last executing test programs: 14.832419651s ago: executing program 2 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 14.721202952s ago: executing program 2 (id=81): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x200b}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xfa, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x2, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xb1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x2, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x806, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.654942288s ago: executing program 2 (id=83): r0 = socket(0x18, 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 14.341478149s ago: executing program 2 (id=86): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13.712185512s ago: executing program 2 (id=93): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioperm(0xbf, 0x9, 0x22) 13.132138848s ago: executing program 2 (id=102): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 12.733316847s ago: executing program 32 (id=102): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1.902291903s ago: executing program 1 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@uuid_off}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.770929446s ago: executing program 0 (id=168): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.768548336s ago: executing program 1 (id=169): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001"], 0x168}}, 0x4010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.652205788s ago: executing program 3 (id=170): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 1.612360522s ago: executing program 1 (id=171): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000700)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.490112954s ago: executing program 3 (id=172): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1fb, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) close(0x3) 1.383424684s ago: executing program 0 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) 1.347196058s ago: executing program 3 (id=174): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x8000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0xfe, 0x4ff, &(0x7f0000000ac0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x2) 1.234703219s ago: executing program 0 (id=176): bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 1.143684718s ago: executing program 0 (id=177): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 1.143371838s ago: executing program 1 (id=178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) 1.046336638s ago: executing program 0 (id=180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x8, r2, 0x0, 0x1, 0x1, &(0x7f0000000180)="d4", 0x4}) 1.009326161s ago: executing program 1 (id=181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 947.271247ms ago: executing program 3 (id=182): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) 840.123758ms ago: executing program 0 (id=183): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800800030081000000080005"], 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 805.317371ms ago: executing program 3 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) 731.072038ms ago: executing program 4 (id=185): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 536.142608ms ago: executing program 4 (id=186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000540)="78debf2dfb73fc0a7d0a0080f2dcb9fe068925c4001100b8f9e6aaeb1ae2f6e8bcb5ee52dc0624836e779798e70675932910dda4e02ef580c4f5ca304f48a7ddb169962e0a1a0e6d84afef423453d14b3d9bf4c56c6bb6d1cc809ee4fabf4d1f5d54d66c98ee1dbd28901d63bb7e085c971f0c2af0b61f16380d1492557a0bb1b94a7ab8d6f0fa887f6167fcca9563583f69f92185a047544f1e73689ebfe34b1af8692558c238dc8f08f2c4d98c376353cbab8dce30a4137465214d6a02d4e741784c8105d20981c32047368b0b3e838b6f70b0ab0912d95b7312d1", 0xdc}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 535.914308ms ago: executing program 3 (id=187): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@xdp={0x2c, 0x9, 0x0, 0x19}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) 490.363822ms ago: executing program 4 (id=188): unshare(0x24060400) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x1, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x10, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x4, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x80004, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40008, 0xaf, 0x5, 0x6, 0x7, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 441.798597ms ago: executing program 4 (id=189): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fadvise64(r0, 0xe0ffff, 0x9, 0x3) 289.907012ms ago: executing program 4 (id=190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000001fc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x15, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x2c}}, 0x0}}], 0x0, 0x0, 0x0}) 148.606366ms ago: executing program 4 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 0s ago: executing program 1 (id=192): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 81.089597][ T5778] cgroup: Unknown subsys name 'net' [ 81.197336][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.932068][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.608935][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.612136][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.618697][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.626620][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.632025][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.641532][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.646086][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.660056][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.661630][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.668794][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.681782][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.688251][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.696221][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.704091][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.705715][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.717429][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.718928][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.733900][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.744603][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.761975][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.769875][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.785499][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.793543][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.802373][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.319571][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.361178][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.523548][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.533051][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.542442][ T5789] bridge_slave_0: entered allmulticast mode [ 85.550586][ T5789] bridge_slave_0: entered promiscuous mode [ 85.560227][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 85.593743][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.601215][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.608677][ T5789] bridge_slave_1: entered allmulticast mode [ 85.615680][ T5789] bridge_slave_1: entered promiscuous mode [ 85.691408][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 85.704774][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.715800][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.723622][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.731004][ T5787] bridge_slave_0: entered allmulticast mode [ 85.738498][ T5787] bridge_slave_0: entered promiscuous mode [ 85.759884][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.782141][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.789442][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.796635][ T5787] bridge_slave_1: entered allmulticast mode [ 85.803906][ T5787] bridge_slave_1: entered promiscuous mode [ 85.901845][ T5789] team0: Port device team_slave_0 added [ 85.910706][ T5789] team0: Port device team_slave_1 added [ 85.920086][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.975288][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.984841][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.992271][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.000214][ T5790] bridge_slave_0: entered allmulticast mode [ 86.007510][ T5790] bridge_slave_0: entered promiscuous mode [ 86.015987][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.023237][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.030529][ T5790] bridge_slave_1: entered allmulticast mode [ 86.038384][ T5790] bridge_slave_1: entered promiscuous mode [ 86.052018][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.059092][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.085070][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.098990][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.106095][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.132672][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.228239][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.258712][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.265937][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.273703][ T5791] bridge_slave_0: entered allmulticast mode [ 86.283123][ T5791] bridge_slave_0: entered promiscuous mode [ 86.300165][ T5787] team0: Port device team_slave_0 added [ 86.309249][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.342779][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.350449][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.358086][ T5791] bridge_slave_1: entered allmulticast mode [ 86.365096][ T5791] bridge_slave_1: entered promiscuous mode [ 86.387803][ T5787] team0: Port device team_slave_1 added [ 86.410332][ T5789] hsr_slave_0: entered promiscuous mode [ 86.417228][ T5789] hsr_slave_1: entered promiscuous mode [ 86.440487][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.468231][ T5790] team0: Port device team_slave_0 added [ 86.476894][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.527233][ T5790] team0: Port device team_slave_1 added [ 86.549503][ T5791] team0: Port device team_slave_0 added [ 86.556194][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.564373][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.590846][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.604472][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.611740][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.637899][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.683014][ T5791] team0: Port device team_slave_1 added [ 86.728635][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.735630][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.762261][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.773793][ T50] Bluetooth: hci0: command tx timeout [ 86.778500][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.786374][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.812535][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.847162][ T50] Bluetooth: hci3: command tx timeout [ 86.852930][ T50] Bluetooth: hci1: command tx timeout [ 86.858968][ T5801] Bluetooth: hci2: command tx timeout [ 86.869660][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.876983][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.903814][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.944809][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.951963][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.978255][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.014101][ T5790] hsr_slave_0: entered promiscuous mode [ 87.020818][ T5790] hsr_slave_1: entered promiscuous mode [ 87.027734][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.035636][ T5790] Cannot create hsr debugfs directory [ 87.046436][ T5787] hsr_slave_0: entered promiscuous mode [ 87.053118][ T5787] hsr_slave_1: entered promiscuous mode [ 87.059759][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.068020][ T5787] Cannot create hsr debugfs directory [ 87.225791][ T5791] hsr_slave_0: entered promiscuous mode [ 87.234546][ T5791] hsr_slave_1: entered promiscuous mode [ 87.241537][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.249872][ T5791] Cannot create hsr debugfs directory [ 87.806399][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.837739][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.850995][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.864833][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.940649][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.962474][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.974511][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.984585][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.095619][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.128592][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.140294][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.175225][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.231200][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.243092][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.254846][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.269030][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.369498][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.414714][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.474556][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.491878][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.522386][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.529959][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.541200][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.548455][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.562129][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.569376][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.596070][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.603363][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.635297][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.701415][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.741352][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.779559][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.786871][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.814034][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.821314][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.848924][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.856522][ T50] Bluetooth: hci0: command tx timeout [ 88.881752][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.930701][ T50] Bluetooth: hci1: command tx timeout [ 88.936193][ T50] Bluetooth: hci2: command tx timeout [ 88.944878][ T5797] Bluetooth: hci3: command tx timeout [ 88.964848][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.026598][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.033811][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.047964][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.055198][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.124056][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.140843][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.275443][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.422982][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.451950][ T5789] veth0_vlan: entered promiscuous mode [ 89.495474][ T5789] veth1_vlan: entered promiscuous mode [ 89.614494][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.631531][ T5787] veth0_vlan: entered promiscuous mode [ 89.676196][ T5789] veth0_macvtap: entered promiscuous mode [ 89.692071][ T5787] veth1_vlan: entered promiscuous mode [ 89.714613][ T5789] veth1_macvtap: entered promiscuous mode [ 89.753223][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.768491][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.798700][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.831058][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.840604][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.849570][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858566][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.880831][ T5787] veth0_macvtap: entered promiscuous mode [ 89.899197][ T5790] veth0_vlan: entered promiscuous mode [ 89.921844][ T5787] veth1_macvtap: entered promiscuous mode [ 89.939869][ T5790] veth1_vlan: entered promiscuous mode [ 89.978184][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.989593][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.001703][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.039573][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.052845][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.067748][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.083619][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.095437][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.104875][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.115240][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.239853][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.241723][ T5791] veth0_vlan: entered promiscuous mode [ 90.253578][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.284439][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.310025][ T5790] veth0_macvtap: entered promiscuous mode [ 90.317889][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.329131][ T5791] veth1_vlan: entered promiscuous mode [ 90.345698][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.358418][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.389799][ T5790] veth1_macvtap: entered promiscuous mode [ 90.431200][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.468760][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.483715][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.498843][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.510109][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.520788][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.533616][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.545154][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.558064][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.568429][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.579176][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.591203][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.610043][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.620342][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.629411][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639092][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.687947][ T5791] veth0_macvtap: entered promiscuous mode [ 90.704812][ T5791] veth1_macvtap: entered promiscuous mode [ 90.786441][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.812627][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.831318][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.843191][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.856547][ T5882] syz.2.3[5882]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.868570][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.884955][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.894481][ T5882] loop2: detected capacity change from 0 to 256 [ 90.905340][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.930219][ T50] Bluetooth: hci0: command tx timeout [ 90.982431][ T5882] FAT-fs (loop2): Directory bread(block 64) failed [ 91.009421][ T50] Bluetooth: hci2: command tx timeout [ 91.014952][ T5801] Bluetooth: hci3: command tx timeout [ 91.020766][ T5797] Bluetooth: hci1: command tx timeout [ 91.032449][ T5882] FAT-fs (loop2): Directory bread(block 65) failed [ 91.034408][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.043051][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.049244][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.073409][ T5882] FAT-fs (loop2): Directory bread(block 66) failed [ 91.075410][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.090805][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.101351][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.111288][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.122027][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.124376][ T5882] FAT-fs (loop2): Directory bread(block 67) failed [ 91.133932][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.150995][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.169174][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185624][ T5882] FAT-fs (loop2): Directory bread(block 68) failed [ 91.186859][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.204561][ T5882] FAT-fs (loop2): Directory bread(block 69) failed [ 91.208184][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221672][ T5882] FAT-fs (loop2): Directory bread(block 70) failed [ 91.232117][ T5882] FAT-fs (loop2): Directory bread(block 71) failed [ 91.271413][ T5882] FAT-fs (loop2): Directory bread(block 72) failed [ 91.282903][ T5882] FAT-fs (loop2): Directory bread(block 73) failed [ 91.332117][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.366371][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.523268][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.551551][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.695726][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.739990][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.929061][ T5880] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.004410][ T5897] loop0: detected capacity change from 0 to 256 [ 92.012881][ T5898] process 'syz.1.2' launched '/dev/fd/3' with NULL argv: empty string added [ 92.061084][ T5897] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.084837][ T5897] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 92.151115][ T5897] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 92.152922][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.199448][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.216886][ T5880] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.236493][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.257548][ T5880] usb 4-1: SerialNumber: syz [ 92.321588][ T8] cfg80211: failed to load regulatory.db [ 92.525957][ T5880] usb 4-1: 0:2 : does not exist [ 92.614930][ T5880] usb 4-1: USB disconnect, device number 2 [ 92.730715][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.009597][ T50] Bluetooth: hci0: command tx timeout [ 93.088369][ T5801] Bluetooth: hci3: command tx timeout [ 93.093992][ T5797] Bluetooth: hci1: command tx timeout [ 93.100138][ T50] Bluetooth: hci2: command tx timeout [ 93.632729][ T5922] loop1: detected capacity change from 0 to 512 [ 93.704877][ T5922] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.772807][ T5922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.862155][ T5922] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.926710][ C1] sched: RT throttling activated [ 93.937579][ T5922] EXT4-fs (loop1): 1 truncate cleaned up [ 93.974426][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.161980][ T27] audit: type=1800 audit(1760538046.893:2): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 94.183059][ T5916] loop0: detected capacity change from 0 to 131072 [ 94.202893][ T5916] F2FS-fs (loop0): invalid crc value [ 94.240292][ T5916] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.307192][ T5916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 94.371621][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.998640][ T5967] loop0: detected capacity change from 0 to 8 [ 96.055193][ T5967] SQUASHFS error: Unable to read directory block [1d0:62] [ 96.301388][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.330865][ T27] audit: type=1326 audit(1760538049.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193f8eec9 code=0x7ffc0000 [ 96.396848][ T27] audit: type=1326 audit(1760538049.063:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193f8eec9 code=0x7ffc0000 [ 96.437314][ T5879] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.441368][ T27] audit: type=1326 audit(1760538049.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc193f8eec9 code=0x7ffc0000 [ 96.506271][ T27] audit: type=1326 audit(1760538049.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193f8eec9 code=0x7ffc0000 [ 96.546549][ T5963] loop3: detected capacity change from 0 to 32768 [ 96.553387][ T27] audit: type=1326 audit(1760538049.093:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193f8eec9 code=0x7ffc0000 [ 96.577166][ T5963] ======================================================= [ 96.577166][ T5963] WARNING: The mand mount option has been deprecated and [ 96.577166][ T5963] and is ignored by this kernel. Remove the mand [ 96.577166][ T5963] option from the mount to silence this warning. [ 96.577166][ T5963] ======================================================= [ 96.661101][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 96.671365][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 96.684228][ T5981] loop1: detected capacity change from 0 to 4096 [ 96.691695][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.733154][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.745619][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.748741][ T5963] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.787827][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.831047][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.871554][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.875067][ T5963] syz.3.29 (5963) used greatest stack depth: 19600 bytes left [ 96.956434][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 97.134299][ T5879] usb 3-1: usb_control_msg returned -32 [ 97.146082][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 97.388239][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 97.404130][ T6003] loop0: detected capacity change from 0 to 16 [ 97.425841][ T6003] erofs: (device loop0): mounted with root inode @ nid 36. [ 97.710621][ T6013] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.51'. [ 98.046136][ T6009] loop1: detected capacity change from 0 to 32768 [ 98.079098][ T6009] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.171242][ T6009] XFS (loop1): Ending clean mount [ 98.196323][ T6009] XFS (loop1): Quotacheck needed: Please wait. [ 98.253216][ T6009] XFS (loop1): Quotacheck: Done. [ 98.326127][ T6009] XFS (loop1): User initiated shutdown received. [ 98.336003][ T6009] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 98.354949][ T6009] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 98.427671][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.054845][ T6051] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET) [ 99.124628][ T6055] loop1: detected capacity change from 0 to 64 [ 99.214111][ T27] audit: type=1326 audit(1760538307.937:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.226897][ T5879] usb 3-1: USB disconnect, device number 2 [ 99.260619][ T27] audit: type=1326 audit(1760538307.957:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.274891][ T6055] Trying to free block not in datazone [ 99.330553][ T27] audit: type=1326 audit(1760538307.977:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.404018][ T27] audit: type=1326 audit(1760538307.977:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.486890][ T27] audit: type=1326 audit(1760538307.987:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.557041][ T27] audit: type=1326 audit(1760538307.987:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.606907][ T27] audit: type=1326 audit(1760538307.987:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.670973][ T27] audit: type=1326 audit(1760538308.017:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.737521][ T27] audit: type=1326 audit(1760538308.017:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.762202][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 99.786168][ T27] audit: type=1326 audit(1760538308.017:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2492b8eec9 code=0x7ffc0000 [ 99.989560][ T6076] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.198288][ T6066] loop1: detected capacity change from 0 to 32768 [ 100.219443][ T6066] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.261136][ T6066] XFS (loop1): Ending clean mount [ 100.458243][ T5791] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.820441][ T6106] loop2: detected capacity change from 0 to 1024 [ 100.829121][ T6106] EXT4-fs: Ignoring removed bh option [ 100.847018][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.856148][ T6106] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 100.894907][ T6106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.040530][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 101.054604][ T6117] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.060394][ T5830] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 101.126476][ T6106] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.86: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 101.126872][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.166629][ T6106] EXT4-fs (loop2): Remounting filesystem read-only [ 101.213292][ T5830] usb 4-1: config 0 descriptor?? [ 101.468602][ T5830] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 101.774736][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.884668][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.045529][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.143911][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.276172][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.292867][ T5830] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.319421][ T5830] asix: probe of 4-1:0.0 failed with error -71 [ 102.357248][ T5830] usb 4-1: USB disconnect, device number 3 [ 102.862591][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.872718][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.883206][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.891795][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.901616][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.909372][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.700191][ T6153] chnl_net:caif_netlink_parms(): no params data found [ 103.936020][ T6177] loop3: detected capacity change from 0 to 1024 [ 104.091725][ T6177] hfsplus: xattr searching failed [ 104.105866][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.114954][ T6177] hfsplus: xattr searching failed [ 104.117722][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.147135][ T6153] bridge_slave_0: entered allmulticast mode [ 104.154682][ T6153] bridge_slave_0: entered promiscuous mode [ 104.175546][ T2890] hfsplus: bad catalog file entry [ 104.178952][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.193968][ T2890] hfsplus: b-tree write err: -5, ino 3 [ 104.195228][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.207649][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.237043][ T6153] bridge_slave_1: entered allmulticast mode [ 104.244571][ T6153] bridge_slave_1: entered promiscuous mode [ 104.296259][ T6190] loop0: detected capacity change from 0 to 1024 [ 104.342092][ T6192] loop3: detected capacity change from 0 to 2048 [ 104.364286][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 104.364300][ T27] audit: type=1800 audit(1760538313.087:21): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 104.394227][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.411925][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.426017][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.429222][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 104.473105][ T5830] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 104.483454][ T5830] usb 2-1: config 0 has no interface number 0 [ 104.490137][ T5830] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.502505][ T5830] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.504435][ T6192] EXT4-fs (loop3): shut down requested (2) [ 104.529253][ T1138] hsr_slave_0: left promiscuous mode [ 104.537574][ T5830] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 104.542119][ T6192] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 104.551994][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.570506][ T1138] hsr_slave_1: left promiscuous mode [ 104.575701][ T5830] usb 2-1: Product: syz [ 104.580763][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.589348][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.601638][ T5830] usb 2-1: Manufacturer: syz [ 104.606315][ T5830] usb 2-1: SerialNumber: syz [ 104.612418][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.635899][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.638095][ T5830] usb 2-1: config 0 descriptor?? [ 104.666009][ T5830] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 104.666325][ T1085] hfsplus: b-tree write err: -5, ino 4 [ 104.673049][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.676213][ T1138] bridge_slave_1: left allmulticast mode [ 104.694870][ T1138] bridge_slave_1: left promiscuous mode [ 104.704572][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.754776][ T1138] bridge_slave_0: left allmulticast mode [ 104.761231][ T1138] bridge_slave_0: left promiscuous mode [ 104.771991][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.826162][ T1138] veth1_macvtap: left promiscuous mode [ 104.835268][ T1138] veth0_macvtap: left promiscuous mode [ 104.841318][ T1138] veth1_vlan: left promiscuous mode [ 104.852646][ T1138] veth0_vlan: left promiscuous mode [ 105.008304][ T50] Bluetooth: hci1: command tx timeout [ 105.076867][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.256790][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 105.266257][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.287004][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.303036][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 105.324107][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 105.335165][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.360050][ T5879] usb 4-1: config 0 descriptor?? [ 105.535351][ T5830] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 105.825976][ T5879] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0001/input/input6 [ 105.847670][ T8] usb 2-1: USB disconnect, device number 2 [ 105.970526][ T5879] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 106.009615][ T5879] usb 4-1: USB disconnect, device number 4 [ 106.100264][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 106.210171][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 106.261821][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.336640][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.936804][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.039509][ T1138] bond0 (unregistering): Released all slaves [ 107.087027][ T50] Bluetooth: hci1: command tx timeout [ 107.132779][ T6153] team0: Port device team_slave_0 added [ 107.150524][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 107.161564][ T6153] team0: Port device team_slave_1 added [ 107.164328][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 107.194388][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.210374][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.217616][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.219342][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.245283][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.264752][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.276303][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.290864][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.292579][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.302255][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.310235][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.342593][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.442871][ T6153] hsr_slave_0: entered promiscuous mode [ 107.464598][ T6153] hsr_slave_1: entered promiscuous mode [ 107.568824][ T23] usb 1-1: usb_control_msg returned -32 [ 107.582619][ T23] usbtmc 1-1:16.0: can't read capabilities [ 107.814147][ T6153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.832280][ T6153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.843354][ T6153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.868685][ T6153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.009567][ T6237] loop3: detected capacity change from 0 to 64 [ 108.040749][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.104757][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.120606][ T6239] loop1: detected capacity change from 0 to 256 [ 108.132129][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.139375][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.150656][ T6239] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x50a6a7f9, utbl_chksum : 0xe619d30d) [ 108.153445][ T6237] hfs: request for non-existent node 131072 in B*Tree [ 108.167850][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.177162][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.184589][ T6237] hfs: request for non-existent node 131072 in B*Tree [ 108.603796][ T6247] loop3: detected capacity change from 0 to 512 [ 108.636355][ T6247] EXT4-fs: Ignoring removed nobh option [ 108.671216][ T6247] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.141: iget: bad i_size value: 38620345925642 [ 108.715426][ T6247] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.141: couldn't read orphan inode 15 (err -117) [ 108.751335][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.864015][ T6247] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.141: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 109.027055][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.044457][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.166973][ T50] Bluetooth: hci1: command tx timeout [ 109.585507][ T6242] loop1: detected capacity change from 0 to 131072 [ 109.594819][ T6242] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 109.603428][ T6242] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.614034][ T6242] F2FS-fs (loop1): invalid crc value [ 109.623894][ T6242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.683083][ T6242] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.690254][ T6242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 109.707066][ T23] usb 1-1: USB disconnect, device number 2 [ 109.819488][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 109.857256][ T5879] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 109.876659][ T6153] veth0_vlan: entered promiscuous mode [ 109.908408][ T6153] veth1_vlan: entered promiscuous mode [ 109.992246][ T6153] veth0_macvtap: entered promiscuous mode [ 110.003573][ T6153] veth1_macvtap: entered promiscuous mode [ 110.043655][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.068897][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.071435][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.096575][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.100338][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.126827][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.139754][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.147005][ T5879] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.151052][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.169870][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.173492][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.195661][ T6271] loop0: detected capacity change from 0 to 512 [ 110.209255][ T5879] usb 4-1: config 0 descriptor?? [ 110.213000][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.232936][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.246618][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.250649][ T6271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.259142][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.285321][ T6271] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.298052][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.326458][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.350247][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.398568][ T6153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.418775][ T6153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.429230][ T6153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.438475][ T6153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.584517][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.603487][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.626632][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.677364][ T5879] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 110.706929][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.730472][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.972079][ T23] usb 4-1: USB disconnect, device number 5 [ 111.197862][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.210850][ T6276] loop0: detected capacity change from 0 to 32768 [ 111.247112][ T50] Bluetooth: hci1: command tx timeout [ 111.271964][ T6276] loop0: p9 p11 p16 [ 111.386930][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 111.401592][ T5879] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 111.426826][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.434899][ T5879] usb 5-1: Product: syz [ 111.447307][ T5879] usb 5-1: Manufacturer: syz [ 111.452326][ T5879] usb 5-1: SerialNumber: syz [ 111.474023][ T5879] usb 5-1: config 0 descriptor?? [ 111.491493][ T5879] gspca_main: se401-2.14.0 probing 047d:5003 [ 111.682003][ T6284] loop3: detected capacity change from 0 to 1024 [ 111.721805][ T6280] loop1: detected capacity change from 0 to 32768 [ 111.733184][ T6284] hfsplus: xattr searching failed [ 111.773306][ T6280] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.783870][ T6291] loop0: detected capacity change from 0 to 512 [ 111.794303][ T6291] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.826867][ T6280] XFS (loop1): Ending clean mount [ 111.833481][ T6291] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.151: invalid indirect mapped block 4294967295 (level 0) [ 111.839159][ T6280] XFS (loop1): Quotacheck needed: Please wait. [ 111.876149][ T6291] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.151: invalid indirect mapped block 4294967295 (level 1) [ 111.910893][ T5879] gspca_se401: Frame size: 115x0 bayer [ 111.914913][ T6291] EXT4-fs (loop0): 1 orphan inode deleted [ 111.916575][ T6280] XFS (loop1): Quotacheck: Done. [ 111.926857][ T6291] EXT4-fs (loop0): 1 truncate cleaned up [ 111.927498][ T5879] gspca_se401: Frame size: 0x0 1/16th janggu [ 111.934425][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.964069][ T5879] gspca_se401: Frame size: 0x0 1/16th janggu [ 112.016173][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.087121][ T6280] XFS (loop1): User initiated shutdown received. [ 112.100676][ T6280] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 112.119842][ T6280] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 112.143936][ T5879] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 112.174441][ T5879] usb 5-1: USB disconnect, device number 2 [ 112.214250][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.633167][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 112.723718][ T6314] loop3: detected capacity change from 0 to 1024 [ 112.872243][ T6323] loop1: detected capacity change from 0 to 128 [ 112.892662][ T6319] loop0: detected capacity change from 0 to 2048 [ 112.905794][ T6319] EXT4-fs: Ignoring removed bh option [ 112.914567][ T6323] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 112.932275][ T6323] hpfs: filesystem error: improperly stopped [ 112.940395][ T6323] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 112.950533][ T6323] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 112.954495][ T2890] hfsplus: b-tree write err: -5, ino 8 [ 112.961757][ T6323] hpfs: You really don't want any checks? You are crazy... [ 112.975241][ T6323] hpfs: hpfs_map_sector(): read error [ 112.987956][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.002226][ T6323] hpfs: code page support is disabled [ 113.016982][ T6323] hpfs: hpfs_map_4sectors(): unaligned read [ 113.037910][ T6323] hpfs: hpfs_map_4sectors(): unaligned read [ 113.046928][ T6323] hpfs: filesystem error: unable to find root dir [ 113.103690][ T6327] loop3: detected capacity change from 0 to 1024 [ 113.112256][ T6319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.217177][ T6327] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 113.243987][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.320952][ T6331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.784248][ T6345] loop3: detected capacity change from 0 to 512 [ 113.829381][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.867010][ T6345] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.068421][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.177519][ T6358] loop4: detected capacity change from 0 to 8192 [ 114.207367][ T6358] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.261753][ T6369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.183'. [ 114.315926][ T6368] pim6reg1: entered allmulticast mode [ 114.601560][ T6382] loop4: detected capacity change from 0 to 16 [ 114.609604][ T6382] erofs: (device loop4): mounted with root inode @ nid 36. [ 114.630312][ T6382] syz.4.189: attempt to access beyond end of device [ 114.630312][ T6382] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 114.652103][ T6382] syz.4.189: attempt to access beyond end of device [ 114.652103][ T6382] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 114.666110][ T6382] syz.4.189: attempt to access beyond end of device [ 114.666110][ T6382] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 114.721787][ T6376] page:ffffea0001bc1e80 refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f07a [ 114.732688][ T6376] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 114.740175][ T6376] page_type: 0xffffffff() [ 114.744560][ T6376] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 114.753337][ T6376] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000 [ 114.762032][ T6376] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled()) [ 114.771091][ T6376] page_owner tracks the page as allocated [ 114.777412][ T6376] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x120820(GFP_ATOMIC|__GFP_MEMALLOC|__GFP_HARDWALL), pid 6153, tgid 6153 (syz-executor), ts 114715276943, free_ts 114712754685 [ 114.796476][ T6376] post_alloc_hook+0x1cd/0x210 [ 114.799543][ T6384] binder: 6383:6384 ioctl c0306201 200000000100 returned -14 [ 114.801341][ T6376] get_page_from_freelist+0x195c/0x19f0 [ 114.814447][ T6376] __alloc_pages+0x1e3/0x460 [ 114.819350][ T6376] alloc_pages_node+0xf9/0x160 [ 114.824158][ T6376] __napi_alloc_skb+0x381/0x560 [ 114.829803][ T6376] page_to_skb+0x232/0x8c0 [ 114.834300][ T6376] receive_buf+0x2fb/0x3520 [ 114.839040][ T6376] virtnet_poll+0x61f/0x1180 [ 114.843684][ T6376] __napi_poll+0xc0/0x460 [ 114.848477][ T6376] net_rx_action+0x5ea/0xbf0 [ 114.853119][ T6376] handle_softirqs+0x280/0x820 [ 114.858168][ T6376] __irq_exit_rcu+0xc7/0x190 [ 114.862820][ T6376] irq_exit_rcu+0x9/0x20 [ 114.867202][ T6376] common_interrupt+0xb9/0xd0 [ 114.871939][ T6376] asm_common_interrupt+0x26/0x40 [ 114.877074][ T6376] page last free stack trace: [ 114.881775][ T6376] free_unref_page_prepare+0x7ce/0x8e0 [ 114.887358][ T6376] free_unref_page_list+0xbe/0x860 [ 114.892518][ T6376] release_pages+0x1fa0/0x2220 [ 114.897445][ T6376] __folio_batch_release+0x71/0xe0 [ 114.902601][ T6376] truncate_inode_pages_range+0x358/0xf00 [ 114.908418][ T6376] evict+0x499/0x870 [ 114.912354][ T6376] erofs_put_super+0x7b/0x150 [ 114.917127][ T6376] generic_shutdown_super+0x134/0x2b0 [ 114.923238][ T6376] kill_block_super+0x44/0x90 [ 114.928204][ T6376] erofs_kill_sb+0x4c/0x140 [ 114.932786][ T6376] deactivate_locked_super+0x97/0x100 [ 114.938341][ T6376] cleanup_mnt+0x429/0x4c0 [ 114.942818][ T6376] task_work_run+0x1ce/0x250 [ 114.947506][ T6376] exit_to_user_mode_loop+0xe6/0x110 [ 114.952838][ T6376] exit_to_user_mode_prepare+0xf6/0x180 [ 114.958501][ T6376] syscall_exit_to_user_mode+0x1a/0x50 [ 114.964239][ T6376] ------------[ cut here ]------------ [ 114.969829][ T6376] WARNING: CPU: 0 PID: 6376 at include/linux/memcontrol.h:764 folio_lruvec_lock_irqsave+0x212/0x270 [ 114.980734][ T6376] Modules linked in: [ 114.984731][ T6376] CPU: 0 PID: 6376 Comm: syz.3.187 Not tainted syzkaller #0 [ 114.992165][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.002368][ T6376] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270 [ 115.009158][ T6376] Code: 4c 89 f7 e8 30 31 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 20 ad b6 8a e8 95 9a e1 ff c6 05 ac 78 51 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe [ 115.029644][ T6376] RSP: 0018:ffffc9000430f1d8 EFLAGS: 00010246 [ 115.035769][ T6376] RAX: 1092af183b6c3100 RBX: ffffea0001bc1e80 RCX: 1092af183b6c3100 [ 115.044017][ T6376] RDX: 0000000000000002 RSI: ffffffff8aaace60 RDI: ffffffff8afc64c0 [ 115.052315][ T6376] RBP: ffffc9000430f280 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 115.060416][ T6376] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffff8880b8e36c28 [ 115.068520][ T6376] R13: dffffc0000000000 R14: ffff88805ce2e000 R15: 0000000000000000 [ 115.076544][ T6376] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 115.085662][ T6376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.092411][ T6376] CR2: 000000110c39002d CR3: 000000000cb30000 CR4: 00000000003506f0 [ 115.100504][ T6376] Call Trace: [ 115.103836][ T6376] [ 115.106867][ T6376] ? folio_memcg+0x127/0x480 [ 115.111539][ T6376] folio_batch_move_lru+0x2d8/0x6b0 [ 115.116872][ T6376] ? folio_add_lru+0xd50/0xd50 [ 115.121686][ T6376] ? lru_add_drain_cpu+0x8c0/0x8c0 [ 115.127563][ T6376] ? mark_lock+0x94/0x320 [ 115.132116][ T6376] lru_add_drain_cpu+0x10e/0x8c0 [ 115.137164][ T6376] ? folio_add_lru_vma+0x1f0/0x1f0 [ 115.142445][ T6376] ? lru_add_drain+0x79/0x3e0 [ 115.147262][ T6376] ? lru_add_drain+0x79/0x3e0 [ 115.151991][ T6376] lru_add_drain+0x121/0x3e0 [ 115.157578][ T6376] free_pages_and_swap_cache+0x1c/0xa0 [ 115.157643][ T6376] tlb_flush_mmu+0x368/0x4f0 [ 115.157682][ T6376] unmap_page_range+0x26d4/0x2fe0 [ 115.157749][ T6376] ? copy_page_range+0x3600/0x3600 [ 115.157809][ T6376] ? unmap_single_vma+0x1b0/0x2a0 [ 115.157847][ T6376] unmap_vmas+0x25e/0x3a0 [ 115.157885][ T6376] ? unmap_page_range+0x2fe0/0x2fe0 [ 115.157921][ T6376] ? __lock_acquire+0x7c80/0x7c80 [ 115.157966][ T6376] exit_mmap+0x200/0xb50 [ 115.157996][ T6376] ? exit_mm_release+0x1a/0x30 [ 115.158023][ T6376] ? vm_brk+0x30/0x30 [ 115.158049][ T6376] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 115.158109][ T6376] ? uprobe_clear_state+0x278/0x290 [ 115.158133][ T6376] ? mm_update_next_owner+0x562/0x6c0 [ 115.158168][ T6376] __mmput+0x118/0x3c0 [ 115.158191][ T6376] exit_mm+0x1da/0x2c0 [ 115.158230][ T6376] ? do_exit+0x23c0/0x23c0 [ 115.158261][ T6376] ? taskstats_exit+0x35e/0x9e0 [ 115.158301][ T6376] do_exit+0x88e/0x23c0 [ 115.158342][ T6376] ? put_task_struct+0xc0/0xc0 [ 115.158378][ T6376] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 115.158403][ T6376] ? get_signal+0x1068/0x1400 [ 115.158438][ T6376] ? lock_chain_count+0x20/0x20 [ 115.158463][ T6376] ? _raw_spin_lock_irq+0xaf/0xe0 [ 115.158489][ T6376] do_group_exit+0x21b/0x2d0 [ 115.158521][ T6376] ? lockdep_hardirqs_on+0x98/0x150 [ 115.158559][ T6376] get_signal+0x12fc/0x1400 [ 115.158617][ T6376] arch_do_signal_or_restart+0x96/0x780 [ 115.158655][ T6376] ? get_sigframe_size+0x20/0x20 [ 115.158708][ T6376] exit_to_user_mode_loop+0x70/0x110 [ 115.158740][ T6376] exit_to_user_mode_prepare+0xf6/0x180 [ 115.158769][ T6376] syscall_exit_to_user_mode+0x1a/0x50 [ 115.158801][ T6376] do_syscall_64+0x61/0xb0 [ 115.158827][ T6376] ? clear_bhb_loop+0x40/0x90 [ 115.158849][ T6376] ? clear_bhb_loop+0x40/0x90 [ 115.158875][ T6376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.158898][ T6376] RIP: 0033:0x7f2492b8eec9 [ 115.158931][ T6376] Code: Unable to access opcode bytes at 0x7f2492b8ee9f. [ 115.158943][ T6376] RSP: 002b:00007f2493ae90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.158969][ T6376] RAX: fffffffffffffe00 RBX: 00007f2492de5fa8 RCX: 00007f2492b8eec9 [ 115.158985][ T6376] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2492de5fa8 [ 115.158999][ T6376] RBP: 00007f2492de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 115.159013][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.159026][ T6376] R13: 00007f2492de6038 R14: 00007ffee4f6f490 R15: 00007ffee4f6f578 [ 115.159060][ T6376] [ 115.159071][ T6376] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.159081][ T6376] CPU: 0 PID: 6376 Comm: syz.3.187 Not tainted syzkaller #0 [ 115.159100][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.159111][ T6376] Call Trace: [ 115.159119][ T6376] [ 115.159126][ T6376] dump_stack_lvl+0x16c/0x230 [ 115.159156][ T6376] ? show_regs_print_info+0x20/0x20 [ 115.159183][ T6376] ? load_image+0x3b0/0x3b0 [ 115.159226][ T6376] panic+0x2c0/0x710 [ 115.159251][ T6376] ? bpf_jit_dump+0xd0/0xd0 [ 115.159288][ T6376] __warn+0x2e0/0x470 [ 115.159305][ T6376] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 115.159329][ T6376] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 115.159350][ T6376] report_bug+0x2be/0x4f0 [ 115.159377][ T6376] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 115.159398][ T6376] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 115.159419][ T6376] ? folio_lruvec_lock_irqsave+0x214/0x270 [ 115.159439][ T6376] handle_bug+0xcf/0x120 [ 115.159466][ T6376] exc_invalid_op+0x1a/0x50 [ 115.159493][ T6376] asm_exc_invalid_op+0x1a/0x20 [ 115.159512][ T6376] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270 [ 115.159533][ T6376] Code: 4c 89 f7 e8 30 31 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 20 ad b6 8a e8 95 9a e1 ff c6 05 ac 78 51 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe [ 115.159549][ T6376] RSP: 0018:ffffc9000430f1d8 EFLAGS: 00010246 [ 115.159565][ T6376] RAX: 1092af183b6c3100 RBX: ffffea0001bc1e80 RCX: 1092af183b6c3100 [ 115.159579][ T6376] RDX: 0000000000000002 RSI: ffffffff8aaace60 RDI: ffffffff8afc64c0 [ 115.159592][ T6376] RBP: ffffc9000430f280 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 115.159605][ T6376] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffff8880b8e36c28 [ 115.159619][ T6376] R13: dffffc0000000000 R14: ffff88805ce2e000 R15: 0000000000000000 [ 115.159651][ T6376] ? folio_lruvec_lock_irqsave+0x20b/0x270 [ 115.159671][ T6376] ? folio_memcg+0x127/0x480 [ 115.159696][ T6376] folio_batch_move_lru+0x2d8/0x6b0 [ 115.159722][ T6376] ? folio_add_lru+0xd50/0xd50 [ 115.159742][ T6376] ? lru_add_drain_cpu+0x8c0/0x8c0 [ 115.159761][ T6376] ? mark_lock+0x94/0x320 [ 115.159793][ T6376] lru_add_drain_cpu+0x10e/0x8c0 [ 115.159820][ T6376] ? folio_add_lru_vma+0x1f0/0x1f0 [ 115.159851][ T6376] ? lru_add_drain+0x79/0x3e0 [ 115.159869][ T6376] ? lru_add_drain+0x79/0x3e0 [ 115.159892][ T6376] lru_add_drain+0x121/0x3e0 [ 115.159916][ T6376] free_pages_and_swap_cache+0x1c/0xa0 [ 115.159949][ T6376] tlb_flush_mmu+0x368/0x4f0 [ 115.159984][ T6376] unmap_page_range+0x26d4/0x2fe0 [ 115.160047][ T6376] ? copy_page_range+0x3600/0x3600 [ 115.160080][ T6376] ? unmap_single_vma+0x1b0/0x2a0 [ 115.160115][ T6376] unmap_vmas+0x25e/0x3a0 [ 115.160150][ T6376] ? unmap_page_range+0x2fe0/0x2fe0 [ 115.160181][ T6376] ? __lock_acquire+0x7c80/0x7c80 [ 115.160231][ T6376] exit_mmap+0x200/0xb50 [ 115.160258][ T6376] ? exit_mm_release+0x1a/0x30 [ 115.160282][ T6376] ? vm_brk+0x30/0x30 [ 115.160306][ T6376] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 115.160363][ T6376] ? uprobe_clear_state+0x278/0x290 [ 115.160384][ T6376] ? mm_update_next_owner+0x562/0x6c0 [ 115.160419][ T6376] __mmput+0x118/0x3c0 [ 115.160441][ T6376] exit_mm+0x1da/0x2c0 [ 115.160473][ T6376] ? do_exit+0x23c0/0x23c0 [ 115.160502][ T6376] ? taskstats_exit+0x35e/0x9e0 [ 115.160540][ T6376] do_exit+0x88e/0x23c0 [ 115.160579][ T6376] ? put_task_struct+0xc0/0xc0 [ 115.160613][ T6376] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 115.160636][ T6376] ? get_signal+0x1068/0x1400 [ 115.160669][ T6376] ? lock_chain_count+0x20/0x20 [ 115.160690][ T6376] ? _raw_spin_lock_irq+0xaf/0xe0 [ 115.160712][ T6376] do_group_exit+0x21b/0x2d0 [ 115.160742][ T6376] ? lockdep_hardirqs_on+0x98/0x150 [ 115.160776][ T6376] get_signal+0x12fc/0x1400 [ 115.160832][ T6376] arch_do_signal_or_restart+0x96/0x780 [ 115.160868][ T6376] ? get_sigframe_size+0x20/0x20 [ 115.160921][ T6376] exit_to_user_mode_loop+0x70/0x110 [ 115.160951][ T6376] exit_to_user_mode_prepare+0xf6/0x180 [ 115.160980][ T6376] syscall_exit_to_user_mode+0x1a/0x50 [ 115.161012][ T6376] do_syscall_64+0x61/0xb0 [ 115.161036][ T6376] ? clear_bhb_loop+0x40/0x90 [ 115.161056][ T6376] ? clear_bhb_loop+0x40/0x90 [ 115.161080][ T6376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.161100][ T6376] RIP: 0033:0x7f2492b8eec9 [ 115.161116][ T6376] Code: Unable to access opcode bytes at 0x7f2492b8ee9f. [ 115.161125][ T6376] RSP: 002b:00007f2493ae90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.161144][ T6376] RAX: fffffffffffffe00 RBX: 00007f2492de5fa8 RCX: 00007f2492b8eec9 [ 115.161158][ T6376] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2492de5fa8 [ 115.161170][ T6376] RBP: 00007f2492de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 115.161181][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.161193][ T6376] R13: 00007f2492de6038 R14: 00007ffee4f6f490 R15: 00007ffee4f6f578 [ 115.161229][ T6376] [ 115.161570][ T6376] Kernel Offset: disabled