][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.059488][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.074321][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.078874][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.091779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.094073][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.112379][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.123495][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.136375][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.146749][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.157985][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.168066][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.178598][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.189334][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.200425][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.215206][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.233370][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.245959][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.256963][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.265768][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.279761][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.291853][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302155][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.312664][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.322867][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.333508][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.345086][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.364966][ T5791] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.373789][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.397109][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.406144][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.415073][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.470830][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.491467][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.674177][ T5784] Bluetooth: hci1: command tx timeout [ 77.744909][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.785415][ T5784] Bluetooth: hci0: command tx timeout [ 77.808082][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.871975][ T5784] Bluetooth: hci3: command tx timeout [ 77.877539][ T5784] Bluetooth: hci2: command tx timeout [ 78.526723][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.538968][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.685049][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.716446][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.791156][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.816878][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.366741][ T5902] syz.1.9[5902]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.406284][ T5902] loop1: detected capacity change from 0 to 512 [ 79.445306][ T5902] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 79.461374][ T5904] loop3: detected capacity change from 0 to 512 [ 79.523938][ T5902] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #17: comm syz.1.9: iget: immutable or append flags not allowed on symlinks [ 79.532600][ T5904] EXT4-fs error (device loop3): ext4_quota_enable:7149: inode #4: comm syz.3.10: casefold flag without casefold feature [ 79.562975][ T5902] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.9: couldn't read orphan inode 17 (err -117) [ 79.623656][ T5904] EXT4-fs (loop3): Remounting filesystem read-only [ 79.658149][ T5902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.680198][ T5904] EXT4-fs warning (device loop3): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.746758][ T5904] EXT4-fs (loop3): mount failed [ 79.752654][ T5784] Bluetooth: hci1: command tx timeout [ 79.804443][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.831372][ T5784] Bluetooth: hci0: command tx timeout [ 79.962816][ T5784] Bluetooth: hci2: command tx timeout [ 79.971137][ T5787] Bluetooth: hci3: command tx timeout [ 80.535689][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.741257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 82.854736][ T5938] loop2: detected capacity change from 0 to 128 [ 82.956880][ T5938] FAT-fs (loop2): Unrecognized mount option "d" or missing value [ 84.038158][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.170836][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.253145][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.272164][ T5952] loop2: detected capacity change from 0 to 164 [ 84.310534][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.398536][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.502606][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.673961][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.802893][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.909225][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.051415][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.179432][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.262161][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.894557][ T5961] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5962] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5961] [ 86.451645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 86.794544][ T9] cfg80211: failed to load regulatory.db [ 86.796249][ T5940] Zero length message leads to an empty skb [ 87.792860][ T5971] loop0: detected capacity change from 0 to 1024 [ 87.824216][ T5971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.876470][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.153010][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.592635][ T5994] ip_tables: iptables: counters copy to user failed while replacing table [ 88.657798][ T5994] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 89.571421][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.823248][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 90.091450][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 90.697361][ T6031] syz.3.40 (6031) used greatest stack depth: 20272 bytes left [ 90.883255][ T6044] ip_tables: iptables: counters copy to user failed while replacing table [ 91.075385][ T6049] loop3: detected capacity change from 0 to 32768 [ 91.115841][ T6049] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.254875][ T6049] XFS (loop3): Ending clean mount [ 91.293398][ T6049] XFS (loop3): Quotacheck needed: Please wait. [ 91.741620][ T6049] XFS (loop3): Quotacheck: Done. [ 93.971745][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.482657][ T6090] loop0: detected capacity change from 0 to 512 [ 94.503319][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 94.514943][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 94.542069][ T6090] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 94.568553][ T6090] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 94.597348][ T6090] EXT4-fs (loop0): failed to initialize system zone (-117) [ 94.624155][ T6090] EXT4-fs (loop0): mount failed [ 94.676503][ T6090] fuse: Unknown parameter '0xffffffffffffffff' [ 94.745120][ T6096] ======================================================= [ 94.745120][ T6096] WARNING: The mand mount option has been deprecated and [ 94.745120][ T6096] and is ignored by this kernel. Remove the mand [ 94.745120][ T6096] option from the mount to silence this warning. [ 94.745120][ T6096] ======================================================= [ 94.890247][ T6101] syz.1.49: attempt to access beyond end of device [ 94.890247][ T6101] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 94.904636][ T6101] FAT-fs (loop3): unable to read boot sector [ 95.240088][ T6111] loop3: detected capacity change from 0 to 2048 [ 95.412188][ T6111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.527874][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.879494][ T6142] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 97.115107][ T6145] usb3503 0-0008: unknown mode is requested [ 97.146710][ T6145] usb3503 0-0008: usb3503_probe: probed in standby mode [ 97.188710][ T6145] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 98.528647][ T5853] IPVS: starting estimator thread 0... [ 98.631423][ T6179] IPVS: using max 20 ests per chain, 48000 per kthread [ 99.768989][ T6178] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.851295][ T6192] hsr0: entered promiscuous mode [ 99.879660][ T6192] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.81' sets config #32767 [ 99.908254][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 99.947746][ T6192] hsr_slave_0: left promiscuous mode [ 99.979111][ T6192] hsr_slave_1: left promiscuous mode [ 101.574398][ T27] audit: type=1326 audit(1793820080.804:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.611828][ T27] audit: type=1326 audit(1793820080.804:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.721409][ T27] audit: type=1326 audit(1793820080.864:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.786633][ T27] audit: type=1326 audit(1793820080.864:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.824687][ T27] audit: type=1326 audit(1793820080.864:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.853178][ T27] audit: type=1326 audit(1793820080.864:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.895004][ T27] audit: type=1326 audit(1793820080.864:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 101.926362][ T12] wlan1: Trigger new scan to find an IBSS to join [ 101.991408][ T27] audit: type=1326 audit(1793820080.864:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 102.015201][ T27] audit: type=1326 audit(1793820080.864:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 102.039486][ T27] audit: type=1326 audit(1793820080.884:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 102.974450][ T6231] bridge0: port 3(vxlan0) entered blocking state [ 102.984299][ T6231] bridge0: port 3(vxlan0) entered disabled state [ 102.990887][ T6231] vxlan0: entered allmulticast mode [ 103.012776][ T6231] vxlan0: entered promiscuous mode [ 103.447517][ T6249] binder: 6248:6249 ioctl c0306201 200000000140 returned -14 [ 104.445581][ T6256] loop1: detected capacity change from 0 to 256 [ 104.591605][ T6256] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 104.934091][ T6256] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 105.811368][ T6256] Illegal XDP return value 1535859200 on prog (id 21) dev syz_tun, expect packet loss! [ 105.822704][ T6269] syzkaller0: entered promiscuous mode [ 105.866975][ T6269] syzkaller0: entered allmulticast mode [ 105.883866][ C1] sched: RT throttling activated [ 105.942414][ T1275] wlan1: Trigger new scan to find an IBSS to join [ 106.100637][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 106.161907][ T6277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.330859][ T6277] macvlan2: entered promiscuous mode [ 106.349580][ T6277] macvlan2: entered allmulticast mode [ 106.405646][ T6277] bond1: (slave ipip0): refused to change device type [ 107.062443][ T12] wlan1: Creating new IBSS network, BSSID 06:66:89:a7:b4:60 [ 107.756815][ T6293] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 111.164781][ T6332] loop2: detected capacity change from 0 to 4096 [ 111.198822][ T6332] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.285706][ T6332] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.403697][ T6332] EXT4-fs: Ignoring removed nobh option [ 111.628615][ T6332] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0002] [ 111.761753][ T6332] System zones: 0-5 [ 111.860367][ T6332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.077321][ T6343] loop3: detected capacity change from 0 to 8192 [ 112.116769][ T6332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.737565][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 112.737600][ T27] audit: type=1804 audit(1793820091.822:24): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.123" name="/newroot/27/bus/bus" dev="loop3" ino=1048624 res=1 errno=0 [ 114.567039][ C0] net_ratelimit: 40 callbacks suppressed [ 115.088270][ T6359] tipc: Failed to remove unknown binding: 66,0,0/0:2934186527/2934186528 [ 115.104823][ T6363] tipc: Failed to remove unknown binding: 66,0,0/0:3424006433/3424006435 [ 115.117977][ T6359] tipc: Failed to remove unknown binding: 66,0,0/0:2934186527/2934186528 [ 115.146841][ T6365] loop3: detected capacity change from 0 to 8 [ 116.200829][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.212546][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.221983][ T27] audit: type=1800 audit(1793820095.088:25): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.129" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 116.358596][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.373671][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.385137][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.396722][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.417434][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.443129][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.450126][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 116.456980][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.143451][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.150658][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.157239][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.163807][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.170391][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.177072][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.183617][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.190294][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.219813][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.233571][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.245022][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.383597][ T6377] loop0: detected capacity change from 0 to 736 [ 117.402692][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.462707][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.565112][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.706822][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.835097][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.887705][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.894306][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.903899][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.913243][ T6365] SQUASHFS error: Failed to read block 0x4de: -5 [ 118.146057][ T6386] MTRR 1 not used [ 118.726769][ T6388] loop0: detected capacity change from 0 to 8 [ 118.785121][ T6388] squashfs image failed sanity check [ 118.865616][ T6393] loop1: detected capacity change from 0 to 512 [ 118.877496][ T6393] ext2: Unknown parameter 'measure' [ 119.372842][ T42] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 119.997461][ C1] net_ratelimit: 45 callbacks suppressed [ 120.233338][ T6404] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 120.266452][ T42] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 120.284197][ T6404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.140'. [ 120.294215][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.300979][ T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 120.316139][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.363372][ T42] usb 3-1: config 0 descriptor?? [ 120.387643][ T6390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.707545][ T6410] netlink: 'syz.0.142': attribute type 15 has an invalid length. [ 120.864103][ T6412] loop1: detected capacity change from 0 to 512 [ 120.905585][ T42] apple 0003:05AC:0242.0001: unknown main item tag 0x0 [ 120.932106][ T6412] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.953351][ T42] apple 0003:05AC:0242.0001: unbalanced collection at end of report description [ 120.974049][ T42] apple 0003:05AC:0242.0001: parse failed [ 120.981586][ T42] apple: probe of 0003:05AC:0242.0001 failed with error -22 [ 121.008076][ T6412] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 121.016176][ T6412] System zones: 0-2, 18-18, 34-35 [ 121.108816][ T6412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.146923][ T6412] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.178808][ T5853] usb 3-1: USB disconnect, device number 2 [ 121.263799][ T6412] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.143: iget: bad i_size value: 2533274857506816 [ 121.290543][ T27] audit: type=1800 audit(1793820099.788:26): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.143" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 121.357527][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.410660][ T6427] loop3: detected capacity change from 0 to 764 [ 121.437208][ T6427] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 122.494129][ T6448] tipc: Started in network mode [ 122.508218][ T6448] tipc: Node identity 6aa4f35646a4, cluster identity 4711 [ 122.520515][ T6448] tipc: Enabled bearer , priority 0 [ 122.541985][ T6447] tipc: Resetting bearer [ 122.605755][ T6447] tipc: Disabling bearer [ 124.205346][ T6466] loop0: detected capacity change from 0 to 64 [ 124.260284][ T6469] loop1: detected capacity change from 0 to 512 [ 124.284431][ T6469] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 124.305157][ T6469] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.159: invalid indirect mapped block 256 (level 1) [ 125.066465][ T6469] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.159: invalid indirect mapped block 2683928664 (level 1) [ 125.202397][ T6469] EXT4-fs (loop1): 1 truncate cleaned up [ 125.226162][ T6469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.050314][ C0] net_ratelimit: 49 callbacks suppressed [ 126.147063][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.372470][ T6488] loop1: detected capacity change from 0 to 512 [ 126.420729][ T6488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.490159][ T6488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.533961][ T6488] EXT4-fs (loop1): 1 truncate cleaned up [ 126.702040][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.602392][ T5782] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 127.654852][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 127.706459][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.832568][ T6504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.964633][ T6504] process 'syz.3.169' launched './file2' with NULL argv: empty string added [ 128.037244][ T6511] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 128.315087][ T6516] veth3: entered allmulticast mode [ 128.324740][ T6516] bond1: (slave veth3): Enslaving as an active interface with a down link [ 128.858651][ T6511] bond1: (slave veth0_to_bond): making interface the new active one [ 128.972182][ T6511] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 129.258291][ T1275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.517468][ T1275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.601268][ T6528] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 129.844033][ T1275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.477925][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.493251][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.504843][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.524362][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.532190][ T1275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.563501][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.584349][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.011520][ T6535] rxe_eth0 speed is unknown, defaulting to 1000 [ 131.846546][ C0] hrtimer: interrupt took 31432 ns [ 131.857664][ C1] net_ratelimit: 34 callbacks suppressed [ 132.811145][ T5787] Bluetooth: hci0: command tx timeout [ 134.424599][ T6581] loop3: detected capacity change from 0 to 256 [ 134.434555][ T6581] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.460857][ T6581] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 134.504701][ T6581] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 134.532010][ T6581] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 1282) [ 134.542191][ T6581] exFAT-fs (loop3): failed to load alloc-bitmap [ 134.554418][ T6581] exFAT-fs (loop3): failed to recognize exfat type [ 134.648655][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.659229][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.769104][ T6584] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 134.807641][ T6584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.898816][ T6592] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 134.908800][ T6592] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.065323][ T5787] Bluetooth: hci0: command tx timeout [ 135.729629][ T6589] bond2: (slave veth5): Enslaving as an active interface with a down link [ 135.857678][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.868044][ T6584] bond2: (slave batadv1): making interface the new active one [ 135.877900][ T6584] batadv1: entered promiscuous mode [ 135.883994][ T6584] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 136.001807][ T6594] veth7: entered allmulticast mode [ 136.039871][ T6594] bond2: (slave veth7): Enslaving as an active interface with a down link [ 136.066498][ T6605] binder: 6604:6605 ioctl c0306201 200000000140 returned -14 [ 137.037706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 137.327255][ T5787] Bluetooth: hci0: command tx timeout [ 137.384970][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 137.405959][ C1] net_ratelimit: 39 callbacks suppressed [ 138.051975][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.090415][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.144619][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.186737][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.206225][ T1275] bridge_slave_1: left allmulticast mode [ 138.220636][ T1275] bridge_slave_1: left promiscuous mode [ 138.229360][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.415352][ T1275] bridge_slave_0: left allmulticast mode [ 138.429417][ T1275] bridge_slave_0: left promiscuous mode [ 138.435902][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.521364][ T1275] veth1_macvtap: left promiscuous mode [ 138.692452][ T1275] veth0_macvtap: left promiscuous mode [ 138.732631][ T1275] veth1_vlan: left promiscuous mode [ 138.992677][ T1275] veth0_vlan: left promiscuous mode [ 139.569522][ T3013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 139.582166][ T5787] Bluetooth: hci0: command tx timeout [ 140.448768][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 140.492810][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 140.544545][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.597190][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.044360][ T1275] bond0 (unregistering): Released all slaves [ 141.116238][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 141.178909][ T6635] bridge1: port 1(veth0_to_bond) entered blocking state [ 141.196821][ T6635] bridge1: port 1(veth0_to_bond) entered disabled state [ 141.207738][ T6635] veth0_to_bond: entered allmulticast mode [ 141.216725][ T6635] veth0_to_bond: entered promiscuous mode [ 141.277448][ T6637] bridge1: port 2(veth3) entered blocking state [ 141.285243][ T6637] bridge1: port 2(veth3) entered disabled state [ 141.294209][ T6637] veth3: entered allmulticast mode [ 141.300947][ T6637] veth3: entered promiscuous mode [ 141.384999][ T6650] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 141.579873][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.602177][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.624994][ T6535] bridge_slave_0: entered allmulticast mode [ 141.639235][ T6535] bridge_slave_0: entered promiscuous mode [ 141.648416][ T6661] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 141.686454][ T6661] netlink: 17 bytes leftover after parsing attributes in process `syz.3.201'. [ 141.751193][ T6666] loop3: detected capacity change from 0 to 512 [ 141.781872][ T6667] loop0: detected capacity change from 0 to 512 [ 141.836413][ T6667] EXT4-fs error (device loop0): ext4_quota_enable:7149: inode #4: comm syz.0.204: casefold flag without casefold feature [ 141.861317][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.868507][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.893900][ T6667] EXT4-fs (loop0): Remounting filesystem read-only [ 141.900570][ T6667] EXT4-fs warning (device loop0): ext4_enable_quotas:7193: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.915563][ T6535] bridge_slave_1: entered allmulticast mode [ 141.923012][ T6535] bridge_slave_1: entered promiscuous mode [ 141.924918][ T6667] EXT4-fs (loop0): mount failed [ 142.005957][ T6666] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.073160][ T6666] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 142.202799][ T6666] Quota error (device loop3): write_blk: dquota write failed [ 142.211991][ T6666] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 142.238722][ T6666] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.201: Failed to acquire dquot type 0 [ 142.294544][ T6666] EXT4-fs (loop3): 1 truncate cleaned up [ 142.309299][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.707875][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.784479][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.868230][ C0] net_ratelimit: 31 callbacks suppressed [ 142.936117][ T6535] team0: Port device team_slave_0 added [ 142.957920][ T6535] team0: Port device team_slave_1 added [ 143.172889][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.179841][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.179866][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.323986][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.335142][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.438066][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.464998][ T6664] Quota error (device loop3): write_blk: dquota write failed [ 143.472990][ T6664] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 143.505118][ T6664] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.201: Failed to acquire dquot type 0 [ 143.800340][ T6535] hsr_slave_0: entered promiscuous mode [ 143.838357][ T6535] hsr_slave_1: entered promiscuous mode [ 143.993899][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.228236][ T6692] binder: 6691:6692 ioctl c0306201 200000000140 returned -14 [ 145.884055][ T6535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.396016][ T6535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.621335][ T6720] futex_wake_op: syz.3.210 tries to shift op by 144; fix this program [ 146.767511][ T6535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.820686][ T6535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.305161][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.427874][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.505196][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.512392][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.964038][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.972036][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.237035][ T6728] loop3: detected capacity change from 0 to 131072 [ 148.249062][ T6728] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 148.257920][ T6728] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.308654][ C1] net_ratelimit: 25 callbacks suppressed [ 148.334285][ T6728] F2FS-fs (loop3): invalid crc value [ 148.365495][ T6728] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.454256][ T6728] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 148.461522][ T6728] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 149.327638][ T27] audit: type=1804 audit(1793820125.659:27): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.213" name="/newroot/51/file1/bus" dev="loop3" ino=10 res=1 errno=0 [ 149.624396][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.281809][ T6535] veth0_vlan: entered promiscuous mode [ 151.319941][ T6535] veth1_vlan: entered promiscuous mode [ 151.396145][ T6535] veth0_macvtap: entered promiscuous mode [ 151.428349][ T6535] veth1_macvtap: entered promiscuous mode [ 151.459163][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.484205][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.494049][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.532802][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.560007][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.576274][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.627367][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.659894][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.716444][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.759613][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.799098][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.820031][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.830475][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.869162][ T6781] loop0: detected capacity change from 0 to 4096 [ 151.886768][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.932016][ T6781] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.932086][ T6535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.938493][ T6781] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.990118][ T6781] EXT4-fs: Ignoring removed nobh option [ 152.011377][ T6781] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0002] [ 152.019819][ T6781] System zones: 0-5 [ 152.026683][ T6535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.035389][ T6535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.055226][ T6535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.102622][ T6781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.200824][ T80] batadv1: left promiscuous mode [ 152.285846][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.307426][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.434989][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.469076][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.509486][ T23] IPVS: starting estimator thread 0... [ 152.522610][ T6781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.633885][ T6797] IPVS: using max 23 ests per chain, 55200 per kthread [ 152.843991][ T6804] loop4: detected capacity change from 0 to 136 [ 153.888494][ T6535] rock: directory entry would overflow storage [ 153.924977][ T6814] loop3: detected capacity change from 0 to 1024 [ 153.932622][ T6814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.933607][ T6535] rock: sig=0x4f50, size=4, remaining=3 [ 153.965924][ C0] net_ratelimit: 60 callbacks suppressed [ 153.988913][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.014499][ T6535] rock: directory entry would overflow storage [ 154.055348][ T6535] rock: sig=0x4f50, size=4, remaining=3 [ 154.104772][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.307776][ T6814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.353568][ T6535] rock: directory entry would overflow storage [ 154.475826][ T6535] rock: sig=0x4f50, size=4, remaining=3 [ 154.585366][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.673732][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.720485][ T6535] rock: directory entry would overflow storage [ 154.726808][ T6535] rock: sig=0x4f50, size=4, remaining=3 [ 154.737748][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.763390][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.779183][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.794955][ T6535] rock: directory entry would overflow storage [ 154.811369][ T6535] rock: sig=0x4f50, size=4, remaining=3 [ 154.822293][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.893674][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.907050][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.929395][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 154.959848][ T6828] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 154.991163][ T6828] netlink: 17 bytes leftover after parsing attributes in process `syz.2.226'. [ 157.088539][ T6849] fuse: Bad value for 'fd' [ 157.145671][ T1275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.524165][ T1275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.608238][ T1275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.761625][ T1275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.804995][ T6859] loop0: detected capacity change from 0 to 512 [ 157.860895][ T6859] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 157.885949][ T6859] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.233: invalid indirect mapped block 256 (level 1) [ 157.939588][ T6859] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.233: invalid indirect mapped block 2683928664 (level 1) [ 157.960641][ T6859] EXT4-fs (loop0): 1 truncate cleaned up [ 157.982477][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.053796][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.514856][ C0] net_ratelimit: 37 callbacks suppressed [ 160.120726][ T6888] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 160.293977][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.303864][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.312127][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.321806][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.330651][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.339229][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.654016][ T6885] veth3: entered allmulticast mode [ 160.694246][ T6885] bond2: (slave veth3): Enslaving as an active interface with a down link [ 160.904440][ T6888] bond2: (slave veth0_to_bond): making interface the new active one [ 160.995667][ T6888] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 161.306295][ T6895] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.550534][ T5784] Bluetooth: hci0: command tx timeout [ 164.961410][ T5784] Bluetooth: hci0: command tx timeout [ 165.055321][ T1275] hsr_slave_0: left promiscuous mode [ 165.150573][ C1] net_ratelimit: 36 callbacks suppressed [ 165.181353][ T1275] hsr_slave_1: left promiscuous mode [ 165.205578][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.233031][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.261133][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.285121][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.308227][ T1275] bridge_slave_1: left allmulticast mode [ 165.321227][ T1275] bridge_slave_1: left promiscuous mode [ 165.335882][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.417912][ T1275] bridge_slave_0: left allmulticast mode [ 165.448016][ T1275] bridge_slave_0: left promiscuous mode [ 165.453782][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.694375][ T1275] veth1_macvtap: left promiscuous mode [ 165.700384][ T1275] veth0_macvtap: left promiscuous mode [ 165.710633][ T1275] veth1_vlan: left promiscuous mode [ 165.725040][ T1275] veth0_vlan: left promiscuous mode [ 165.741979][ T6955] loop0: detected capacity change from 0 to 764 [ 165.803509][ T6955] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 167.144653][ T5784] Bluetooth: hci0: command tx timeout [ 169.253441][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 169.471919][ T5784] Bluetooth: hci0: command tx timeout [ 170.243394][ T6985] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 170.267229][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 170.700088][ T1135] net_ratelimit: 33 callbacks suppressed [ 171.215370][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.363854][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.217804][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 173.516270][ T1275] bond0 (unregistering): Released all slaves [ 173.629885][ T27] audit: type=1326 audit(1793820148.081:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 173.670721][ T27] audit: type=1326 audit(1793820148.081:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 173.715947][ T27] audit: type=1326 audit(1793820148.108:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 173.754795][ T27] audit: type=1326 audit(1793820148.108:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 173.808266][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 173.816223][ T27] audit: type=1326 audit(1793820148.108:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 173.901051][ T27] audit: type=1326 audit(1793820148.127:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 173.977523][ T27] audit: type=1326 audit(1793820148.127:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 174.115886][ T27] audit: type=1326 audit(1793820148.127:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 174.250866][ T27] audit: type=1326 audit(1793820148.127:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 174.334259][ T27] audit: type=1326 audit(1793820148.127:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f402839fb19 code=0x7ffc0000 [ 174.766540][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.797286][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.804538][ T6895] bridge_slave_0: entered allmulticast mode [ 174.855511][ T6895] bridge_slave_0: entered promiscuous mode [ 174.907129][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.916156][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.923414][ T6895] bridge_slave_1: entered allmulticast mode [ 174.994232][ T6895] bridge_slave_1: entered promiscuous mode [ 175.215689][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.268370][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.452112][ T6895] team0: Port device team_slave_0 added [ 175.496236][ T6895] team0: Port device team_slave_1 added [ 175.656970][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.689702][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.782314][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.806269][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.813232][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.857799][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.077394][ T6895] hsr_slave_0: entered promiscuous mode [ 176.104074][ T6895] hsr_slave_1: entered promiscuous mode [ 176.872078][ T6895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.910248][ T6895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.928994][ T6895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.944120][ T11] net_ratelimit: 31 callbacks suppressed [ 176.987315][ T6895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.191757][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.232183][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.250694][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.257863][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.272803][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.279986][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.639940][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.965993][ T6895] veth0_vlan: entered promiscuous mode [ 177.980665][ T6895] veth1_vlan: entered promiscuous mode [ 178.042209][ T6895] veth0_macvtap: entered promiscuous mode [ 178.056426][ T6895] veth1_macvtap: entered promiscuous mode [ 178.089660][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.110499][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.120677][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.137009][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.150266][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.166732][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.186953][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.207667][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.228102][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.239245][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.259500][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.270539][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.286132][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.302401][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.320819][ T6895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.334911][ T6895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.346113][ T6895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.360920][ T6895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.497614][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.519671][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.574241][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.583144][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.244846][ T7144] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 181.808365][ T7164] mmap: syz.3.273 (7164) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.077563][ T7164] netlink: 68 bytes leftover after parsing attributes in process `syz.3.273'. [ 182.133525][ T7164] netlink: 432 bytes leftover after parsing attributes in process `syz.3.273'. [ 182.942375][ C1] net_ratelimit: 74 callbacks suppressed [ 183.565470][ T7186] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 183.584972][ T7186] netlink: 17 bytes leftover after parsing attributes in process `syz.0.283'. [ 183.776029][ T7186] loop0: detected capacity change from 0 to 512 [ 183.819021][ T7186] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.901042][ T7186] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 183.984116][ T7186] __quota_error: 14 callbacks suppressed [ 183.984129][ T7186] Quota error (device loop0): write_blk: dquota write failed [ 184.020150][ T7186] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 184.040704][ T7186] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.283: Failed to acquire dquot type 0 [ 184.069435][ T7186] EXT4-fs (loop0): 1 truncate cleaned up [ 184.089954][ T7186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.198765][ T7205] loop5: detected capacity change from 0 to 128 [ 184.221489][ T7173] loop3: detected capacity change from 0 to 32768 [ 184.255554][ T7205] FAT-fs (loop5): Unrecognized mount option "d" or missing value [ 184.377819][ T7173] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 185.072666][ T7220] Quota error (device loop0): write_blk: dquota write failed [ 185.147494][ T7220] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 185.160790][ T7220] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.283: Failed to acquire dquot type 0 [ 185.237446][ T7173] XFS (loop3): Ending clean mount [ 185.343325][ T5789] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 186.373023][ T7233] loop3: detected capacity change from 0 to 512 [ 186.454927][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.522237][ T7233] syz.3.290: attempt to access beyond end of device [ 186.522237][ T7233] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 186.549475][ T27] audit: type=1326 audit(1793820160.002:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.5.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff5279fb19 code=0x0 [ 186.599928][ T7233] syz.3.290: attempt to access beyond end of device [ 186.599928][ T7233] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 186.698391][ T27] audit: type=1800 audit(1793820160.131:53): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.290" name="file2" dev="loop3" ino=1048648 res=0 errno=0 [ 186.730914][ T7249] netlink: 27 bytes leftover after parsing attributes in process `syz.0.292'. [ 188.086186][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.298'. [ 188.133189][ T7274] tipc: Started in network mode [ 188.140065][ T7274] tipc: Node identity ac14140f, cluster identity 4711 [ 188.144067][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.298'. [ 188.172546][ T7274] tipc: New replicast peer: 255.255.255.255 [ 188.212654][ T7274] tipc: Enabled bearer , priority 10 [ 188.290780][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 188.386639][ C0] net_ratelimit: 43 callbacks suppressed [ 189.417694][ T5879] tipc: Node number set to 2886997007 [ 190.905217][ T7302] loop0: detected capacity change from 0 to 32768 [ 191.056486][ T7302] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 191.241006][ T7302] XFS (loop0): Ending clean mount [ 191.280635][ T7302] XFS (loop0): Quotacheck needed: Please wait. [ 191.473806][ T7302] XFS (loop0): Quotacheck: Done. [ 191.640393][ T7302] netlink: 'syz.0.305': attribute type 11 has an invalid length. [ 192.304233][ T5785] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 193.532076][ T7381] loop3: detected capacity change from 0 to 1024 [ 193.561841][ T7381] journal_path: Lookup failure for './file1' [ 193.719224][ T7381] EXT4-fs: error: could not find journal device path [ 194.119576][ C0] net_ratelimit: 43 callbacks suppressed [ 194.784075][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 194.983946][ T7405] bond1: entered promiscuous mode [ 194.997730][ T7405] bond1: entered allmulticast mode [ 195.018682][ T7407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.321'. [ 195.842799][ T7430] bridge0: port 4(syz_tun) entered blocking state [ 195.856951][ T7430] bridge0: port 4(syz_tun) entered disabled state [ 195.878513][ T7430] syz_tun: entered allmulticast mode [ 195.894300][ T7430] syz_tun: entered promiscuous mode [ 195.907894][ T7430] bridge0: port 4(syz_tun) entered blocking state [ 195.914947][ T7430] bridge0: port 4(syz_tun) entered forwarding state [ 198.341156][ T7480] loop0: detected capacity change from 0 to 2048 [ 198.397141][ T7480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.169437][ T7501] netlink: 'syz.5.334': attribute type 4 has an invalid length. [ 199.188767][ T7501] netlink: 17 bytes leftover after parsing attributes in process `syz.5.334'. [ 199.212431][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.267472][ T7504] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 199.316312][ T7508] loop5: detected capacity change from 0 to 512 [ 199.415024][ T7508] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.463104][ T7508] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 199.524209][ T7508] Quota error (device loop5): write_blk: dquota write failed [ 199.539277][ T7508] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 199.549219][ T7508] EXT4-fs error (device loop5): ext4_acquire_dquot:6958: comm syz.5.334: Failed to acquire dquot type 0 [ 199.564566][ T7508] EXT4-fs (loop5): 1 truncate cleaned up [ 199.571601][ T7508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.990243][ T7501] Quota error (device loop5): write_blk: dquota write failed [ 200.004724][ C1] net_ratelimit: 49 callbacks suppressed [ 200.012698][ T7501] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 200.029589][ T7501] EXT4-fs error (device loop5): ext4_acquire_dquot:6958: comm syz.5.334: Failed to acquire dquot type 0 [ 200.155188][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.361579][ T7540] binder: 7536:7540 unknown command 1074553619 [ 200.374008][ T7539] loop0: detected capacity change from 0 to 16 [ 200.379103][ T7540] binder: 7536:7540 ioctl c0306201 2000000001c0 returned -22 [ 200.391083][ T7540] binder: 7536:7540 ioctl 400c620e 200000000340 returned -22 [ 200.409036][ T7539] erofs: Unknown parameter '0x0000000000000003' [ 200.431662][ T7483] udevd[7483]: incorrect erofs checksum on /dev/loop0 [ 200.472435][ T7542] binder: 7536:7542 ioctl 400c620e 200000000840 returned -22 [ 200.480224][ T7483] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.492144][ T7542] binder: 7536:7542 unknown command 1074291477 [ 200.523515][ T7542] binder: 7536:7542 ioctl c0306201 200000000880 returned -22 [ 201.005732][ T7555] netlink: zone id is out of range [ 201.027708][ T7555] netlink: zone id is out of range [ 201.032853][ T7555] netlink: zone id is out of range [ 201.319756][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.330674][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.287868][ T7567] tipc: Enabling of bearer rejected, failed to enable media [ 203.559536][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 203.565680][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 203.577327][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 204.409707][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.355'. [ 204.985010][ T7586] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.618548][ C0] net_ratelimit: 85 callbacks suppressed [ 206.191085][ T7630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.359'. [ 206.219237][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.226660][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.485118][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.873182][ T7691] loop5: detected capacity change from 0 to 1764 [ 211.059824][ T7483] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.102602][ C1] net_ratelimit: 40 callbacks suppressed [ 211.331781][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.339988][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.515124][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.523068][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.531558][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.538762][ T7691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.620025][ T7691] team0: Port device bridge0 added [ 214.143314][ T7764] loop3: detected capacity change from 0 to 128 [ 214.176697][ T7764] FAT-fs (loop3): Unrecognized mount option "d" or missing value [ 216.564793][ C1] net_ratelimit: 44 callbacks suppressed [ 219.180867][ T7837] loop0: detected capacity change from 0 to 128 [ 219.220596][ T7837] FAT-fs (loop0): Unrecognized mount option "d" or missing value [ 219.369512][ T7842] syzkaller0: entered promiscuous mode [ 219.408733][ T7842] syzkaller0: entered allmulticast mode [ 222.061037][ T3013] net_ratelimit: 66 callbacks suppressed [ 222.174804][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.410'. [ 222.188430][ T7889] xt_ipcomp: unknown flags 1D [ 222.486814][ T7885] team0: Port device team_slave_0 removed [ 223.795067][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 223.842917][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 226.902531][ T7966] loop5: detected capacity change from 0 to 512 [ 227.575975][ C1] net_ratelimit: 34 callbacks suppressed [ 227.814601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.700346][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 229.766385][ T8003] syz_tun: entered allmulticast mode [ 229.838615][ T8001] bond_slave_0: entered promiscuous mode [ 229.844759][ T8001] bond_slave_1: entered promiscuous mode [ 229.869159][ T8001] vlan2: entered promiscuous mode [ 229.881359][ T8001] bond0: entered promiscuous mode [ 230.019970][ T8006] syz_tun: left allmulticast mode [ 230.228549][ T8013] loop5: detected capacity change from 0 to 512 [ 230.297950][ T8013] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 230.322420][ T8013] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.432: invalid indirect mapped block 256 (level 1) [ 230.398037][ T8016] lo speed is unknown, defaulting to 1000 [ 230.404379][ T8013] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.432: invalid indirect mapped block 2683928664 (level 1) [ 230.404428][ T8016] lo speed is unknown, defaulting to 1000 [ 230.427784][ T8016] lo speed is unknown, defaulting to 1000 [ 230.452532][ T8016] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.463777][ T8013] EXT4-fs (loop5): 1 truncate cleaned up [ 230.473719][ T8013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.501193][ T8016] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.712984][ T8016] lo speed is unknown, defaulting to 1000 [ 230.757945][ T8016] lo speed is unknown, defaulting to 1000 [ 230.808438][ T8016] lo speed is unknown, defaulting to 1000 [ 230.824292][ T8016] lo speed is unknown, defaulting to 1000 [ 231.403641][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.759303][ T27] audit: type=1326 audit(1793820201.717:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 231.840441][ T8041] loop0: detected capacity change from 0 to 8 [ 231.840465][ T27] audit: type=1326 audit(1793820201.717:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 231.914235][ T8041] SQUASHFS error: lzo decompression failed, data probably corrupt [ 231.941049][ T27] audit: type=1326 audit(1793820201.717:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 231.982464][ T8041] SQUASHFS error: Failed to read block 0x144: -5 [ 231.993684][ T8041] SQUASHFS error: Unable to read metadata cache entry [142] [ 232.041262][ T8041] SQUASHFS error: Unable to read inode 0x11f [ 232.050753][ T27] audit: type=1326 audit(1793820201.717:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 232.092813][ T27] audit: type=1326 audit(1793820201.717:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 232.175528][ T27] audit: type=1326 audit(1793820201.717:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 232.210786][ T27] audit: type=1326 audit(1793820201.717:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 232.255588][ T27] audit: type=1326 audit(1793820201.717:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 232.289876][ T27] audit: type=1326 audit(1793820201.717:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 232.325287][ T27] audit: type=1326 audit(1793820201.717:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 233.125556][ C1] net_ratelimit: 46 callbacks suppressed [ 234.922908][ T8135] syz_tun: entered allmulticast mode [ 235.124488][ T8142] pimreg: entered allmulticast mode [ 235.292986][ T8142] pimreg: left allmulticast mode [ 238.684643][ C0] net_ratelimit: 53 callbacks suppressed [ 239.373827][ T8216] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 239.898277][ T8231] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 239.928393][ T8231] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 239.937016][ T8233] loop0: detected capacity change from 0 to 164 [ 240.154083][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 241.136201][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 242.883281][ T8244] syz.5.474 (8244) used greatest stack depth: 20072 bytes left [ 244.320466][ C1] net_ratelimit: 32 callbacks suppressed [ 244.374012][ T8302] kvm: pic: single mode not supported [ 244.374194][ T8302] kvm: pic: level sensitive irq not supported [ 244.394127][ T8302] kvm: pic: level sensitive irq not supported [ 245.510132][ T8314] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.490'. [ 245.832747][ T8321] syz_tun: entered allmulticast mode [ 246.208124][ T8326] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 246.234322][ T8326] lo: Caught tx_queue_len zero misconfig [ 247.603054][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 247.891250][ T8346] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.499'. [ 247.908364][ T8346] netlink: 'syz.2.499': attribute type 2 has an invalid length. [ 247.932259][ T8346] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 247.949392][ T8346] netlink: 156 bytes leftover after parsing attributes in process `syz.2.499'. [ 249.005032][ T8374] netlink: 'syz.5.514': attribute type 1 has an invalid length. [ 249.693010][ T8376] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.714604][ T8376] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.723560][ T8376] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.738025][ T8376] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.756647][ T8376] bond1: (slave geneve2): making interface the new active one [ 249.771843][ C1] net_ratelimit: 42 callbacks suppressed [ 249.819161][ T8376] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 249.864087][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.514'. [ 249.925079][ T8383] CIFS: Attempting to mount //127.0.0.1/share [ 249.954648][ T8378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.062456][ T8378] syz.5.514 (8378) used greatest stack depth: 19752 bytes left [ 250.181479][ T8385] CIFS: VFS: Invalid response size 0 for command 0 [ 250.200854][ T8385] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 250.215412][ T8383] CIFS: VFS: cifs_mount failed w/return code = -5 [ 252.930603][ T52] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 255.320702][ C0] net_ratelimit: 47 callbacks suppressed [ 255.975212][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 256.987533][ T8476] loop5: detected capacity change from 0 to 16 [ 257.317882][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 257.326824][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 257.336792][ T5787] Bluetooth: hci0: hardware error 0x00 [ 257.947124][ T8476] erofs: (device loop5): mounted with root inode @ nid 36. [ 259.553112][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 259.611695][ T8495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.622028][ T8498] lo: entered promiscuous mode [ 259.638749][ T8498] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.780753][ T8498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.799852][ T8498] bond2: (slave lo): Enslaving as an active interface with an up link [ 260.261449][ T5787] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 260.771066][ T790] net_ratelimit: 35 callbacks suppressed [ 262.583182][ T8539] loop0: detected capacity change from 0 to 8 [ 264.662879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 265.474514][ T8568] netlink: 120 bytes leftover after parsing attributes in process `syz.0.558'. [ 265.812646][ T8571] capability: warning: `syz.0.559' uses deprecated v2 capabilities in a way that may be insecure [ 266.003156][ T8574] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.066824][ T8576] syzkaller0: entered promiscuous mode [ 266.073182][ T8576] syzkaller0: entered allmulticast mode [ 266.418459][ C1] net_ratelimit: 40 callbacks suppressed [ 267.822404][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.841634][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.944548][ T8638] loop0: detected capacity change from 0 to 1024 [ 271.967432][ C1] net_ratelimit: 36 callbacks suppressed [ 272.514015][ T8638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.570556][ T8646] loop5: detected capacity change from 0 to 128 [ 272.573566][ T8638] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.596789][ T8646] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.655490][ T8637] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.578: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.663250][ T8646] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.740498][ T8637] EXT4-fs (loop0): Remounting filesystem read-only [ 272.741564][ T50] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.927646][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.083884][ T8652] bridge2: entered promiscuous mode [ 273.092623][ T8652] bridge2: entered allmulticast mode [ 273.129888][ T8652] team0: Port device bridge2 added [ 273.137287][ T8654] bridge0: port 3(team0) entered blocking state [ 273.165468][ T8654] bridge0: port 3(team0) entered disabled state [ 273.190541][ T8654] team0: entered allmulticast mode [ 273.230439][ T8654] team_slave_0: entered allmulticast mode [ 273.238507][ T8654] team_slave_1: entered allmulticast mode [ 273.254752][ T8654] team0: entered promiscuous mode [ 273.278894][ T8654] team_slave_0: entered promiscuous mode [ 273.299384][ T8654] team_slave_1: entered promiscuous mode [ 273.331605][ T8654] bridge0: port 3(team0) entered blocking state [ 273.338848][ T8654] bridge0: port 3(team0) entered forwarding state [ 273.407619][ T8650] pimreg: entered allmulticast mode [ 274.365186][ T8674] pimreg: entered allmulticast mode [ 275.760676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 275.810238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 275.931085][ T2988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 276.130043][ T8680] pimreg: left allmulticast mode [ 276.204969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 277.517443][ T80] net_ratelimit: 27 callbacks suppressed [ 277.528732][ T8689] loop5: detected capacity change from 0 to 512 [ 277.696505][ T8689] journal_path: Lookup failure for './file1' [ 278.274314][ T8689] EXT4-fs: error: could not find journal device path [ 278.599673][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 278.765349][ T8705] xt_NFQUEUE: number of total queues is 0 [ 279.270687][ T8701] syz_tun (unregistering): left allmulticast mode [ 279.337617][ T8708] cpuidle: using governor haltpoll [ 279.420492][ T8714] netlink: 'syz.5.598': attribute type 1 has an invalid length. [ 279.524745][ T8714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.615728][ T8716] bond2: (slave veth0_to_bond): making interface the new active one [ 279.674337][ T8716] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 279.847614][ T8714] bond2: entered promiscuous mode [ 279.852681][ T8714] veth0_to_bond: entered promiscuous mode [ 279.881600][ T8714] bond2: entered allmulticast mode [ 279.886901][ T8714] veth0_to_bond: entered allmulticast mode [ 279.936963][ T8716] macvlan2: entered promiscuous mode [ 279.964154][ T8716] macvlan2: entered allmulticast mode [ 279.976027][ T8716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 279.990864][ T8716] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 280.786748][ T8721] syzkaller0: entered promiscuous mode [ 280.793730][ T8721] syzkaller0: entered allmulticast mode [ 282.876235][ T8736] pimreg: entered allmulticast mode [ 282.978763][ T8198] net_ratelimit: 24 callbacks suppressed [ 283.196974][ T8736] pimreg: left allmulticast mode [ 283.790567][ T8749] loop5: detected capacity change from 0 to 128 [ 283.856103][ T8749] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.895131][ T8749] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.009015][ T6895] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.383986][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 285.383997][ T27] audit: type=1326 audit(1793820251.192:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8779 comm="syz.0.618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x0 [ 288.527529][ C1] net_ratelimit: 11 callbacks suppressed [ 288.696199][ T8830] loop5: detected capacity change from 0 to 2048 [ 288.963057][ T8830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.060163][ T8842] syz.2.633 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 290.994102][ T8858] infiniband rxe0: set active [ 291.045228][ T790] rxe_eth0 speed is unknown, defaulting to 1000 [ 291.953808][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 291.962937][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 291.972548][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 291.981704][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 291.992412][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 292.001629][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 292.012283][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 292.021398][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 292.032018][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 292.041189][ T8868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.638'. [ 292.657373][ T8869] netlink: 'syz.3.639': attribute type 3 has an invalid length. [ 293.196442][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.334769][ T8881] syzkaller0: entered promiscuous mode [ 293.342818][ T8881] syzkaller0: entered allmulticast mode [ 293.990017][ C1] net_ratelimit: 20 callbacks suppressed [ 297.326950][ T8924] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 299.539126][ C0] net_ratelimit: 25 callbacks suppressed [ 299.714024][ T8948] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 299.722172][ T8948] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 299.730956][ T8948] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 299.741177][ T8948] Error parsing options; rc = [-22] [ 301.291897][ T8969] loop5: detected capacity change from 0 to 32768 [ 301.537978][ T8969] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 302.199179][ T8969] XFS (loop5): Ending clean mount [ 302.223819][ T9002] bridge0: port 3(syz_tun) entered blocking state [ 302.231583][ T9002] bridge0: port 3(syz_tun) entered disabled state [ 302.238973][ T9002] syz_tun: entered allmulticast mode [ 302.246011][ T9002] syz_tun: entered promiscuous mode [ 302.246046][ T8969] XFS (loop5): Quotacheck needed: Please wait. [ 302.353248][ T9002] batadv_slave_0: Caught tx_queue_len zero misconfig [ 302.573258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 302.623470][ T8969] XFS (loop5): Quotacheck: Done. [ 302.784157][ T8969] netlink: 'syz.5.667': attribute type 11 has an invalid length. [ 303.945122][ T6895] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 304.993859][ T9027] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 305.089228][ T9029] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 305.174277][ C1] net_ratelimit: 18 callbacks suppressed [ 306.100579][ T9044] loop5: detected capacity change from 0 to 1024 [ 306.108921][ T9044] EXT4-fs: inline encryption not supported [ 306.155738][ T9044] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.960066][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 306.971408][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 306.978987][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 306.989060][ T5787] Workqueue: hci2 hci_rx_work [ 306.993789][ T5787] Call Trace: [ 306.997084][ T5787] [ 307.000029][ T5787] dump_stack_lvl+0x18c/0x250 [ 307.004733][ T5787] ? show_regs_print_info+0x20/0x20 [ 307.009960][ T5787] ? load_image+0x420/0x420 [ 307.014498][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 307.019632][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 307.024333][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 307.029560][ T5787] kobject_add_internal+0x617/0xc90 [ 307.034846][ T5787] kobject_add+0x164/0x240 [ 307.039294][ T5787] ? kobject_init+0x1d0/0x1d0 [ 307.044008][ T5787] ? get_device_parent+0x366/0x390 [ 307.049165][ T5787] device_add+0x3fa/0xc40 [ 307.053518][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 307.058486][ T5787] le_conn_complete_evt+0xfe7/0x1690 [ 307.063803][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 307.070083][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 307.076007][ T5787] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 307.082432][ T5787] hci_event_packet+0x623/0xe60 [ 307.087322][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 307.093424][ T5787] ? bis_list+0x290/0x290 [ 307.097786][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 307.103010][ T5787] hci_rx_work+0x43a/0xd60 [ 307.107460][ T5787] ? process_scheduled_works+0x975/0x1600 [ 307.113207][ T5787] process_scheduled_works+0xa60/0x1600 [ 307.118804][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 307.124297][ T5787] ? assign_work+0x3cc/0x5d0 [ 307.128923][ T5787] worker_thread+0xa5e/0xfe0 [ 307.133527][ T5787] ? _raw_spin_unlock+0x40/0x40 [ 307.133581][ T5787] ? __kthread_parkme+0x71/0x1c0 [ 307.133613][ T5787] kthread+0x2fa/0x390 [ 307.133631][ T5787] ? pr_cont_work+0x550/0x550 [ 307.138730][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 307.138754][ T5787] ret_from_fork+0x48/0x80 [ 307.138777][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 307.138799][ T5787] ret_from_fork_asm+0x11/0x20 [ 307.138839][ T5787] [ 307.148236][ T5787] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 307.148277][ T5787] Bluetooth: hci2: failed to register connection device [ 307.236285][ T9044] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #3: block 1: comm syz.5.679: lblock 1 mapped to illegal pblock 1 (length 1) [ 307.448720][ T9044] EXT4-fs (loop5): Remounting filesystem read-only [ 307.526097][ T9044] Quota error (device loop5): write_blk: dquota write failed [ 307.533623][ T9044] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 307.544334][ T9044] EXT4-fs (loop5): 1 orphan inode deleted [ 307.551520][ T9044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.619987][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.422417][ T9063] xt_hashlimit: max too large, truncated to 1048576 [ 308.475401][ T9063] jffs2: notice: (9063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 310.857973][ T27] audit: type=1326 audit(1793820274.694:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 310.882708][ T27] audit: type=1326 audit(1793820274.703:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 310.906956][ C1] net_ratelimit: 74 callbacks suppressed [ 310.947340][ T27] audit: type=1326 audit(1793820274.731:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 311.021233][ T27] audit: type=1326 audit(1793820274.731:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 311.021274][ T27] audit: type=1326 audit(1793820274.731:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 311.095375][ T27] audit: type=1326 audit(1793820274.731:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 311.144965][ T27] audit: type=1326 audit(1793820274.731:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 311.176388][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.883074][ T27] audit: type=1326 audit(1793820274.731:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29519fb19 code=0x7ffc0000 [ 313.997352][ T52] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 315.044356][ T9162] __nla_validate_parse: 16 callbacks suppressed [ 315.044370][ T9162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.717'. [ 315.093950][ T9162] bridge0: port 4(syz_tun) entered disabled state [ 315.100673][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.109202][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.152393][ T9164] lo: Caught tx_queue_len zero misconfig [ 315.496167][ T9166] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 316.655086][ T9185] FAULT_INJECTION: forcing a failure. [ 316.655086][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 316.695257][ T9185] CPU: 0 PID: 9185 Comm: syz.0.725 Not tainted syzkaller #0 [ 316.702565][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 316.702585][ T9185] Call Trace: [ 316.702595][ T9185] [ 316.702603][ T9185] dump_stack_lvl+0x18c/0x250 [ 316.702637][ T9185] ? show_regs_print_info+0x20/0x20 [ 316.713126][ C1] net_ratelimit: 27 callbacks suppressed [ 316.715940][ T9185] ? load_image+0x420/0x420 [ 316.738834][ T9185] ? __might_fault+0xaa/0x120 [ 316.738862][ T9185] ? __lock_acquire+0x7eb0/0x7eb0 [ 316.738883][ T9185] ? __local_bh_enable_ip+0x13a/0x1c0 [ 316.738904][ T9185] ? _local_bh_enable+0xa0/0xa0 [ 316.738925][ T9185] should_fail_ex+0x394/0x4c0 [ 316.738953][ T9185] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 316.738986][ T9185] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 316.739022][ T9185] ? fpregs_set+0x370/0x370 [ 316.739068][ T9185] ? fpu__alloc_mathframe+0xa7/0x120 [ 316.775016][ T9185] get_sigframe+0x5de/0x7d0 [ 316.784766][ T9185] ? load_gs_index+0x1a0/0x1a0 [ 316.784798][ T9185] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 316.784821][ T9185] ? get_signal+0x1197/0x1390 [ 316.794045][ T9185] x64_setup_rt_frame+0x164/0xc30 [ 316.794071][ T9185] ? lockdep_hardirqs_on+0x98/0x150 [ 316.804677][ T9185] ? _raw_spin_unlock_irq+0x2e/0x50 [ 316.804705][ T9185] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 316.804731][ T9185] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 316.814894][ T9185] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 316.814927][ T9185] arch_do_signal_or_restart+0x411/0x7b0 [ 316.826335][ T9185] ? get_sigframe_size+0x20/0x20 [ 316.826380][ T9185] ? exit_to_user_mode_loop+0x3b/0x110 [ 316.837684][ T9185] exit_to_user_mode_loop+0x70/0x110 [ 316.837713][ T9185] exit_to_user_mode_prepare+0xee/0x180 [ 316.837738][ T9185] syscall_exit_to_user_mode+0x1a/0x50 [ 316.848271][ T9185] do_syscall_64+0x61/0xb0 [ 316.848296][ T9185] ? clear_bhb_loop+0x40/0x90 [ 316.859011][ T9185] ? clear_bhb_loop+0x40/0x90 [ 316.859040][ T9185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.889740][ T9185] RIP: 0033:0x7fd29519fb17 [ 316.894161][ T9185] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 316.913759][ T9185] RSP: 002b:00007fd2960f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.922165][ T9185] RAX: 000000000000002e RBX: 00007fd295425fa0 RCX: 00007fd29519fb19 [ 316.930128][ T9185] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000005 [ 316.938090][ T9185] RBP: 00007fd295237b70 R08: 0000000000000000 R09: 0000000000000000 [ 316.946055][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.954019][ T9185] R13: 00007fd295426038 R14: 00007fd295425fa0 R15: 00007ffc2371be08 [ 316.962256][ T9185] [ 318.060763][ T9196] netlink: 'syz.2.727': attribute type 4 has an invalid length. [ 318.231190][ T9213] tipc: Started in network mode [ 318.237244][ T9213] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 318.247390][ T9213] tipc: Enabling of bearer rejected, failed to enable media [ 318.385327][ T9221] tipc: Failed to remove unknown binding: 66,0,0/2886997007:240922823/240922825 [ 318.400660][ T9221] tipc: Failed to remove unknown binding: 66,0,0/2886997007:240922823/240922824 [ 318.412944][ T9221] tipc: Failed to remove unknown binding: 66,0,0/2886997007:240922823/240922825 [ 318.424890][ T9221] tipc: Failed to remove unknown binding: 66,0,0/2886997007:240922823/240922824 [ 319.765329][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 319.779005][ T52] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 319.975979][ T9260] loop5: detected capacity change from 0 to 2048 [ 320.042334][ T9260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.260838][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.598808][ T9284] FAULT_INJECTION: forcing a failure. [ 321.598808][ T9284] name failslab, interval 1, probability 0, space 0, times 0 [ 321.623822][ T9284] CPU: 1 PID: 9284 Comm: syz.5.757 Not tainted syzkaller #0 [ 321.631144][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.641197][ T9284] Call Trace: [ 321.641209][ T9284] [ 321.647440][ T9284] dump_stack_lvl+0x18c/0x250 [ 321.652153][ T9284] ? show_regs_print_info+0x20/0x20 [ 321.657379][ T9284] ? load_image+0x420/0x420 [ 321.662051][ T9284] ? __might_sleep+0xe0/0xe0 [ 321.666677][ T9284] ? __lock_acquire+0x7eb0/0x7eb0 [ 321.671736][ T9284] should_fail_ex+0x394/0x4c0 [ 321.676442][ T9284] should_failslab+0x9/0x20 [ 321.680968][ T9284] slab_pre_alloc_hook+0x59/0x300 [ 321.686019][ T9284] kmem_cache_alloc+0x5a/0x2d0 [ 321.690891][ T9284] ? security_inode_alloc+0x34/0x110 [ 321.696207][ T9284] security_inode_alloc+0x34/0x110 [ 321.701347][ T9284] inode_init_always+0x914/0xc90 [ 321.706314][ T9284] new_inode_pseudo+0x95/0x1d0 [ 321.711114][ T9284] __sock_create+0x12d/0x940 [ 321.715735][ T9284] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.721746][ T9284] __sys_socket+0xd7/0x1b0 [ 321.726187][ T9284] __x64_sys_socket+0x7a/0x90 [ 321.730884][ T9284] do_syscall_64+0x55/0xb0 [ 321.735329][ T9284] ? clear_bhb_loop+0x40/0x90 [ 321.740034][ T9284] ? clear_bhb_loop+0x40/0x90 [ 321.744727][ T9284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.744757][ T9284] RIP: 0033:0x7eff5279fb19 [ 321.755177][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.755196][ T9284] RSP: 002b:00007eff536de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 321.755219][ T9284] RAX: ffffffffffffffda RBX: 00007eff52a25fa0 RCX: 00007eff5279fb19 [ 321.774953][ T9284] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 321.774969][ T9284] RBP: 00007eff52837b70 R08: 0000000000000000 R09: 0000000000000000 [ 321.774981][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.774993][ T9284] R13: 00007eff52a26038 R14: 00007eff52a25fa0 R15: 00007ffd3d71e0d8 [ 321.775024][ T9284] [ 322.341277][ C1] net_ratelimit: 23 callbacks suppressed [ 323.438532][ T9307] loop5: detected capacity change from 0 to 512 [ 323.465768][ T9307] EXT4-fs: test_dummy_encryption requires encrypt feature [ 323.773091][ T9322] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 323.842458][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 324.496524][ T9326] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 324.546047][ T9328] macvlan2: entered promiscuous mode [ 324.558066][ T9328] macvlan2: entered allmulticast mode [ 324.577278][ T9328] bond3: entered promiscuous mode [ 324.582510][ T9328] bridge1: entered promiscuous mode [ 324.588678][ T9328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.598906][ T9328] bond3: left promiscuous mode [ 324.603723][ T9328] bridge1: left promiscuous mode [ 324.660560][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 324.677766][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 324.698978][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.755191][ T9] usb 6-1: config 0 has no interface number 0 [ 324.764792][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 324.774126][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.791101][ T9] usb 6-1: Product: syz [ 324.795269][ T9] usb 6-1: Manufacturer: syz [ 324.795287][ T9] usb 6-1: SerialNumber: syz [ 325.020582][ T9] usb 6-1: config 0 descriptor?? [ 325.036703][ T9] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 325.043729][ T9] usb 6-1: No valid video chain found. [ 325.493378][ T9] usb 6-1: USB disconnect, device number 2 [ 327.693755][ T9355] netlink: 'syz.0.770': attribute type 8 has an invalid length. [ 327.841845][ T9360] loop0: detected capacity change from 0 to 512 [ 327.930072][ T9360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.991394][ T9360] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.681370][ C0] net_ratelimit: 28 callbacks suppressed [ 329.378399][ T9380] loop5: detected capacity change from 0 to 128 [ 329.674262][ T9380] FAT-fs (loop5): bogus sectors per cluster 0 [ 329.680510][ T9380] FAT-fs (loop5): Can't find a valid FAT filesystem [ 330.057013][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.641771][ T9399] loop5: detected capacity change from 0 to 512 [ 330.759014][ T9243] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.899898][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 334.155867][ T9440] batadv_slave_0: Caught tx_queue_len zero misconfig [ 334.183943][ T9438] netlink: 'syz.5.791': attribute type 8 has an invalid length. [ 334.347977][ T9444] netlink: 550 bytes leftover after parsing attributes in process `syz.2.792'. [ 334.412531][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.418969][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.999778][ C1] net_ratelimit: 23 callbacks suppressed [ 336.200375][ T9471] netlink: 'syz.2.803': attribute type 8 has an invalid length. [ 336.920879][ T9475] loop0: detected capacity change from 0 to 128 [ 337.037950][ T9243] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 340.462029][ C1] net_ratelimit: 26 callbacks suppressed [ 340.799932][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 343.504481][ T9530] netlink: 'syz.3.820': attribute type 8 has an invalid length. [ 343.848917][ T9538] loop0: detected capacity change from 0 to 256 [ 343.864428][ T9538] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 343.899342][ T9538] exFAT-fs (loop0): invalid boot region [ 343.906257][ T9538] exFAT-fs (loop0): failed to recognize exfat type [ 343.932102][ T9534] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.015950][ T9384] net_ratelimit: 20 callbacks suppressed [ 347.453849][ T9388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 347.868740][ T9574] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 347.899694][ T9574] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 347.945326][ T5851] lo speed is unknown, defaulting to 1000 [ 347.992365][ T9577] syz_tun: left allmulticast mode [ 348.010508][ T9577] syz_tun: left promiscuous mode [ 348.015672][ T9577] bridge0: port 4(syz_tun) entered disabled state [ 348.108910][ T9577] bridge_slave_0: left allmulticast mode [ 348.116178][ T9577] bridge_slave_0: left promiscuous mode [ 348.122437][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.140685][ T9577] bridge_slave_1: left allmulticast mode [ 348.154682][ T9577] bridge_slave_1: left promiscuous mode [ 348.162096][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.183770][ T9577] bond2: (slave veth0_to_bond): Releasing active interface [ 348.235574][ T9577] bond0: (slave bond_slave_0): Releasing backup interface [ 348.257536][ T9577] bond_slave_0: left promiscuous mode [ 348.293668][ T9577] bond0: (slave bond_slave_1): Releasing backup interface [ 348.305069][ T9577] bond_slave_1: left promiscuous mode [ 348.361998][ T9577] team0: Failed to send options change via netlink (err -105) [ 348.372813][ T9577] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 348.389755][ T9577] team0: Port device team_slave_0 removed [ 348.405062][ T9577] team0: Failed to send options change via netlink (err -105) [ 348.425222][ T9577] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 348.435666][ T9577] team0: Port device team_slave_1 removed [ 348.443528][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.462019][ T9577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.480460][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.489610][ T9577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.521551][ T9577] vxlan0: left allmulticast mode [ 348.531023][ T9577] vxlan0: left promiscuous mode [ 348.550408][ T9577] bridge0: port 3(vxlan0) entered disabled state [ 348.566579][ T9577] bond2: (slave veth3): Releasing active interface [ 348.588945][ T9580] team0: Mode changed to "broadcast" [ 349.559749][ T9592] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 349.647001][ T9592] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.663276][ T9592] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.683456][ T9592] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.694824][ T9592] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.706233][ T9592] bond3: (slave geneve2): making interface the new active one [ 349.780181][ T9592] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 349.790823][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'. [ 349.804036][ T9594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.079865][ T9600] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.840'. [ 350.096809][ T9600] netlink: 'syz.3.840': attribute type 2 has an invalid length. [ 350.113010][ T9600] netlink: 'syz.3.840': attribute type 10 has an invalid length. [ 350.338805][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 350.348709][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 350.356280][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 350.366326][ T5787] Workqueue: hci3 hci_rx_work [ 350.371198][ T5787] [ 350.373516][ T5787] Call Trace: [ 350.373525][ T5787] [ 350.373535][ T5787] dump_stack_lvl+0x18c/0x250 [ 350.373567][ T5787] ? show_regs_print_info+0x20/0x20 [ 350.379756][ T5787] ? load_image+0x420/0x420 [ 350.379796][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 350.389627][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 350.389657][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 350.409181][ T5787] kobject_add_internal+0x617/0xc90 [ 350.414407][ T5787] kobject_add+0x164/0x240 [ 350.418843][ T5787] ? kobject_init+0x1d0/0x1d0 [ 350.423543][ T5787] ? get_device_parent+0x366/0x390 [ 350.428674][ T5787] device_add+0x3fa/0xc40 [ 350.433024][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 350.437988][ T5787] le_conn_complete_evt+0xfe7/0x1690 [ 350.443298][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 350.449580][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 350.455497][ T5787] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 350.461936][ T5787] hci_event_packet+0x623/0xe60 [ 350.466812][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 350.472902][ T5787] ? bis_list+0x290/0x290 [ 350.477261][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 350.482482][ T5787] hci_rx_work+0x43a/0xd60 [ 350.486924][ T5787] ? process_scheduled_works+0x975/0x1600 [ 350.492662][ T5787] process_scheduled_works+0xa60/0x1600 [ 350.498260][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 350.503746][ T5787] ? assign_work+0x3cc/0x5d0 [ 350.508363][ T5787] worker_thread+0xa5e/0xfe0 [ 350.512985][ T5787] ? _raw_spin_unlock+0x40/0x40 [ 350.517849][ T5787] ? __kthread_parkme+0x71/0x1c0 [ 350.522813][ T5787] kthread+0x2fa/0x390 [ 350.526895][ T5787] ? pr_cont_work+0x550/0x550 [ 350.531593][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 350.536195][ T5787] ret_from_fork+0x48/0x80 [ 350.540627][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 350.545238][ T5787] ret_from_fork_asm+0x11/0x20 [ 350.550038][ T5787] [ 350.602737][ T5787] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 350.682298][ T5787] Bluetooth: hci3: failed to register connection device [ 350.876466][ T9600] netlink: 156 bytes leftover after parsing attributes in process `syz.3.840'. [ 351.819971][ C1] net_ratelimit: 24 callbacks suppressed [ 353.231457][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 354.199534][ T9630] CIFS: Attempting to mount //127.0.0.1/share [ 354.264801][ T9634] CIFS: VFS: Invalid response size 0 for command 0 [ 354.275427][ T9634] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 354.283099][ T9630] CIFS: VFS: cifs_mount failed w/return code = -5 [ 356.137465][ T9669] netlink: 'syz.0.852': attribute type 4 has an invalid length. [ 356.483714][ T9681] xt_NFQUEUE: number of total queues is 0 [ 356.611048][ T5853] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 357.063188][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.145538][ T5853] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 357.155393][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.175099][ T5853] usb 1-1: Product: syz [ 357.179367][ T5853] usb 1-1: Manufacturer: syz [ 357.184331][ T5853] usb 1-1: SerialNumber: syz [ 357.282183][ C0] net_ratelimit: 22 callbacks suppressed [ 358.467975][ T5853] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 358.485591][ T5853] usb 1-1: USB disconnect, device number 2 [ 358.825474][ T9718] rxe_eth0 speed is unknown, defaulting to 1000 [ 359.816503][ T9718] lo speed is unknown, defaulting to 1000 [ 360.931936][ T9743] xt_NFQUEUE: number of total queues is 0 [ 362.758313][ T1135] net_ratelimit: 22 callbacks suppressed [ 365.741095][ T9800] (null): rxe_set_mtu: Set mtu to 1024 [ 365.752148][ T9800] rdma_rxe: rxe_newlink: failed to add bond0 [ 368.299571][ T41] net_ratelimit: 10 callbacks suppressed [ 369.756536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 370.034576][ T9832] netlink: 'syz.2.895': attribute type 322 has an invalid length. [ 370.259061][ T9838] loop0: detected capacity change from 0 to 8 [ 370.376298][ T9838] SQUASHFS error: zlib decompression failed, data probably corrupt [ 370.384377][ T9838] SQUASHFS error: Failed to read block 0x9b: -5 [ 370.390850][ T9838] SQUASHFS error: Unable to read metadata cache entry [99] [ 370.398186][ T9838] SQUASHFS error: Unable to read inode 0x104 [ 371.250353][ T9848] loop0: detected capacity change from 0 to 256 [ 371.291144][ T9848] exfat: Deprecated parameter 'namecase' [ 371.384589][ T9848] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 371.810186][ T9855] netlink: 'syz.0.902': attribute type 12 has an invalid length. [ 373.224556][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 373.755571][ C1] net_ratelimit: 20 callbacks suppressed [ 374.039605][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 376.222138][ T9890] loop5: detected capacity change from 0 to 1024 [ 376.238324][ T9890] journal_path: Lookup failure for './file1' [ 376.244359][ T9890] EXT4-fs: error: could not find journal device path [ 376.313335][ T9894] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 376.314155][ T9886] ip6gre1: entered allmulticast mode [ 376.863168][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 376.978699][ T9899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.178720][ T9902] lo: entered promiscuous mode [ 377.184391][ T9902] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.256717][ T9902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.388163][ T9902] bond3: (slave lo): Enslaving as an active interface with an up link [ 377.437499][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 378.102856][ T9902] syz.0.916 (9902) used greatest stack depth: 19496 bytes left [ 378.511202][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 379.442663][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 379.489150][ T9387] net_ratelimit: 23 callbacks suppressed [ 380.980386][ T9956] syzkaller0: entered promiscuous mode [ 380.999775][ T9956] syzkaller0: entered allmulticast mode [ 381.024357][ T9956] tipc: Started in network mode [ 381.037852][ T9956] tipc: Node identity ca5576c7d53f, cluster identity 4711 [ 381.063329][ T9956] tipc: Enabled bearer , priority 0 [ 381.081100][ T9384] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.103056][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 381.203086][ T9955] tipc: Resetting bearer [ 381.374769][ T9955] tipc: Disabling bearer [ 381.393072][ T9963] loop0: detected capacity change from 0 to 8192 [ 381.565236][ T9961] veth5: entered allmulticast mode [ 381.615021][ T9961] bond4: (slave veth5): Enslaving as an active interface with an up link [ 382.538151][ T9975] loop0: detected capacity change from 0 to 1024 [ 382.572665][ T9975] EXT4-fs: Ignoring removed bh option [ 382.599658][ T9975] EXT4-fs: Ignoring removed bh option [ 382.685799][ T9975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 382.704796][ T9975] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.425516][ T9983] EXT4-fs (loop0): shut down requested (2) [ 383.689818][ T9991] veth0: entered promiscuous mode [ 383.697001][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 383.756682][ T9991] veth0: left promiscuous mode [ 383.876631][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 383.936110][ T9995] syz_tun (unregistering): left allmulticast mode [ 383.942710][ T9995] syz_tun (unregistering): left promiscuous mode [ 383.975676][ T9995] bridge0: port 3(syz_tun) entered disabled state [ 384.222113][ T9999] infiniband rxe0: set active [ 384.273670][ T5879] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.032414][ T8198] net_ratelimit: 29 callbacks suppressed [ 386.389487][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 386.432513][T10018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.617095][T10018] lo: entered promiscuous mode [ 386.661457][T10018] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 387.040486][T10018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.356010][T10018] bond3: (slave lo): Enslaving as an active interface with an up link [ 388.381566][ T5879] IPVS: starting estimator thread 0... [ 388.548657][T10039] IPVS: using max 21 ests per chain, 50400 per kthread [ 390.836179][ C1] net_ratelimit: 17 callbacks suppressed [ 395.522543][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 395.674737][T10115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.697297][T10116] lo: entered promiscuous mode [ 395.814973][T10116] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.384824][ C1] net_ratelimit: 16 callbacks suppressed [ 396.689863][T10116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.868217][T10116] bond4: (slave lo): Enslaving as an active interface with an up link [ 397.554516][ T790] lo speed is unknown, defaulting to 1000 [ 397.570687][ T9] lo speed is unknown, defaulting to 1000 [ 397.587869][ T23] lo speed is unknown, defaulting to 1000 [ 399.008413][T10139] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 399.016339][T10139] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 399.025214][T10139] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 399.035057][T10139] Error parsing options; rc = [-22] [ 399.275455][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.284934][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.295770][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.304968][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.315607][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.324667][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.335354][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.344486][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 399.355162][T10150] netlink: 124 bytes leftover after parsing attributes in process `syz.3.980'. [ 400.983435][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.005123][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.245837][T10186] loop5: detected capacity change from 0 to 512 [ 402.259761][T10186] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.811618][ C1] net_ratelimit: 22 callbacks suppressed [ 408.533956][ C1] net_ratelimit: 16 callbacks suppressed [ 408.978823][T10238] ip_tables: iptables: counters copy to user failed while replacing table [ 414.158729][ C1] net_ratelimit: 19 callbacks suppressed [ 414.820339][T10211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.717761][T10284] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 416.752753][T10284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.794886][T10284] bond1: (slave veth0_to_bond): Releasing active interface [ 416.808950][T10284] bond5: (slave veth0_to_bond): making interface the new active one [ 416.818765][T10284] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 416.849368][T10284] bond5: entered promiscuous mode [ 416.854421][T10284] veth0_to_bond: entered promiscuous mode [ 416.861441][T10284] bond5: entered allmulticast mode [ 416.866569][T10284] veth0_to_bond: entered allmulticast mode [ 416.982660][T10284] macvlan2: entered promiscuous mode [ 416.990776][T10284] macvlan2: entered allmulticast mode [ 416.997749][T10284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 417.051988][T10284] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 419.951346][T10212] net_ratelimit: 14 callbacks suppressed [ 423.182759][T10345] (null): rxe_set_mtu: Set mtu to 1024 [ 423.191008][T10345] rdma_rxe: rxe_newlink: failed to add bond0 [ 425.197629][T10370] loop0: detected capacity change from 0 to 8 [ 426.038858][ T8204] net_ratelimit: 19 callbacks suppressed [ 426.146320][T10381] SQUASHFS error: Unable to read directory block [631:26] [ 426.549441][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.556637][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.564785][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 426.564799][ T27] audit: type=1800 audit(1793820381.468:131): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1043" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 426.592172][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.598701][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.605385][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.613216][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.619768][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.626312][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.634249][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.640808][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.647660][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.655109][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.661656][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.668247][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.674791][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.681527][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.688125][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.697002][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.703724][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.710373][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.716913][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.723919][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.730560][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.737076][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.743834][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.750441][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.757058][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.763710][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.770259][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.776882][T10380] SQUASHFS error: Failed to read block 0x4de: -5 [ 427.520750][T10392] (null): rxe_set_mtu: Set mtu to 1024 [ 427.528556][T10392] rdma_rxe: rxe_newlink: failed to add bond0 [ 428.466604][T10399] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 428.488705][T10399] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 428.648407][T10407] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 428.665852][T10400] netlink: 'syz.5.1050': attribute type 16 has an invalid length. [ 428.673911][T10400] __nla_validate_parse: 15 callbacks suppressed [ 428.673923][T10400] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1050'. [ 428.935102][T10407] bridge3: entered promiscuous mode [ 428.951002][T10407] bond5: (slave bridge3): making interface the new active one [ 428.967959][T10407] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 429.031438][T10410] bridge4: entered promiscuous mode [ 429.056186][T10410] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 429.863593][T10436] (null): rxe_set_mtu: Set mtu to 1024 [ 429.869487][T10436] rdma_rxe: rxe_newlink: failed to add bond0 [ 430.695144][T10443] syz.0.1063 (pid 10443) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 430.905804][T10450] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 431.499373][ C1] net_ratelimit: 11 callbacks suppressed [ 432.138135][T10458] loop5: detected capacity change from 0 to 128 [ 432.216904][T10458] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 432.777718][ T80] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 433.328676][T10465] FAULT_INJECTION: forcing a failure. [ 433.328676][T10465] name failslab, interval 1, probability 0, space 0, times 0 [ 433.393034][T10465] CPU: 0 PID: 10465 Comm: syz.0.1066 Not tainted syzkaller #0 [ 433.400513][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.410566][T10465] Call Trace: [ 433.410578][T10465] [ 433.410587][T10465] dump_stack_lvl+0x18c/0x250 [ 433.416781][T10465] ? show_regs_print_info+0x20/0x20 [ 433.426612][T10465] ? load_image+0x420/0x420 [ 433.426640][T10465] ? __might_sleep+0xe0/0xe0 [ 433.426666][T10465] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.431372][T10465] should_fail_ex+0x394/0x4c0 [ 433.441068][T10465] should_failslab+0x9/0x20 [ 433.441090][T10465] slab_pre_alloc_hook+0x59/0x300 [ 433.441113][T10465] ? offload_action_alloc+0x2a/0x280 [ 433.450252][T10465] ? offload_action_alloc+0x2a/0x280 [ 433.450281][T10465] __kmem_cache_alloc_node+0x53/0x260 [ 433.460543][T10465] ? offload_action_alloc+0x2a/0x280 [ 433.471163][T10465] __kmalloc+0xa7/0x240 [ 433.471197][T10465] offload_action_alloc+0x2a/0x280 [ 433.480586][T10465] ? tcf_action_offload_add_ex+0x212/0x820 [ 433.491469][T10465] tcf_action_offload_add_ex+0x2b9/0x820 [ 433.491499][T10465] ? net_generic+0x240/0x240 [ 433.491548][T10465] ? tcf_action_fill_size+0x1c/0x2d0 [ 433.501698][T10465] ? tcf_action_fill_size+0x1c/0x2d0 [ 433.512224][T10465] ? tcf_gact_get_fill_size+0x39/0x60 [ 433.512252][T10465] tcf_action_init+0x2e3/0x940 [ 433.522535][T10465] ? tcf_action_init_1+0x6d0/0x6d0 [ 433.527675][T10465] ? __nla_validate+0x50/0x50 [ 433.527731][T10465] tc_ctl_action+0x412/0xbd0 [ 433.532616][T10465] ? tca_get_fill+0x550/0x550 [ 433.532646][T10465] ? trace_raw_output_contention_end+0xd0/0xd0 [ 433.542104][T10465] ? tca_get_fill+0x550/0x550 [ 433.552854][T10465] rtnetlink_rcv_msg+0x843/0xf90 [ 433.552881][T10465] ? rtnetlink_rcv_msg+0x220/0xf90 [ 433.562881][T10465] ? rtnetlink_bind+0x80/0x80 [ 433.562904][T10465] ? kasan_quarantine_put+0xd8/0x220 [ 433.572813][T10465] ? lockdep_hardirqs_on+0x98/0x150 [ 433.572842][T10465] ? slab_free_freelist_hook+0x154/0x240 [ 433.572868][T10465] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.572892][T10465] ? lock_chain_count+0x20/0x20 [ 433.572916][T10465] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.572936][T10465] ? lockdep_hardirqs_on+0x98/0x150 [ 433.572956][T10465] ? __local_bh_enable_ip+0x13a/0x1c0 [ 433.572975][T10465] ? _local_bh_enable+0xa0/0xa0 [ 433.573005][T10465] ? __dev_queue_xmit+0x1481/0x3a30 [ 433.573033][T10465] ? __dev_queue_xmit+0x6d1/0x3a30 [ 433.573067][T10465] ? ref_tracker_free+0x686/0x830 [ 433.573105][T10465] netlink_rcv_skb+0x235/0x4c0 [ 433.573126][T10465] ? rtnetlink_bind+0x80/0x80 [ 433.573150][T10465] ? netlink_ack+0x1160/0x1160 [ 433.573182][T10465] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.573212][T10465] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.573236][T10465] netlink_unicast+0x856/0x9e0 [ 433.573279][T10465] netlink_sendmsg+0x8d0/0xbf0 [ 433.584234][T10465] ? netlink_getsockopt+0x590/0x590 [ 433.595011][T10465] ? apparmor_socket_sendmsg+0x8e/0x330 [ 433.595042][T10465] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 433.605703][T10465] ? security_socket_sendmsg+0x80/0xa0 [ 433.605729][T10465] ? netlink_getsockopt+0x590/0x590 [ 433.605750][T10465] ____sys_sendmsg+0x61b/0x980 [ 433.615921][T10465] ? __asan_memset+0x22/0x40 [ 433.615948][T10465] ? __sys_sendmsg_sock+0x30/0x30 [ 433.626207][T10465] ? __import_iovec+0x5f2/0x850 [ 433.626241][T10465] ? import_iovec+0x73/0xa0 [ 433.636141][T10465] ___sys_sendmsg+0x2a6/0x360 [ 433.636171][T10465] ? __sys_sendmsg+0x2b0/0x2b0 [ 433.636235][T10465] __se_sys_sendmsg+0x1d0/0x2c0 [ 433.645810][T10465] ? __x64_sys_sendmsg+0x80/0x80 [ 433.645849][T10465] ? lockdep_hardirqs_on+0x98/0x150 [ 433.656019][T10465] do_syscall_64+0x55/0xb0 [ 433.656044][T10465] ? clear_bhb_loop+0x40/0x90 [ 433.665527][T10465] ? clear_bhb_loop+0x40/0x90 [ 433.665557][T10465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.665582][T10465] RIP: 0033:0x7fd29519fb19 [ 433.665600][T10465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.665617][T10465] RSP: 002b:00007fd2960f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.665639][T10465] RAX: ffffffffffffffda RBX: 00007fd295425fa0 RCX: 00007fd29519fb19 [ 433.665653][T10465] RDX: 0000000000000080 RSI: 0000200000000740 RDI: 0000000000000007 [ 433.665666][T10465] RBP: 00007fd295237b70 R08: 0000000000000000 R09: 0000000000000000 [ 433.670991][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.671005][T10465] R13: 00007fd295426038 R14: 00007fd295425fa0 R15: 00007ffc2371be08 [ 433.671035][T10465] [ 433.864384][T10446] fuse: Bad value for 'fd' [ 434.269733][T10474] (null): rxe_set_mtu: Set mtu to 1024 [ 434.279134][T10474] rdma_rxe: rxe_newlink: failed to add bond0 [ 437.056200][T10211] net_ratelimit: 14 callbacks suppressed [ 438.474375][T10523] (null): rxe_set_mtu: Set mtu to 1024 [ 438.481500][T10523] rdma_rxe: rxe_newlink: failed to add bond0 [ 440.254649][T10533] (null): rxe_set_mtu: Set mtu to 1024 [ 440.261473][T10533] rdma_rxe: rxe_newlink: failed to add bond0 [ 442.598791][ T80] net_ratelimit: 11 callbacks suppressed [ 443.736665][T10561] loop5: detected capacity change from 0 to 2048 [ 444.495553][T10553] tunl0: Caught tx_queue_len zero misconfig [ 444.518471][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'. [ 445.839418][T10582] jffs2: notice: (10582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 445.923667][T10585] syzkaller0: entered promiscuous mode [ 445.929623][T10585] syzkaller0: entered allmulticast mode [ 446.583288][T10593] (null): rxe_set_mtu: Set mtu to 1024 [ 446.593146][T10593] rdma_rxe: rxe_newlink: failed to add bond0 [ 447.079724][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 447.504751][T10595] ipvlan2: entered allmulticast mode [ 447.540426][T10595] bridge0: entered allmulticast mode [ 447.652100][T10605] futex_wake_op: syz.3.1104 tries to shift op by 144; fix this program [ 448.146704][ T1275] net_ratelimit: 16 callbacks suppressed [ 448.929851][T10615] loop5: detected capacity change from 0 to 4096 [ 449.064098][T10615] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.359082][T10615] EXT4-fs (loop5): Test dummy encryption mode enabled [ 449.435648][T10615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.507473][T10617] syzkaller0: entered promiscuous mode [ 449.513428][T10617] syzkaller0: entered allmulticast mode [ 449.621580][T10627] (null): rxe_set_mtu: Set mtu to 1024 [ 449.628412][T10627] rdma_rxe: rxe_newlink: failed to add bond0 [ 449.936050][T10211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.331945][ T27] audit: type=1326 audit(1793820403.392:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.394509][ T27] audit: type=1326 audit(1793820403.392:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.520133][ T27] audit: type=1326 audit(1793820403.392:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.547654][ T27] audit: type=1326 audit(1793820403.392:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.626306][ T27] audit: type=1326 audit(1793820403.392:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.862457][ T27] audit: type=1326 audit(1793820403.392:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.873125][T10615] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 450.900062][ T27] audit: type=1326 audit(1793820403.392:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 450.930248][ T27] audit: type=1326 audit(1793820403.392:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 451.839660][ T27] audit: type=1326 audit(1793820403.401:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 451.936567][T10628] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 451.960950][ T27] audit: type=1326 audit(1793820403.401:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a9b9fb19 code=0x7ffc0000 [ 452.148684][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.280612][T10679] (null): rxe_set_mtu: Set mtu to 1024 [ 453.286687][T10679] rdma_rxe: rxe_newlink: failed to add bond0 [ 453.694853][ C0] net_ratelimit: 16 callbacks suppressed [ 455.564474][T10698] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 455.682802][T10698] 8021q: adding VLAN 0 to HW filter on device bond7 [ 455.695060][T10699] netlink: 'syz.0.1127': attribute type 4 has an invalid length. [ 455.786989][T10701] veth0_to_bond: left allmulticast mode [ 455.792580][T10701] veth0_to_bond: left promiscuous mode [ 455.830613][T10701] bridge1: port 1(veth0_to_bond) entered disabled state [ 455.864453][T10701] bond7: (slave veth0_to_bond): making interface the new active one [ 455.885561][T10701] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 455.955075][T10705] bond7: entered promiscuous mode [ 455.961880][T10705] veth0_to_bond: entered promiscuous mode [ 455.974238][T10705] bond7: entered allmulticast mode [ 455.983514][T10705] veth0_to_bond: entered allmulticast mode [ 456.039599][T10698] macvlan2: entered promiscuous mode [ 456.044925][T10698] macvlan2: entered allmulticast mode [ 456.086528][T10698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 456.113612][T10698] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 456.368139][T10716] ceph: No mds server is up or the cluster is laggy [ 456.457041][ T9] libceph: connect (1)[c::]:6789 error -101 [ 456.605112][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 457.497508][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1134'. [ 457.872991][T10736] NILFS (nullb0): couldn't find nilfs on the device [ 458.315704][T10739] syzkaller0: entered promiscuous mode [ 458.323004][T10739] syzkaller0: entered allmulticast mode [ 459.417472][ C1] net_ratelimit: 16 callbacks suppressed [ 461.147440][T10768] (null): rxe_set_mtu: Set mtu to 1024 [ 461.153694][T10768] rdma_rxe: rxe_newlink: failed to add bond0 [ 461.343205][T10774] jffs2: notice: (10774) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 463.011404][T10786] loop0: detected capacity change from 0 to 256 [ 464.879416][ C1] net_ratelimit: 18 callbacks suppressed [ 465.454996][T10808] netlink: 'syz.3.1156': attribute type 10 has an invalid length. [ 465.538692][T10808] bridge0: port 3(team0) entered disabled state [ 465.733298][T10808] team0 (unregistering): left allmulticast mode [ 465.748425][T10808] team_slave_0: left allmulticast mode [ 465.763422][T10808] team_slave_1: left allmulticast mode [ 465.773213][T10808] team0 (unregistering): left promiscuous mode [ 465.785013][T10808] team_slave_0: left promiscuous mode [ 465.792831][T10808] team_slave_1: left promiscuous mode [ 465.799759][T10808] bridge0: port 3(team0) entered disabled state [ 466.304327][T10808] team0 (unregistering): Port device team_slave_0 removed [ 466.627398][T10808] team0 (unregistering): Port device team_slave_1 removed [ 466.743095][T10808] team0 (unregistering): Port device bridge2 removed [ 466.869174][T10815] tipc: Enabled bearer , priority 0 [ 466.893745][T10815] syzkaller0: entered promiscuous mode [ 466.900595][T10815] syzkaller0: entered allmulticast mode [ 467.115766][T10815] tipc: Resetting bearer [ 467.196112][T10814] tipc: Resetting bearer [ 467.582627][T10814] tipc: Disabling bearer [ 467.589228][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.600268][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.711125][T10825] netlink: 'syz.5.1160': attribute type 3 has an invalid length. [ 467.727951][T10825] netlink: 'syz.5.1160': attribute type 1 has an invalid length. [ 467.745744][T10825] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1160'. [ 468.768445][T10828] ip6erspan0: entered allmulticast mode [ 468.914360][T10833] syzkaller0: entered promiscuous mode [ 468.943119][T10833] syzkaller0: entered allmulticast mode [ 470.342186][ T8204] net_ratelimit: 13 callbacks suppressed [ 470.568998][T10853] loop0: detected capacity change from 0 to 512 [ 470.591918][T10853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 470.678264][T10853] EXT4-fs (loop0): 1 truncate cleaned up [ 470.685298][T10853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.643202][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.224637][T10875] xt_hashlimit: max too large, truncated to 1048576 [ 473.432589][T10879] jffs2: notice: (10879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 473.544814][T10884] syzkaller0: entered promiscuous mode [ 473.566237][T10884] syzkaller0: entered allmulticast mode [ 474.946649][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 475.114044][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 476.326500][ T60] net_ratelimit: 17 callbacks suppressed [ 476.428881][T10911] bond4: entered promiscuous mode [ 476.448774][T10911] bond4: entered allmulticast mode [ 479.433399][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 481.813414][ T60] net_ratelimit: 18 callbacks suppressed [ 484.955493][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 485.784921][T10991] syz.0.1203 (10991) used greatest stack depth: 16520 bytes left [ 486.787470][T11008] nfs: Unknown parameter 'fscontext' [ 487.681753][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 487.691036][ T41] net_ratelimit: 17 callbacks suppressed [ 488.017068][T11018] wireguard: wg2: Could not create IPv4 socket [ 489.179148][T11011] vlan1: entered allmulticast mode [ 489.264482][T11011] bridge5: entered allmulticast mode [ 489.292042][T11020] bridge5: port 1(erspan0) entered blocking state [ 489.320191][T11020] bridge5: port 1(erspan0) entered disabled state [ 489.434383][T11020] erspan0: entered allmulticast mode [ 489.441943][T11020] erspan0: entered promiscuous mode [ 489.449917][T11020] bridge5: port 1(erspan0) entered blocking state [ 489.456457][T11020] bridge5: port 1(erspan0) entered forwarding state [ 489.489257][T11021] bond2: (slave lo): Releasing backup interface [ 489.522327][T11021] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 489.757639][T11021] erspan0: left allmulticast mode [ 489.919964][T11021] erspan0: left promiscuous mode [ 490.098486][T11021] bridge5: port 1(erspan0) entered disabled state [ 490.689159][T11021] bridge_slave_0: left allmulticast mode [ 490.851984][T11021] bridge_slave_0: left promiscuous mode [ 490.865685][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.168395][T11021] bridge_slave_1: left allmulticast mode [ 491.182900][T11021] bridge_slave_1: left promiscuous mode [ 491.205454][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.290142][T11021] bond7: (slave veth0_to_bond): Releasing active interface [ 491.328027][T11021] veth0_to_bond: left promiscuous mode [ 491.366640][T11021] veth0_to_bond: left allmulticast mode [ 491.454392][T11021] bond0: (slave bond_slave_0): Releasing backup interface [ 491.691265][T11021] bond0: (slave bond_slave_1): Releasing backup interface [ 492.111092][T11021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.256346][T11021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.314229][T11021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.332323][T11021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.404257][T11021] veth3: left allmulticast mode [ 492.432594][T11021] veth3: left promiscuous mode [ 492.448576][T11021] bridge1: port 2(veth3) entered disabled state [ 492.492773][T11021] bond3: (slave geneve2): Releasing active interface [ 492.594881][T11021] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.635341][T11021] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.667696][T11021] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.676660][T11021] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.709870][T11021] bond4: (slave veth5): Releasing backup interface [ 492.750307][T11021] bond5: (slave bridge3): Releasing backup interface [ 492.759918][T11021] bond5: (slave bridge3): the permanent HWaddr of slave - 4e:76:f1:5f:aa:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 492.791266][T11021] bond5: (slave bridge4): making interface the new active one [ 493.232215][ C1] net_ratelimit: 15 callbacks suppressed [ 494.152562][T11021] bond5: (slave bridge4): Releasing backup interface [ 494.240911][T11048] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 494.252853][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 494.287726][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 494.370856][T11054] netlink: 'syz.2.1219': attribute type 4 has an invalid length. [ 494.378595][T11054] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1219'. [ 494.554723][T11054] .`: renamed from bond0 [ 494.624537][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1220'. [ 498.537879][T11102] loop5: detected capacity change from 0 to 512 [ 498.573587][T11102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 498.602055][T11102] System zones: 1-12 [ 498.722272][T11102] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1231: missing EA_INODE flag [ 498.957818][T11102] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1231: error while reading EA inode 12 err=-117 [ 499.219549][T11102] EXT4-fs (loop5): 1 orphan inode deleted [ 499.265947][T11102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.646936][ C1] net_ratelimit: 15 callbacks suppressed [ 500.499844][T11117] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 500.571167][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.716080][ C0] net_ratelimit: 13 callbacks suppressed [ 505.752598][T11164] loop5: detected capacity change from 0 to 1024 [ 505.996858][T11166] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 507.505900][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 508.072683][T11187] netlink: 'syz.2.1251': attribute type 10 has an invalid length. [ 508.082346][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.089451][T11187] bridge0: port 2(bridge_slave_1) entered listening state [ 508.096821][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.103919][T11187] bridge0: port 1(bridge_slave_0) entered listening state [ 508.851578][T11187] .`: (slave bridge0): Enslaving as an active interface with an up link [ 508.884591][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 509.017804][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 509.017817][ T27] audit: type=1326 audit(1793820457.545:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.5.1254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff5279fb19 code=0x0 [ 509.239171][T11203] bridge0: port 1(veth0_vlan) entered blocking state [ 509.246124][T11203] bridge0: port 1(veth0_vlan) entered disabled state [ 509.263723][T11203] veth0_vlan: entered allmulticast mode [ 509.280681][T11203] veth0_vlan: left allmulticast mode [ 509.377621][T11208] tipc: Enabling of bearer rejected, failed to enable media [ 509.406704][T11208] loop0: detected capacity change from 0 to 512 [ 509.449551][T11208] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1258: corrupted in-inode xattr: invalid ea_ino [ 509.463843][T11208] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1258: couldn't read orphan inode 15 (err -117) [ 509.477714][T11208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.265144][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.278393][ T41] net_ratelimit: 13 callbacks suppressed [ 511.830964][T11231] loop0: detected capacity change from 0 to 4096 [ 511.841812][T11231] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.865152][T11231] EXT4-fs (loop0): Test dummy encryption mode enabled [ 511.897747][T11231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.557921][T11258] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 513.878991][T11231] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 513.982156][ T42] IPVS: starting estimator thread 0... [ 514.118824][T11261] IPVS: using max 21 ests per chain, 50400 per kthread [ 515.015141][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.643038][T11275] 9pnet_fd: Insufficient options for proto=fd [ 516.873456][ T41] net_ratelimit: 10 callbacks suppressed [ 517.703187][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 518.059974][ T5879] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 518.095334][ T5879] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 518.143138][ T5879] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 518.172737][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.195669][ T5879] usb 1-1: Product: syz [ 518.200658][ T5879] usb 1-1: Manufacturer: syz [ 518.212710][ T5879] usb 1-1: SerialNumber: syz [ 518.223564][T11283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 518.253248][T11283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 518.266053][ T5879] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 518.284371][ T5879] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 518.296988][ T5879] usbserial_generic 1-1:1.0: generic converter detected [ 518.319953][ T5879] usb 1-1: generic converter now attached to ttyUSB0 [ 518.320823][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1282'. [ 519.055022][T11306] bond8: entered allmulticast mode [ 519.071102][T11308] loop5: detected capacity change from 0 to 4096 [ 519.084332][T11306] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.095229][T11308] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.175325][T11308] EXT4-fs (loop5): Test dummy encryption mode enabled [ 519.207705][T11308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.131851][ T8198] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.152399][T11310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 520.161954][T11310] macvlan2: entered allmulticast mode [ 520.268948][T11310] bond0: entered allmulticast mode [ 520.364650][T11310] bond8: (slave macvlan2): Enslaving as a backup interface with a down link [ 520.652711][T11311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1284'. [ 520.810808][ T790] usb 1-1: USB disconnect, device number 3 [ 520.895621][ T790] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 520.942558][ T790] usbserial_generic 1-1:1.0: device disconnected [ 520.961716][T11311] bond0 (unregistering): left allmulticast mode [ 521.142014][T11311] bond8: (slave macvlan2): Releasing backup interface [ 521.159060][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.172184][T11311] macvlan2 (unregistering): left allmulticast mode [ 521.220803][T11311] bond0 (unregistering): Released all slaves [ 522.364065][T10992] net_ratelimit: 11 callbacks suppressed [ 524.444814][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 524.453610][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 526.663803][T11363] loop5: detected capacity change from 0 to 4096 [ 526.671549][T11363] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.817437][T11363] EXT4-fs (loop5): Test dummy encryption mode enabled [ 526.943968][T11363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.964550][ T80] net_ratelimit: 12 callbacks suppressed [ 529.114086][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.576524][T11389] loop5: detected capacity change from 0 to 512 [ 529.589947][T11389] EXT4-fs: Ignoring removed i_version option [ 529.619526][T11389] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 530.101377][T11389] EXT4-fs (loop5): 1 truncate cleaned up [ 530.108372][T11389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.132172][T11387] EXT4-fs warning (device loop5): ext4_group_extend:1868: can't shrink FS - resize aborted [ 530.358171][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.826455][T11402] sctp: [Deprecated]: syz.5.1304 (pid 11402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.826455][T11402] Use struct sctp_sack_info instead [ 531.679079][T11409] futex_wake_op: syz.3.1305 tries to shift op by 144; fix this program [ 533.481548][ T41] net_ratelimit: 8 callbacks suppressed [ 534.243446][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.250111][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.954240][T11450] tipc: Enabling of bearer rejected, failed to enable media [ 539.129570][ T8204] net_ratelimit: 14 callbacks suppressed [ 540.570508][T11465] jffs2: notice: (11465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 540.858897][T11472] capability: warning: `syz.2.1321' uses 32-bit capabilities (legacy support in use) [ 541.092872][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.100112][ C1] bridge0: topology change detected, propagating [ 541.107067][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.114319][ C1] bridge0: topology change detected, propagating [ 543.942887][T11491] loop5: detected capacity change from 0 to 512 [ 543.970836][T11491] EXT4-fs error (device loop5): ext4_init_orphan_info:585: comm syz.5.1327: inode #0: comm syz.5.1327: iget: illegal inode # [ 543.985003][T11491] EXT4-fs (loop5): Remounting filesystem read-only [ 543.991512][T11491] EXT4-fs (loop5): get orphan inode failed [ 543.997647][T11491] EXT4-fs (loop5): mount failed [ 545.150291][T11494] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 545.412759][ T80] net_ratelimit: 11 callbacks suppressed [ 551.631343][ T8198] net_ratelimit: 13 callbacks suppressed [ 553.762263][ T2975] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.166741][T11567] loop0: detected capacity change from 0 to 512 [ 554.175419][T11567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 554.312688][T11567] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 554.321215][T11567] EXT4-fs (loop0): orphan cleanup on readonly fs [ 554.429390][T11572] trusted_key: encrypted_key: insufficient parameters specified [ 554.860043][T11567] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.1346: bad orphan inode 15 [ 554.884441][T11567] ext4_test_bit(bit=14, block=5) = 0 [ 554.912237][T11567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 555.745856][T11582] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 556.170913][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.064770][ C1] net_ratelimit: 11 callbacks suppressed [ 557.327266][T11589] syzkaller0: entered promiscuous mode [ 557.332769][T11589] syzkaller0: entered allmulticast mode [ 557.637601][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 559.707836][T11633] loop5: detected capacity change from 0 to 1024 [ 559.721253][T11633] ext4: Unknown parameter 'context' [ 560.898941][T11642] loop0: detected capacity change from 0 to 512 [ 560.909704][T11642] EXT4-fs: Ignoring removed mblk_io_submit option [ 561.013317][T11642] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 561.204982][T11642] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2974: inode #15: comm syz.0.1364: corrupted xattr block 252: invalid header [ 561.226138][T11642] EXT4-fs (loop0): Remounting filesystem read-only [ 561.232766][T11642] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 561.244639][T11642] EXT4-fs (loop0): 1 orphan inode deleted [ 561.264103][T11642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.709348][T10209] net_ratelimit: 12 callbacks suppressed [ 562.811492][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.964097][T11661] netdevsim netdevsim3 netdevsim0: Caught tx_queue_len zero misconfig [ 566.227714][T11709] loop0: detected capacity change from 0 to 1024 [ 566.441877][T11709] hfsplus: failed to load catalog file [ 566.502463][T11721] futex_wake_op: syz.5.1384 tries to shift op by 144; fix this program [ 568.141866][ T2980] net_ratelimit: 8 callbacks suppressed [ 569.729847][T11760] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1395'. [ 570.345512][T11772] loop0: detected capacity change from 0 to 512 [ 570.752761][T11772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 570.853211][T11772] EXT4-fs (loop0): 1 truncate cleaned up [ 570.860159][T11772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.212345][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.695229][ T11] net_ratelimit: 10 callbacks suppressed [ 576.387551][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1409'. [ 577.942959][T11840] netlink: 'syz.3.1415': attribute type 16 has an invalid length. [ 577.951004][T11840] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1415'. [ 578.030384][T11844] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 578.376817][T11849] loop5: detected capacity change from 0 to 128 [ 579.160469][ T11] net_ratelimit: 9 callbacks suppressed [ 580.024418][ T27] audit: type=1326 audit(1793820528.307:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.5.1420" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff5279fb19 code=0x0 [ 580.646440][T11865] xt_SECMARK: invalid mode: 2 [ 582.230085][T11876] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 582.352664][T11885] v: renamed from dummy0 (while UP) [ 582.398965][T11880] tipc: Enabled bearer , priority 0 [ 582.410039][T11880] tipc: Resetting bearer [ 582.431080][T11879] tipc: Disabling bearer [ 582.767710][T11893] netlink: 'syz.5.1431': attribute type 15 has an invalid length. [ 586.268167][ T1135] net_ratelimit: 13 callbacks suppressed [ 586.291608][T11942] loop5: detected capacity change from 0 to 256 [ 587.848228][T11962] loop0: detected capacity change from 0 to 4096 [ 588.739736][T11967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.771298][T11968] loop5: detected capacity change from 0 to 8 [ 588.778363][ T9388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.954818][T11968] squashfs image failed sanity check [ 589.915300][T11850] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 591.812739][ T9388] net_ratelimit: 13 callbacks suppressed [ 591.946729][T11993] netlink: 'syz.2.1454': attribute type 4 has an invalid length. [ 592.705912][ T790] lo speed is unknown, defaulting to 1000 [ 594.172237][T12019] xt_policy: output policy not valid in PREROUTING and INPUT [ 597.860223][ T2980] net_ratelimit: 12 callbacks suppressed [ 601.420034][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.426404][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.792850][T12082] autofs4:pid:12082:autofs_fill_super: called with bogus options [ 601.819199][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1471'. [ 603.495752][ T2980] net_ratelimit: 16 callbacks suppressed [ 608.522570][T12127] loop5: detected capacity change from 0 to 256 [ 609.586244][ T50] net_ratelimit: 12 callbacks suppressed [ 611.178438][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1489'. [ 611.249757][T12151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.654518][T12151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.912927][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 615.211633][T10209] net_ratelimit: 11 callbacks suppressed [ 619.967822][T12237] xt_SECMARK: invalid mode: 2 [ 620.706541][ T23] net_ratelimit: 19 callbacks suppressed [ 621.762630][T12257] tipc: Enabling of bearer rejected, failed to enable media [ 624.457615][T12248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.886847][T10212] net_ratelimit: 23 callbacks suppressed [ 632.647857][ C0] net_ratelimit: 12 callbacks suppressed [ 635.040749][T12425] loop0: detected capacity change from 0 to 128 [ 635.106278][T12425] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 636.171048][T12248] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 636.275065][T12437] wireguard: wg2: Could not create IPv4 socket [ 638.460185][T10996] net_ratelimit: 16 callbacks suppressed [ 639.518243][T12472] loop0: detected capacity change from 0 to 4096 [ 639.628763][T12495] bridge0: port 1(veth0_vlan) entered blocking state [ 639.671465][T12495] bridge0: port 1(veth0_vlan) entered disabled state [ 639.710741][T12495] veth0_vlan: entered allmulticast mode [ 639.871703][T12495] veth0_vlan: left allmulticast mode [ 640.198786][T12472] ntfs3: loop0: ino=19, mi_enum_attr [ 640.345946][T12472] ntfs3: loop0: Mark volume as dirty due to NTFS errors Stopping sshd: stopped /usr/sbin/sshd (pid 5537) OK Stopping crond: stopped /usr/sbin/crond (pid 5522) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5447) [ 643.304801][T12550] loop5: detected capacity change from 0 to 512 [ 643.387515][T12550] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 643.928714][ T9388] net_ratelimit: 14 callbacks suppressed [ 643.968024][T12550] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1539: invalid indirect mapped block 256 (level 1) Stopping network[ 644.361115][T12550] EXT4-fs (loop5): Remounting filesystem read-only : [ 644.621017][T12550] EXT4-fs (loop5): 1 truncate cleaned up [ 644.653739][T12550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.143546][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. OK Stopping iptables: OK Stopping system message bus: [ 649.022008][ T6895] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.004313][ T9388] net_ratelimit: 13 callbacks suppressed [ 650.175120][T12628] loop5: detected capacity change from 0 to 4096 [ 650.320091][T12630] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds done [ 655.272846][T12697] loop5: detected capacity change from 0 to 4096 [ 655.375988][T12698] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 655.916914][T12246] net_ratelimit: 13 callbacks suppressed [ 659.751072][T10996] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) Stopping klogd: [ 661.636900][T12731] syzkaller0: entered promiscuous mode [ 661.679255][T12742] loop5: detected capacity change from 0 to 4096 [ 661.716615][T12745] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 661.735842][T12731] syzkaller0: entered allmulticast mode [ 661.784040][ T8204] net_ratelimit: 15 callbacks suppressed OK Stopping acpid: [ 663.579586][T12773] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1577'. [ 663.848115][T12780] loop0: detected capacity change from 0 to 512 [ 663.859740][T12780] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.1590: inode #0: comm syz.0.1590: iget: illegal inode # [ 663.874811][T12780] EXT4-fs (loop0): Remounting filesystem read-only [ 663.881324][T12780] EXT4-fs (loop0): get orphan inode failed [ 663.887442][T12780] EXT4-fs (loop0): mount failed OK Stopping syslogd: [ 667.817517][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.824822][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 667.851848][T12246] net_ratelimit: 14 callbacks suppressed stopped /sbin/syslogd (pid 5135) OK serialport: VM disconnected.