last executing test programs: 3m17.94494184s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0\n', 0x2) 3m17.694307096s ago: executing program 2 (id=7): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 3m15.821349889s ago: executing program 2 (id=11): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x11, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m15.401258359s ago: executing program 2 (id=13): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102) 3m12.591885733s ago: executing program 2 (id=17): r0 = memfd_create(0x0, 0x1) pwritev(r0, 0x0, 0x0, 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f0000001240)=[{&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1f", 0x1c}], 0x1) 3m11.758096643s ago: executing program 2 (id=23): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0x7}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 3m10.646208178s ago: executing program 32 (id=23): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0x7}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 6.796253652s ago: executing program 3 (id=1050): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 6.362111492s ago: executing program 3 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.269628254s ago: executing program 3 (id=1055): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) 5.954580122s ago: executing program 3 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300)="fb", 0x0, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 5.716338377s ago: executing program 3 (id=1065): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./dev/kmsg\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x80000) r3 = socket(0xa, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x80000009}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181d000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.830021838s ago: executing program 1 (id=1074): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r0, 0x0, 0x5) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 4.72521953s ago: executing program 4 (id=1075): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080)="38c0ec5668289e0a", &(0x7f0000000100)=""/83}, 0x20) 4.70418145s ago: executing program 0 (id=1076): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 4.683161891s ago: executing program 1 (id=1077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.466148486s ago: executing program 4 (id=1078): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x25, 0x6, 0x2000000, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) 4.452034476s ago: executing program 1 (id=1079): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22400, 0x0) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000009c0)="ec663189d3", 0x5}], 0x1, &(0x7f0000000080)=[@rights={{0x20, 0x1, 0x1, [r0, r3, r1, r3]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x60}, 0x0) 4.28668774s ago: executing program 1 (id=1080): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.192892672s ago: executing program 0 (id=1081): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) 4.030089626s ago: executing program 1 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.029827536s ago: executing program 4 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.940724538s ago: executing program 0 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300)="fb", 0x0, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 3.87387769s ago: executing program 1 (id=1085): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write(r2, &(0x7f0000000000), 0x0) 3.798112191s ago: executing program 4 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.616795485s ago: executing program 0 (id=1087): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080)="38c0ec5668289e0a", &(0x7f0000000100)=""/83}, 0x20) 3.300827243s ago: executing program 4 (id=1088): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./dev/kmsg\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0xa, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80000009}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181d000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.53877464s ago: executing program 3 (id=1089): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 2.238115337s ago: executing program 0 (id=1090): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5c", 0x68}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a98", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x1e7}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe4f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103e8cf0f5e465977f0fda712316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706fe824dba5a0c82ac91c013a0060b74b21214c153173924c7718bac4995c4b759eb4ee6c86c12d448dab3360b579b1f32b3c638fadfc08b850b8dd5ec65d809ad604", 0xf4, 0x10008095, 0x0, 0x0) 1.816434797s ago: executing program 4 (id=1091): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x2]}}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) 0s ago: executing program 0 (id=1092): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 82.756741][ T5768] cgroup: Unknown subsys name 'net' [ 82.894096][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.607932][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.300129][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.308917][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.316975][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.332345][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.341359][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.352268][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.363990][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.385763][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.393798][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.437088][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.453184][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.464560][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.473047][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.481419][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.489723][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.498031][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.506087][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.515075][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.522916][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.526407][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.533560][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.556743][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.565234][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.572768][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.063797][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.130998][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 87.165755][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 87.270466][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.364402][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.376063][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.383830][ T5783] bridge_slave_0: entered allmulticast mode [ 87.391869][ T5783] bridge_slave_0: entered promiscuous mode [ 87.476096][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.483505][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.497281][ T5783] bridge_slave_1: entered allmulticast mode [ 87.505101][ T5783] bridge_slave_1: entered promiscuous mode [ 87.669937][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.685584][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.693535][ T5784] bridge_slave_0: entered allmulticast mode [ 87.701591][ T5784] bridge_slave_0: entered promiscuous mode [ 87.715469][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.753232][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.762486][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.770491][ T5779] bridge_slave_0: entered allmulticast mode [ 87.778749][ T5779] bridge_slave_0: entered promiscuous mode [ 87.788729][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.796272][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.804184][ T5779] bridge_slave_1: entered allmulticast mode [ 87.812736][ T5779] bridge_slave_1: entered promiscuous mode [ 87.830530][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.838797][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.846441][ T5784] bridge_slave_1: entered allmulticast mode [ 87.854621][ T5784] bridge_slave_1: entered promiscuous mode [ 87.864992][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.874907][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.886933][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.894424][ T5785] bridge_slave_0: entered allmulticast mode [ 87.904341][ T5785] bridge_slave_0: entered promiscuous mode [ 87.954286][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.962004][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.969924][ T5785] bridge_slave_1: entered allmulticast mode [ 87.977682][ T5785] bridge_slave_1: entered promiscuous mode [ 88.032747][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.048414][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.061774][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.075024][ T5783] team0: Port device team_slave_0 added [ 88.085043][ T5783] team0: Port device team_slave_1 added [ 88.106841][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.151928][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.202130][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.229031][ T5779] team0: Port device team_slave_0 added [ 88.246891][ T5784] team0: Port device team_slave_0 added [ 88.254092][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.261570][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.287966][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.313000][ T5779] team0: Port device team_slave_1 added [ 88.324699][ T5784] team0: Port device team_slave_1 added [ 88.331392][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.341929][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.371941][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.387115][ T5785] team0: Port device team_slave_0 added [ 88.432382][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.439654][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.465920][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.481124][ T5785] team0: Port device team_slave_1 added [ 88.503607][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.511378][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.539060][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.554534][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.562231][ T5781] Bluetooth: hci0: command tx timeout [ 88.562252][ T5792] Bluetooth: hci3: command tx timeout [ 88.574415][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.602874][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.635476][ T5792] Bluetooth: hci2: command tx timeout [ 88.635500][ T5781] Bluetooth: hci1: command tx timeout [ 88.653887][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.661325][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.688122][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.742127][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.749482][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.777453][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.821226][ T5784] hsr_slave_0: entered promiscuous mode [ 88.828780][ T5784] hsr_slave_1: entered promiscuous mode [ 88.852292][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.862093][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.891205][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.910773][ T5779] hsr_slave_0: entered promiscuous mode [ 88.917762][ T5779] hsr_slave_1: entered promiscuous mode [ 88.924503][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.933721][ T5779] Cannot create hsr debugfs directory [ 88.960441][ T5783] hsr_slave_0: entered promiscuous mode [ 88.967929][ T5783] hsr_slave_1: entered promiscuous mode [ 88.974689][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.983791][ T5783] Cannot create hsr debugfs directory [ 89.143559][ T5785] hsr_slave_0: entered promiscuous mode [ 89.151425][ T5785] hsr_slave_1: entered promiscuous mode [ 89.158601][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.167947][ T5785] Cannot create hsr debugfs directory [ 89.566022][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.581278][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.592547][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.604587][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.702177][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.717554][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.732127][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.743000][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.868495][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.881800][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.894294][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.906083][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.970023][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.058051][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.070214][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.091452][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.103762][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.136997][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.174318][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.181891][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.227015][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.250788][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.258093][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.341624][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.391497][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.398942][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.423666][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.467604][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.474913][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.506673][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.533899][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.587642][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.595419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.628107][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.635637][ T5792] Bluetooth: hci3: command tx timeout [ 90.640594][ T5781] Bluetooth: hci0: command tx timeout [ 90.652738][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.660464][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.715945][ T5781] Bluetooth: hci2: command tx timeout [ 90.716062][ T5792] Bluetooth: hci1: command tx timeout [ 90.733989][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.787486][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.794723][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.847946][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.855180][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.974112][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.998251][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.069750][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.110435][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.257246][ T5784] veth0_vlan: entered promiscuous mode [ 91.330309][ T5784] veth1_vlan: entered promiscuous mode [ 91.349795][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.442754][ T5784] veth0_macvtap: entered promiscuous mode [ 91.462747][ T5784] veth1_macvtap: entered promiscuous mode [ 91.528895][ T5783] veth0_vlan: entered promiscuous mode [ 91.592777][ T5783] veth1_vlan: entered promiscuous mode [ 91.615012][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.641294][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.657356][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.667010][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.678625][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.689064][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708051][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.750575][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.828999][ T5783] veth0_macvtap: entered promiscuous mode [ 91.872901][ T5783] veth1_macvtap: entered promiscuous mode [ 91.908691][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.941496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.016209][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.030275][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.042239][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.069121][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.072237][ T5785] veth0_vlan: entered promiscuous mode [ 92.091115][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.103435][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.105646][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.127193][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.134970][ T5779] veth0_vlan: entered promiscuous mode [ 92.161209][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.186817][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198954][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.208704][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.224372][ T5779] veth1_vlan: entered promiscuous mode [ 92.269317][ T5785] veth1_vlan: entered promiscuous mode [ 92.353205][ T5779] veth0_macvtap: entered promiscuous mode [ 92.399482][ T5779] veth1_macvtap: entered promiscuous mode [ 92.466841][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.493942][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.507689][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.519146][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.530124][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.541176][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.553970][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.565537][ T5785] veth0_macvtap: entered promiscuous mode [ 92.593872][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.636123][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.666845][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.678315][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.693212][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.717550][ T5792] Bluetooth: hci0: command tx timeout [ 92.718747][ T5781] Bluetooth: hci3: command tx timeout [ 92.735543][ T5785] veth1_macvtap: entered promiscuous mode [ 92.759482][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.768787][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.780209][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790006][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.799516][ T5781] Bluetooth: hci2: command tx timeout [ 92.805005][ T5781] Bluetooth: hci1: command tx timeout [ 92.840629][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.869972][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.888791][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.918423][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.934096][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.945199][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.964795][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.987217][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.001150][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.019729][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.031528][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.042893][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.054430][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.065195][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.079962][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.113281][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.211665][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.242658][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.253075][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.262613][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.419267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.456577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.489052][ T5857] syz.2.7[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.678679][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.709661][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.865458][ T5862] loop3: detected capacity change from 0 to 512 [ 93.866988][ T5862] ======================================================= [ 93.866988][ T5862] WARNING: The mand mount option has been deprecated and [ 93.866988][ T5862] and is ignored by this kernel. Remove the mand [ 93.866988][ T5862] option from the mount to silence this warning. [ 93.866988][ T5862] ======================================================= [ 93.965584][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.090891][ T5862] EXT4-fs error (device loop3): __ext4_iget:5079: inode #11: block 16777240: comm syz.3.4: invalid block [ 94.107970][ T5862] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4: couldn't read orphan inode 11 (err -117) [ 94.142361][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.690042][ T5857] loop2: detected capacity change from 0 to 8192 [ 94.707942][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.795529][ T5781] Bluetooth: hci0: command tx timeout [ 94.798691][ T5792] Bluetooth: hci3: command tx timeout [ 94.856448][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.869263][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.877795][ T5792] Bluetooth: hci2: command tx timeout [ 94.894114][ T5792] Bluetooth: hci1: command tx timeout [ 95.091953][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.125922][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.173747][ T5857] syz.2.7 (5857) used greatest stack depth: 20944 bytes left [ 95.672046][ T5880] loop1: detected capacity change from 0 to 1024 [ 95.850802][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.921953][ T5885] loop2: detected capacity change from 0 to 128 [ 95.941620][ T5885] EXT4-fs: Ignoring removed bh option [ 96.156054][ T5887] loop0: detected capacity change from 0 to 1024 [ 96.228741][ T5887] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 96.241608][ T5887] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 96.252446][ T5887] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.276152][ T5887] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #3: comm syz.0.1: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 96.335651][ T5887] EXT4-fs (loop0): no journal found [ 96.341210][ T5887] EXT4-fs (loop0): can't get journal size [ 96.376184][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.768156][ T5885] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.855924][ T5885] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.895253][ T5887] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.097486][ T5885] loop2: detected capacity change from 128 to 64 [ 97.179742][ T5895] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory [ 97.338743][ T28] audit: type=1107 audit(1785578148.902:2): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.486739][ T2137] cfg80211: failed to load regulatory.db [ 97.583996][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.037706][ T5895] EXT4-fs error (device loop2): ext4_ext_tree_init:891: inode #13: comm syz.2.13: mark_inode_dirty error [ 98.050807][ T5895] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory [ 98.063979][ T5895] EXT4-fs error (device loop2): __ext4_new_inode:1354: inode #13: comm syz.2.13: mark_inode_dirty error [ 98.077508][ T5898] veth1_macvtap: left promiscuous mode [ 98.116993][ T5895] EXT4-fs error (device loop2) in __ext4_new_inode:1356: Out of memory [ 98.189039][ T5895] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory [ 98.232981][ T5895] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #13: comm syz.2.13: mark_inode_dirty error [ 98.265046][ T5900] loop3: detected capacity change from 0 to 512 [ 98.280578][ T5895] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 98.322068][ T5900] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.343008][ T5900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 98.396633][ T5900] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.403259][ T5900] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.16: iget: bad i_size value: 12154761577498 [ 98.421909][ T5900] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.16: couldn't read orphan inode 13 (err -117) [ 98.468431][ T5900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.568942][ T5900] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.16: dx entry: limit 65535 != root limit 120 [ 98.627059][ T5900] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.16: Corrupt directory, running e2fsck is recommended [ 98.763016][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.935720][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.030153][ T5784] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Out of memory [ 99.095755][ T5784] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error [ 99.127418][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.182241][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.967918][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.120129][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.301531][ T5911] syzkaller0: entered promiscuous mode [ 100.307592][ T5911] syzkaller0: entered allmulticast mode [ 100.357652][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.818672][ T5929] loop3: detected capacity change from 0 to 512 [ 100.873852][ T5929] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.905657][ T5929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 100.913999][ T5929] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.934467][ T5929] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.27: iget: bad i_size value: 12154761577498 [ 101.004760][ T5929] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.27: couldn't read orphan inode 13 (err -117) [ 101.848359][ T5929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.014921][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.037213][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.052079][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.060673][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.069316][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.077309][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.179482][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.158753][ T5792] Bluetooth: hci1: command tx timeout [ 106.236184][ T5792] Bluetooth: hci1: command tx timeout [ 106.422065][ T5962] loop0: detected capacity change from 0 to 512 [ 106.469526][ T5962] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.491004][ T5962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.538906][ T5962] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.615613][ T5962] EXT4-fs (loop0): 1 truncate cleaned up [ 106.623050][ T5962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.701495][ T5971] loop1: detected capacity change from 0 to 1024 [ 106.742890][ T5971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.769770][ T5971] EXT4-fs: Ignoring removed orlov option [ 106.854235][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.870222][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 107.927249][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.943628][ T5988] loop3: detected capacity change from 0 to 1024 [ 107.966370][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.014163][ T5988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.329137][ T5792] Bluetooth: hci1: command tx timeout [ 108.977401][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.992466][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.001314][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.006139][ T5934] bridge_slave_0: entered allmulticast mode [ 109.032527][ T5934] bridge_slave_0: entered promiscuous mode [ 109.072910][ T6021] loop1: detected capacity change from 0 to 1024 [ 109.083699][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.101401][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.142616][ T5934] bridge_slave_1: entered allmulticast mode [ 109.170504][ T5934] bridge_slave_1: entered promiscuous mode [ 109.191977][ T6021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.395423][ T5792] Bluetooth: hci1: command tx timeout [ 110.539467][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.608850][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.653643][ T6041] loop3: detected capacity change from 0 to 1024 [ 110.676010][ T6043] loop0: detected capacity change from 0 to 512 [ 110.696513][ T6041] EXT4-fs: inline encryption not supported [ 110.745559][ T6043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.832916][ T6043] EXT4-fs (loop0): 1 truncate cleaned up [ 110.856363][ T6041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.888182][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.152917][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.809081][ T5934] team0: Port device team_slave_0 added [ 111.887946][ T5934] team0: Port device team_slave_1 added [ 112.033438][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.319291][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.359442][ T1138] hsr_slave_0: left promiscuous mode [ 112.376274][ T1138] hsr_slave_1: left promiscuous mode [ 112.388200][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.415462][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.468654][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.501410][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.563034][ T1138] bridge_slave_1: left allmulticast mode [ 112.569956][ T1138] bridge_slave_1: left promiscuous mode [ 112.579077][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.643228][ T1138] bridge_slave_0: left allmulticast mode [ 112.686213][ T1138] bridge_slave_0: left promiscuous mode [ 112.693097][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.908371][ T1138] veth1_macvtap: left promiscuous mode [ 112.914567][ T1138] veth0_macvtap: left promiscuous mode [ 112.933746][ T1138] veth1_vlan: left promiscuous mode [ 112.952342][ T1138] veth0_vlan: left promiscuous mode [ 114.228750][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 114.304721][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 114.391360][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.491117][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.029589][ T1138] bond0 (unregistering): Released all slaves [ 115.164442][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.171716][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.204216][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.229227][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.242486][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.282938][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.653507][ T5934] hsr_slave_0: entered promiscuous mode [ 115.710532][ T5934] hsr_slave_1: entered promiscuous mode [ 116.584523][ T5934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.856613][ T5934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.123101][ T5934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.577517][ T5934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.083990][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.158055][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.195071][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.203104][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.280721][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.288016][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.900336][ T6183] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 119.049445][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.149311][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.170821][ T6183] bond0 (unregistering): Released all slaves [ 119.253197][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.037471][ T5934] veth0_vlan: entered promiscuous mode [ 120.053013][ T6213] Zero length message leads to an empty skb [ 120.079193][ T5934] veth1_vlan: entered promiscuous mode [ 120.199505][ T5934] veth0_macvtap: entered promiscuous mode [ 120.300151][ T5934] veth1_macvtap: entered promiscuous mode [ 120.380130][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.425698][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.452982][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.484590][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.500031][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.511395][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.523752][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.643690][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.669613][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.693703][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.728188][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.762938][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.792868][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.825854][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.854650][ T5934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.864126][ T5934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.873438][ T5934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.882792][ T5934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.504477][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.540353][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.673402][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.704462][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.526469][ T6273] loop0: detected capacity change from 0 to 128 [ 123.552828][ T6273] EXT4-fs: Ignoring removed bh option [ 123.643822][ T6273] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.656816][ T6273] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.684704][ T28] audit: type=1804 audit(1785578175.342:3): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.110" name="/newroot/45/mnt/bus" dev="loop0" ino=12 res=1 errno=0 [ 123.752581][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.490395][ T6297] loop1: detected capacity change from 0 to 512 [ 125.514806][ T6297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.594132][ T6297] EXT4-fs (loop1): 1 truncate cleaned up [ 125.613410][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.815577][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.115211][ T6311] loop4: detected capacity change from 0 to 128 [ 127.131000][ T6311] EXT4-fs: Ignoring removed bh option [ 127.217938][ T6311] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.269805][ T6311] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.374611][ T28] audit: type=1804 audit(1785578179.032:4): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.120" name="/newroot/5/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 127.460694][ T5934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.580696][ T6372] usb usb8: usbfs: process 6372 (syz.3.130) did not claim interface 0 before use [ 133.281143][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.289537][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.698838][ T6421] loop0: detected capacity change from 0 to 512 [ 135.724990][ T6421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.832400][ T6421] EXT4-fs (loop0): 1 truncate cleaned up [ 135.874781][ T6421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.624411][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.781163][ T6477] loop0: detected capacity change from 0 to 128 [ 138.884065][ T5896] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.783100][ T6486] loop4: detected capacity change from 0 to 512 [ 139.850928][ T6486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.973532][ T6486] EXT4-fs (loop4): 1 truncate cleaned up [ 140.037794][ T6486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.981571][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.056549][ T6583] loop0: detected capacity change from 0 to 512 [ 146.109539][ T6583] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.200280][ T6583] EXT4-fs (loop0): 1 truncate cleaned up [ 146.207643][ T6583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.553777][ T6597] loop1: detected capacity change from 0 to 128 [ 146.569001][ T6597] EXT4-fs: Ignoring removed bh option [ 146.612965][ T6597] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.633861][ T6597] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.853365][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.587416][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.583670][ T6630] loop1: detected capacity change from 0 to 128 [ 149.596876][ T6630] EXT4-fs: Ignoring removed bh option [ 149.626038][ T6630] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.648554][ T6630] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.779845][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.599150][ T6656] syzkaller0: entered promiscuous mode [ 152.605586][ T6656] syzkaller0: entered allmulticast mode [ 153.868740][ T6693] loop0: detected capacity change from 0 to 128 [ 154.519373][ T6711] loop4: detected capacity change from 0 to 128 [ 154.566521][ T6711] EXT4-fs: Ignoring removed bh option [ 154.626891][ T6711] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.686263][ T6711] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.733666][ T28] audit: type=1804 audit(1785578206.392:5): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.218" name="/newroot/27/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 154.858459][ T5934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.064877][ T6722] loop0: detected capacity change from 0 to 128 [ 155.220484][ T6724] loop0: detected capacity change from 0 to 512 [ 155.259123][ T6724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.567694][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.607195][ T6738] loop1: detected capacity change from 0 to 128 [ 155.638083][ T6738] EXT4-fs: Ignoring removed bh option [ 155.699591][ T6738] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.757256][ T6738] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.819683][ T6744] tipc: Enabling of bearer rejected, failed to enable media [ 155.864530][ T28] audit: type=1804 audit(1785578207.522:6): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.229" name="/newroot/61/mnt/bus" dev="loop1" ino=12 res=1 errno=0 [ 155.943712][ T6746] loop3: detected capacity change from 0 to 128 [ 156.033203][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.806944][ T6783] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.987805][ T6787] loop4: detected capacity change from 0 to 128 [ 157.028270][ T6787] EXT4-fs: Ignoring removed bh option [ 157.095149][ T6787] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.109773][ T6787] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.795319][ T28] audit: type=1804 audit(1785578209.452:7): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.242" name="/newroot/34/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 157.943579][ T6797] loop1: detected capacity change from 0 to 128 [ 158.067037][ T5934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.244960][ T6800] loop0: detected capacity change from 0 to 1024 [ 158.418210][ T6800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.785292][ C0] sched: RT throttling activated [ 159.263475][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.503012][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 159.521424][ T6826] loop4: detected capacity change from 0 to 128 [ 159.536966][ T6826] EXT4-fs: Ignoring removed bh option [ 159.594793][ T6826] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.632239][ T6826] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.741872][ T28] audit: type=1804 audit(1785578211.402:8): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.253" name="/newroot/37/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 159.809706][ T5934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.964049][ T6836] loop4: detected capacity change from 0 to 1024 [ 160.035580][ T6836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.132520][ T6842] loop0: detected capacity change from 0 to 512 [ 160.170410][ T6842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.263222][ T6842] EXT4-fs (loop0): 1 truncate cleaned up [ 160.274076][ T6842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.680986][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.791359][ T6857] loop3: detected capacity change from 0 to 128 [ 160.830131][ T6857] EXT4-fs: Ignoring removed bh option [ 160.924887][ T6857] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.985749][ T6857] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.152881][ T28] audit: type=1804 audit(1785578212.812:9): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.265" name="/newroot/58/mnt/bus" dev="loop3" ino=12 res=1 errno=0 [ 161.290823][ T5783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.896259][ T6887] loop3: detected capacity change from 0 to 1024 [ 162.003194][ T6887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.476453][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.706833][ T6908] loop1: detected capacity change from 0 to 128 [ 162.753745][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.766837][ T6908] EXT4-fs: Ignoring removed bh option [ 162.810084][ T6908] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.871876][ T6908] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.082206][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.389727][ T6928] loop0: detected capacity change from 0 to 512 [ 163.457634][ T6928] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.530793][ T6928] EXT4-fs (loop0): 1 truncate cleaned up [ 163.538522][ T6928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.824326][ T6940] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 163.894092][ T6941] loop3: detected capacity change from 0 to 1024 [ 164.017487][ T6941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.040330][ T6948] loop1: detected capacity change from 0 to 128 [ 164.048299][ T6948] EXT4-fs: Ignoring removed bh option [ 164.092980][ T6948] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.125932][ T6948] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.482171][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.884508][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.506882][ T6982] loop4: detected capacity change from 0 to 256 [ 166.684111][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.860341][ T6994] loop0: detected capacity change from 0 to 128 [ 166.892253][ T6994] EXT4-fs: Ignoring removed bh option [ 166.953700][ T6994] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.999093][ T6994] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.053151][ T7000] loop3: detected capacity change from 0 to 1024 [ 167.147188][ T7000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.167665][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.796807][ T7022] loop1: detected capacity change from 0 to 512 [ 167.822310][ T7022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.916724][ T7022] EXT4-fs (loop1): 1 truncate cleaned up [ 167.923917][ T7022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.017965][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.312264][ T7033] loop4: detected capacity change from 0 to 128 [ 168.326312][ T7033] EXT4-fs: Ignoring removed bh option [ 168.376724][ T7033] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.406397][ T7033] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.563562][ T5934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.845478][ T7045] usb usb1: usbfs: process 7045 (syz.4.310) did not claim interface 0 before use [ 169.778228][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.946854][ T7058] loop1: detected capacity change from 0 to 1024 [ 169.980449][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.362513][ T7064] netlink: 'syz.3.316': attribute type 83 has an invalid length. [ 170.603493][ T7068] loop3: detected capacity change from 0 to 128 [ 170.624744][ T7068] EXT4-fs: Ignoring removed bh option [ 170.670789][ T7068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.742753][ T7068] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.967713][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.997082][ T5783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.156007][ T7078] tipc: Started in network mode [ 171.160991][ T7078] tipc: Node identity 4, cluster identity 4711 [ 171.243249][ T7078] tipc: Node number set to 4 [ 172.155090][ T28] audit: type=1326 audit(1785578223.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7659e019 code=0x0 [ 172.988501][ T7121] loop4: detected capacity change from 0 to 1024 [ 173.005205][ T7123] loop1: detected capacity change from 0 to 128 [ 173.025633][ T7123] EXT4-fs: Ignoring removed bh option [ 173.085997][ T7123] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.107498][ T7123] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.137412][ T7121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.263972][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 173.415605][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.592290][ T7140] loop0: detected capacity change from 0 to 512 [ 173.688217][ T7140] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.836403][ T7140] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 174.193049][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.272733][ T7151] tipc: Started in network mode [ 174.311127][ T7151] tipc: Node identity 4, cluster identity 4711 [ 174.341310][ T7151] tipc: Node number set to 4 [ 174.838620][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 175.023274][ T7172] loop4: detected capacity change from 0 to 512 [ 175.074587][ T7172] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.345: inode has both inline data and extents flags [ 175.098684][ T7172] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.345: couldn't read orphan inode 15 (err -117) [ 175.179344][ T7172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.309880][ T28] audit: type=1800 audit(1785578226.972:11): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.345" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 175.330473][ T7175] loop0: detected capacity change from 0 to 1024 [ 175.377125][ T7175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.588834][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.072598][ T7188] loop3: detected capacity change from 0 to 1024 [ 176.090148][ T7188] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 176.155069][ T7188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.234817][ T28] audit: type=1800 audit(1785578227.892:12): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 176.303166][ T28] audit: type=1804 audit(1785578227.892:13): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.349" name="/newroot/80/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 176.532888][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.611680][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.762115][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 180.355218][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 180.695229][ T7237] loop1: detected capacity change from 0 to 512 [ 182.565807][ T7237] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 182.591918][ T7237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 182.619373][ T7237] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.640028][ T7237] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.365: iget: bad i_size value: 12154761577498 [ 182.812649][ T7237] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.365: couldn't read orphan inode 13 (err -117) [ 182.850239][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.933537][ T7237] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.365: dx entry: limit 65535 != root limit 120 [ 182.961826][ T7237] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.365: Corrupt directory, running e2fsck is recommended [ 183.420255][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.169972][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.374'. [ 189.162696][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.384'. [ 190.560076][ T7321] process 'syz.0.392' launched './file0' with NULL argv: empty string added [ 190.585905][ T7321] Invalid argument reading file caps for ./file0 [ 191.234883][ T7336] loop1: detected capacity change from 0 to 512 [ 191.256882][ T7336] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 191.280397][ T7336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 191.293011][ T7336] EXT4-fs (loop1): orphan cleanup on readonly fs [ 191.301057][ T7336] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.397: bad orphan inode 3 [ 191.314384][ T7336] EXT4-fs (loop1): Remounting filesystem read-only [ 191.323604][ T7336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 191.350165][ T7336] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.397: dx entry: limit 0 != root limit 125 [ 191.371745][ T7336] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.397: Corrupt directory, running e2fsck is recommended [ 191.421296][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 193.945444][ T7331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'. [ 194.665624][ T7378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.410'. [ 194.721620][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.728204][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.409825][ T7395] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 195.958205][ T7404] loop1: detected capacity change from 0 to 128 [ 197.828753][ T7431] loop1: detected capacity change from 0 to 128 [ 199.004084][ T7460] loop4: detected capacity change from 0 to 512 [ 199.024220][ T7460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.091231][ T7460] EXT4-fs (loop4): 1 truncate cleaned up [ 199.101898][ T7460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.348565][ T7464] loop3: detected capacity change from 0 to 128 [ 199.955821][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.517190][ T7489] loop4: detected capacity change from 0 to 128 [ 201.769450][ T7445] tipc: Started in network mode [ 201.774494][ T7445] tipc: Node identity 2e63d39a5d4, cluster identity 4711 [ 201.784126][ T7445] tipc: Enabled bearer , priority 0 [ 201.868209][ T7447] syzkaller0: entered promiscuous mode [ 201.873787][ T7447] syzkaller0: entered allmulticast mode [ 201.896884][ T7447] tipc: Resetting bearer [ 201.904740][ T7440] tipc: Resetting bearer [ 204.140822][ T7440] tipc: Disabling bearer [ 204.241275][ T7513] syzkaller0: entered promiscuous mode [ 204.250792][ T7513] syzkaller0: entered allmulticast mode [ 204.278677][ T972] tipc: Node number set to 1931727770 [ 206.328756][ T7562] kvm: vcpu 0: requested 6 ns lapic timer period limited to 200000 ns [ 207.013696][ T7577] loop3: detected capacity change from 0 to 128 [ 207.399612][ T7581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.644691][ T7611] loop0: detected capacity change from 0 to 1024 [ 208.714814][ T7611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.604495][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.642318][ T7621] loop3: detected capacity change from 0 to 512 [ 209.674448][ T7621] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 209.708464][ T7621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 209.717325][ T7621] EXT4-fs (loop3): orphan cleanup on readonly fs [ 209.723824][ T7621] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.484: bad orphan inode 3 [ 209.793733][ T7621] EXT4-fs (loop3): Remounting filesystem read-only [ 209.844778][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 209.910016][ T7621] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.484: dx entry: limit 0 != root limit 125 [ 209.923459][ T7621] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.484: Corrupt directory, running e2fsck is recommended [ 210.215403][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 210.580626][ T7648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.155612][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 212.161783][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 212.607284][ T7685] loop0: detected capacity change from 0 to 512 [ 212.648402][ T7685] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 212.696125][ T7685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 212.724174][ T7685] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.742607][ T7685] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.499: bad orphan inode 3 [ 212.764678][ T7685] EXT4-fs (loop0): Remounting filesystem read-only [ 212.773173][ T7685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 212.816365][ T7685] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.499: dx entry: limit 0 != root limit 125 [ 212.893622][ T7685] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.499: Corrupt directory, running e2fsck is recommended [ 212.966145][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 215.037347][ T7724] syzkaller0: entered promiscuous mode [ 215.043106][ T7724] syzkaller0: entered allmulticast mode [ 217.769833][ T7764] loop0: detected capacity change from 0 to 512 [ 217.789895][ T7764] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.825092][ T7764] EXT4-fs (loop0): 1 truncate cleaned up [ 217.832931][ T7764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.069962][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.474170][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 219.481718][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 219.491814][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 219.509070][ T7758] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.534915][ T7758] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.671384][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 219.722868][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 219.734854][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 219.761766][ T7758] wlan0 speed is unknown, defaulting to 1000 [ 220.619983][ T7802] loop0: detected capacity change from 0 to 1024 [ 220.707897][ T7802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.932608][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.993117][ T7811] syzkaller0: entered promiscuous mode [ 221.006559][ T7811] syzkaller0: entered allmulticast mode [ 221.740337][ T7838] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.330081][ T7857] loop4: detected capacity change from 0 to 512 [ 222.369052][ T7857] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 222.384099][ T7857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 222.401743][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 222.408434][ T7857] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.414901][ T7857] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.552: bad orphan inode 3 [ 222.429227][ T7857] EXT4-fs (loop4): Remounting filesystem read-only [ 222.447973][ T7857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 222.585939][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 223.119324][ T7871] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.199610][ T7877] netlink: 'syz.4.559': attribute type 63 has an invalid length. [ 224.442695][ T7883] loop1: detected capacity change from 0 to 512 [ 224.500634][ T7883] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 224.524951][ T7883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 224.555624][ T7883] EXT4-fs (loop1): orphan cleanup on readonly fs [ 224.562133][ T7883] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.562: bad orphan inode 3 [ 224.685581][ T7883] EXT4-fs (loop1): Remounting filesystem read-only [ 224.730624][ T7883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 224.938487][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 226.066602][ T7900] syzkaller0: entered promiscuous mode [ 226.104875][ T7900] syzkaller0: entered allmulticast mode [ 226.610856][ T7920] loop1: detected capacity change from 0 to 512 [ 226.637452][ T7920] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 226.689060][ T7920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 226.723551][ T7920] EXT4-fs (loop1): orphan cleanup on readonly fs [ 226.753030][ T7920] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.577: bad orphan inode 3 [ 226.777838][ T7920] EXT4-fs (loop1): Remounting filesystem read-only [ 226.796110][ T7920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 226.990672][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 227.212550][ T7931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.582'. [ 228.079873][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 228.142585][ T7960] loop1: detected capacity change from 0 to 512 [ 228.152329][ T7960] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 228.171199][ T7960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 228.180565][ T7960] EXT4-fs (loop1): orphan cleanup on readonly fs [ 228.187558][ T7960] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.589: bad orphan inode 3 [ 228.198364][ T7960] EXT4-fs (loop1): Remounting filesystem read-only [ 228.208098][ T7960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 228.312515][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 232.323141][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 232.393818][ T8041] syzkaller0: entered promiscuous mode [ 232.400028][ T8041] syzkaller0: entered allmulticast mode [ 232.675333][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 234.209759][ T8072] syzkaller0: entered promiscuous mode [ 234.217485][ T8072] syzkaller0: entered allmulticast mode [ 234.441060][ T8078] tipc: Started in network mode [ 234.446205][ T8078] tipc: Node identity 4, cluster identity 4711 [ 234.452414][ T8078] tipc: Node number set to 4 [ 235.995771][ T8101] syzkaller0: entered promiscuous mode [ 236.021616][ T8101] syzkaller0: entered allmulticast mode [ 236.551698][ T8121] loop0: detected capacity change from 0 to 512 [ 236.580757][ T8121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 237.694565][ T8121] EXT4-fs (loop0): 1 truncate cleaned up [ 237.728600][ T8121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.761723][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.826080][ T8144] syzkaller0: entered promiscuous mode [ 238.831740][ T8144] syzkaller0: entered allmulticast mode [ 239.675282][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 239.803227][ T8168] loop1: detected capacity change from 0 to 512 [ 239.824493][ T8168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.898859][ T8168] EXT4-fs (loop1): 1 truncate cleaned up [ 239.982798][ T8168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.099583][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.024959][ T8221] loop4: detected capacity change from 0 to 512 [ 242.067469][ T8221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.110819][ T8221] EXT4-fs (loop4): 1 truncate cleaned up [ 242.130842][ T8221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.254069][ T8227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.672'. [ 242.276018][ T8227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.672'. [ 242.333339][ T8230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.672'. [ 242.456813][ T8227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.672'. [ 243.200147][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.771817][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.681'. [ 245.773924][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.681'. [ 245.953928][ T8266] loop3: detected capacity change from 0 to 512 [ 245.998780][ T8266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.041322][ T8266] EXT4-fs (loop3): 1 truncate cleaned up [ 246.056947][ T8266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.151976][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.338731][ T8294] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.693'. [ 249.892207][ T8309] loop0: detected capacity change from 0 to 512 [ 249.958212][ T8309] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.020854][ T8309] EXT4-fs (loop0): 1 truncate cleaned up [ 250.029834][ T8309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.603161][ T8320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.705'. [ 250.819677][ T8320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.705'. [ 251.132470][ T8325] netlink: 60 bytes leftover after parsing attributes in process `syz.1.705'. [ 251.281393][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.383382][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.707'. [ 252.205135][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.719'. [ 252.843702][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 253.531192][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 254.149234][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 254.947276][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 255.718920][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 255.734260][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 256.166760][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.174360][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.850548][ T8525] warning: `syz.1.790' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 258.262019][ T8533] netlink: 136 bytes leftover after parsing attributes in process `syz.3.794'. [ 259.656182][ T8562] loop4: detected capacity change from 0 to 1024 [ 259.783895][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.082291][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.320304][ T8578] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.804537][ T8594] loop4: detected capacity change from 0 to 1024 [ 260.872048][ T8594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.304636][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 261.356587][ T8605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.404710][ T5934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.795163][ T8615] netlink: 112 bytes leftover after parsing attributes in process `syz.0.822'. [ 262.669859][ T8631] loop1: detected capacity change from 0 to 1024 [ 262.742589][ T8631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.844718][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 263.097075][ T8648] netlink: 112 bytes leftover after parsing attributes in process `syz.3.832'. [ 263.186180][ T8650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.584798][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.916173][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 264.430911][ T8678] netlink: 96 bytes leftover after parsing attributes in process `syz.0.843'. [ 264.621045][ T8682] loop0: detected capacity change from 0 to 1024 [ 264.704103][ T8682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.769084][ T8681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.573907][ T8706] netlink: 96 bytes leftover after parsing attributes in process `syz.3.853'. [ 265.826864][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.846972][ T8710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.378912][ T8731] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 266.423594][ T8734] netlink: 96 bytes leftover after parsing attributes in process `syz.1.865'. [ 266.702602][ T8740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.141854][ T8757] netlink: 96 bytes leftover after parsing attributes in process `syz.3.878'. [ 267.566221][ T8772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.920728][ T8796] loop3: detected capacity change from 0 to 1024 [ 269.003160][ T8796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.645753][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 269.863755][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.583320][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 271.070395][ T5854] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 271.134483][ T5854] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.002118][ T8946] netlink: 64771 bytes leftover after parsing attributes in process `syz.1.955'. [ 275.949577][ T8953] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 275.974736][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.983832][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.033555][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.041099][ T8953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.049962][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.057271][ T8953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.109218][ T8953] team0: Port device bridge0 added [ 276.128035][ T8953] syz.0.960 (8953) used greatest stack depth: 20616 bytes left [ 278.361462][ T9006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.427898][ T9038] netlink: 260 bytes leftover after parsing attributes in process `syz.1.990'. [ 282.306180][ T9121] netlink: 'syz.4.1027': attribute type 10 has an invalid length. [ 282.314096][ T9121] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1027'. [ 282.332709][ T9121] bond0: entered promiscuous mode [ 282.342836][ T9121] bond_slave_0: entered promiscuous mode [ 282.359772][ T9121] bond_slave_1: entered promiscuous mode [ 282.375970][ T9121] bridge0: port 3(bond0) entered blocking state [ 282.382645][ T9121] bridge0: port 3(bond0) entered disabled state [ 282.407883][ T9121] bond0: entered allmulticast mode [ 282.413178][ T9121] bond_slave_0: entered allmulticast mode [ 282.419908][ T9121] bond_slave_1: entered allmulticast mode [ 282.429767][ T9121] bridge0: port 3(bond0) entered blocking state [ 282.436318][ T9121] bridge0: port 3(bond0) entered forwarding state [ 284.113033][ T9174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1047'. [ 284.139753][ T9174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1047'. [ 284.166823][ T9174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1047'. [ 284.201104][ T9174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1047'. [ 284.356300][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.364488][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.390406][ T9178] bridge0: entered allmulticast mode [ 284.436618][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.443983][ T9181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.451871][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.459166][ T9181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.529230][ T9181] bridge0: entered promiscuous mode [ 285.597374][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 285.645680][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 285.720138][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 285.743611][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 291.090841][ T9268] ------------[ cut here ]------------ [ 291.096863][ T9268] failed to allocate ring buffer on CPU 1 [ 291.123363][ T9268] WARNING: CPU: 0 PID: 9268 at kernel/trace/ring_buffer.c:5864 trace_rb_cpu_prepare+0x2fa/0x330 [ 291.134243][ T9268] Modules linked in: [ 291.139165][ T9268] CPU: 0 PID: 9268 Comm: syz.4.1091 Not tainted syzkaller #0 [ 291.147219][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.157449][ T9268] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 291.163514][ T9268] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 04 fd ff 48 c7 c7 a0 ee ce 8a 89 de e8 66 d4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 48 04 fd ff e9 32 ff ff ff e8 3e 04 [ 291.183902][ T9268] RSP: 0018:ffffc90004ddfab8 EFLAGS: 00010246 [ 291.190200][ T9268] RAX: 92c3ed053b7e9200 RBX: 0000000000000001 RCX: 0000000000080000 [ 291.198736][ T9268] RDX: ffffc90018dcd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 291.207141][ T9268] RBP: 0000000000000001 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 291.215190][ T9268] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000000 [ 291.223455][ T9268] R13: ffff888064dce108 R14: ffff88801b28e810 R15: ffff88801b28e8b0 [ 291.231673][ T9268] FS: 00007fd6ef1316c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 291.241610][ T9268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.248482][ T9268] CR2: 00007fadef75da08 CR3: 0000000030895000 CR4: 00000000003506f0 [ 291.256618][ T9268] Call Trace: [ 291.259962][ T9268] [ 291.263055][ T9268] ? rb_get_reader_page+0xd90/0xd90 [ 291.268461][ T9268] cpuhp_invoke_callback+0x481/0x7e0 [ 291.274102][ T9268] ? rb_get_reader_page+0xd90/0xd90 [ 291.279592][ T9268] cpuhp_issue_call+0x3ed/0x740 [ 291.284567][ T9268] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 291.291834][ T9268] __cpuhp_state_add_instance+0x25/0x40 [ 291.297559][ T9268] __ring_buffer_alloc+0x30e/0x550 [ 291.302753][ T9268] allocate_trace_buffers+0x70/0x290 [ 291.308197][ T9268] trace_array_create_systems+0x311/0xc70 [ 291.314082][ T9268] instance_mkdir+0xd1/0x130 [ 291.318905][ T9268] tracefs_syscall_mkdir+0x128/0x1a0 [ 291.324257][ T9268] vfs_mkdir+0x2a5/0x470 [ 291.328673][ T9268] do_mkdirat+0x1dc/0x450 [ 291.333260][ T9268] ? vfs_mkdir+0x470/0x470 [ 291.337952][ T9268] __x64_sys_mkdirat+0x89/0xa0 [ 291.344032][ T9268] do_syscall_64+0x55/0xb0 [ 291.348703][ T9268] ? clear_bhb_loop+0x40/0x90 [ 291.353448][ T9268] ? clear_bhb_loop+0x40/0x90 [ 291.358670][ T9268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.364638][ T9268] RIP: 0033:0x7fd6ee19e019 [ 291.369323][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.389593][ T9268] RSP: 002b:00007fd6ef131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 291.398370][ T9268] RAX: ffffffffffffffda RBX: 00007fd6ee425fa0 RCX: 00007fd6ee19e019 [ 291.406531][ T9268] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 291.414580][ T9268] RBP: 00007fd6ee23500c R08: 0000000000000000 R09: 0000000000000000 [ 291.422884][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.430967][ T9268] R13: 00007fd6ee426038 R14: 00007fd6ee425fa0 R15: 00007fffe7ec14f8 [ 291.439605][ T9268] [ 291.442690][ T9268] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.450268][ T9268] CPU: 0 PID: 9268 Comm: syz.4.1091 Not tainted syzkaller #0 [ 291.457652][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.467921][ T9268] Call Trace: [ 291.471235][ T9268] [ 291.474196][ T9268] dump_stack_lvl+0x18c/0x250 [ 291.478911][ T9268] ? show_regs_print_info+0x20/0x20 [ 291.484403][ T9268] ? load_image+0x420/0x420 [ 291.489262][ T9268] panic+0x2ca/0x720 [ 291.493214][ T9268] ? bpf_jit_dump+0xd0/0xd0 [ 291.497932][ T9268] __warn+0x2e0/0x470 [ 291.501961][ T9268] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 291.507463][ T9268] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 291.512878][ T9268] report_bug+0x2be/0x4f0 [ 291.517335][ T9268] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 291.522835][ T9268] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 291.528432][ T9268] ? trace_rb_cpu_prepare+0x2fc/0x330 [ 291.534054][ T9268] handle_bug+0xcf/0x120 [ 291.538350][ T9268] exc_invalid_op+0x1a/0x50 [ 291.543042][ T9268] asm_exc_invalid_op+0x1a/0x20 [ 291.548290][ T9268] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 291.554322][ T9268] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 04 fd ff 48 c7 c7 a0 ee ce 8a 89 de e8 66 d4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 48 04 fd ff e9 32 ff ff ff e8 3e 04 [ 291.574128][ T9268] RSP: 0018:ffffc90004ddfab8 EFLAGS: 00010246 [ 291.580498][ T9268] RAX: 92c3ed053b7e9200 RBX: 0000000000000001 RCX: 0000000000080000 [ 291.588592][ T9268] RDX: ffffc90018dcd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 291.596696][ T9268] RBP: 0000000000000001 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 291.604703][ T9268] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000000 [ 291.612782][ T9268] R13: ffff888064dce108 R14: ffff88801b28e810 R15: ffff88801b28e8b0 [ 291.620794][ T9268] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 291.626208][ T9268] ? rb_get_reader_page+0xd90/0xd90 [ 291.631470][ T9268] cpuhp_invoke_callback+0x481/0x7e0 [ 291.636809][ T9268] ? rb_get_reader_page+0xd90/0xd90 [ 291.642088][ T9268] cpuhp_issue_call+0x3ed/0x740 [ 291.647066][ T9268] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 291.653884][ T9268] __cpuhp_state_add_instance+0x25/0x40 [ 291.659496][ T9268] __ring_buffer_alloc+0x30e/0x550 [ 291.664629][ T9268] allocate_trace_buffers+0x70/0x290 [ 291.670193][ T9268] trace_array_create_systems+0x311/0xc70 [ 291.675927][ T9268] instance_mkdir+0xd1/0x130 [ 291.680564][ T9268] tracefs_syscall_mkdir+0x128/0x1a0 [ 291.685864][ T9268] vfs_mkdir+0x2a5/0x470 [ 291.690118][ T9268] do_mkdirat+0x1dc/0x450 [ 291.694487][ T9268] ? vfs_mkdir+0x470/0x470 [ 291.699010][ T9268] __x64_sys_mkdirat+0x89/0xa0 [ 291.703991][ T9268] do_syscall_64+0x55/0xb0 [ 291.708438][ T9268] ? clear_bhb_loop+0x40/0x90 [ 291.713480][ T9268] ? clear_bhb_loop+0x40/0x90 [ 291.718190][ T9268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.724124][ T9268] RIP: 0033:0x7fd6ee19e019 [ 291.728568][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.748473][ T9268] RSP: 002b:00007fd6ef131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 291.756921][ T9268] RAX: ffffffffffffffda RBX: 00007fd6ee425fa0 RCX: 00007fd6ee19e019 [ 291.764931][ T9268] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 291.772998][ T9268] RBP: 00007fd6ee23500c R08: 0000000000000000 R09: 0000000000000000 [ 291.781003][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.789010][ T9268] R13: 00007fd6ee426038 R14: 00007fd6ee425fa0 R15: 00007fffe7ec14f8 [ 291.797038][ T9268] [ 291.800239][ T9268] Kernel Offset: disabled [ 291.804687][ T9268] Rebooting in 86400 seconds..