last executing test programs: 6.48995703s ago: executing program 3 (id=166): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 6.310835944s ago: executing program 1 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40800}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.299621329s ago: executing program 3 (id=169): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.510257006s ago: executing program 2 (id=171): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='\x00', 0x1) 5.381172327s ago: executing program 2 (id=172): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 5.120960113s ago: executing program 1 (id=174): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r0, &(0x7f00000008c0)='/', 0xff7f, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x11}, 0x18) 5.091077668s ago: executing program 3 (id=175): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x66, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x20, 0x15, 0x1, "1c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.831741733s ago: executing program 1 (id=176): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.238972068s ago: executing program 2 (id=181): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(r0, 0xc, 0x2000000006, 0x6) 3.148226997s ago: executing program 4 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7800000000002100000008000300", @ANYRES32=r3, @ANYBLOB="28002d80040000bb0800"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) 2.72867391s ago: executing program 4 (id=184): timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 2.553603243s ago: executing program 1 (id=185): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x400000000000007, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.463631274s ago: executing program 3 (id=186): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 2.215395102s ago: executing program 3 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='+ 1 0 0', 0x7) 2.149973864s ago: executing program 4 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x4000008d, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000105, 0x0, 0x40}]}) 1.636320654s ago: executing program 4 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 1.357508326s ago: executing program 0 (id=191): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000004480)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa88a8290081003700080045a7001400680000402f"], 0x0) 1.356076529s ago: executing program 2 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.166122455s ago: executing program 3 (id=193): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.076024099s ago: executing program 4 (id=194): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1.032994046s ago: executing program 2 (id=195): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 999.44814ms ago: executing program 0 (id=196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 816.354458ms ago: executing program 0 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000313000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 637.936999ms ago: executing program 1 (id=198): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4052}, 0x4000) close(0x3) 381.659531ms ago: executing program 1 (id=199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x7478b000) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) 371.966095ms ago: executing program 0 (id=200): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 207.228017ms ago: executing program 4 (id=201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 196.303771ms ago: executing program 0 (id=202): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x1, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) setresuid(0x0, 0xee00, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}], 0x18}, 0x880) 40.750897ms ago: executing program 2 (id=203): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 0s ago: executing program 0 (id=204): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) writev(r0, &(0x7f0000003780)=[{&(0x7f0000002300)="aa", 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 76.204485][ T5602] cgroup: Unknown subsys name 'net' [ 76.321186][ T5602] cgroup: Unknown subsys name 'cpuset' [ 76.330890][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.952677][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.396966][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.407185][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.415610][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.423979][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.432254][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.433452][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.433731][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.434886][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.442749][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.444816][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.449892][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.450790][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.453758][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.458398][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.459416][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.460769][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.473313][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.482337][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.489844][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.490230][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.491264][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.499044][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.519808][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.527792][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.528902][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.439295][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.441800][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.442191][ T5623] bridge_slave_0: entered allmulticast mode [ 82.449726][ T5623] bridge_slave_0: entered promiscuous mode [ 82.510064][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.510289][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.510646][ T5623] bridge_slave_1: entered allmulticast mode [ 82.515603][ T5623] bridge_slave_1: entered promiscuous mode [ 82.554098][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.554635][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.555629][ T5613] bridge_slave_0: entered allmulticast mode [ 82.560184][ T5613] bridge_slave_0: entered promiscuous mode [ 82.608485][ T5633] Bluetooth: hci0: command tx timeout [ 82.608491][ T52] Bluetooth: hci4: command tx timeout [ 82.608641][ T52] Bluetooth: hci3: command tx timeout [ 82.623967][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.624932][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.627219][ T5613] bridge_slave_1: entered allmulticast mode [ 82.633049][ T5613] bridge_slave_1: entered promiscuous mode [ 82.671660][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.687985][ T5618] Bluetooth: hci1: command tx timeout [ 82.688087][ T52] Bluetooth: hci2: command tx timeout [ 82.728671][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.728916][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.732092][ T5616] bridge_slave_0: entered allmulticast mode [ 82.738438][ T5616] bridge_slave_0: entered promiscuous mode [ 82.757557][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.768056][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.806995][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.807352][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.808263][ T5616] bridge_slave_1: entered allmulticast mode [ 82.814149][ T5616] bridge_slave_1: entered promiscuous mode [ 82.827922][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.903347][ T5623] team0: Port device team_slave_0 added [ 82.904588][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.904849][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.909842][ T5614] bridge_slave_0: entered allmulticast mode [ 82.914505][ T5614] bridge_slave_0: entered promiscuous mode [ 82.920593][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.920826][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.921152][ T5615] bridge_slave_0: entered allmulticast mode [ 82.929935][ T5615] bridge_slave_0: entered promiscuous mode [ 82.940595][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.940845][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.941129][ T5615] bridge_slave_1: entered allmulticast mode [ 82.944006][ T5615] bridge_slave_1: entered promiscuous mode [ 83.001345][ T5613] team0: Port device team_slave_0 added [ 83.008383][ T5623] team0: Port device team_slave_1 added [ 83.022490][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.022900][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.023225][ T5614] bridge_slave_1: entered allmulticast mode [ 83.031076][ T5614] bridge_slave_1: entered promiscuous mode [ 83.080408][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.090406][ T5613] team0: Port device team_slave_1 added [ 83.127909][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.137246][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.155836][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.155997][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.156066][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.173952][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.183068][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.220281][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.220367][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.220457][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.230579][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.230636][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.230709][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.241566][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.318853][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.318896][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.318967][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.391298][ T5616] team0: Port device team_slave_0 added [ 83.419064][ T5615] team0: Port device team_slave_0 added [ 83.426746][ T5616] team0: Port device team_slave_1 added [ 83.465627][ T5614] team0: Port device team_slave_0 added [ 83.473654][ T5615] team0: Port device team_slave_1 added [ 83.498452][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.498488][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.498515][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.544711][ T5614] team0: Port device team_slave_1 added [ 83.559823][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.559855][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.560947][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.610870][ T5613] hsr_slave_0: entered promiscuous mode [ 83.614010][ T5613] hsr_slave_1: entered promiscuous mode [ 83.631954][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.632075][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.632176][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.677095][ T5623] hsr_slave_0: entered promiscuous mode [ 83.680571][ T5623] hsr_slave_1: entered promiscuous mode [ 83.682683][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 83.682921][ T5623] Cannot create hsr debugfs directory [ 83.711187][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.711228][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.711255][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.756152][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.756204][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.756230][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.822778][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.822822][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.823896][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.898289][ T5616] hsr_slave_0: entered promiscuous mode [ 83.900893][ T5616] hsr_slave_1: entered promiscuous mode [ 83.902637][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 83.902692][ T5616] Cannot create hsr debugfs directory [ 83.972343][ T5615] hsr_slave_0: entered promiscuous mode [ 83.974897][ T5615] hsr_slave_1: entered promiscuous mode [ 83.976804][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 83.976860][ T5615] Cannot create hsr debugfs directory [ 84.052181][ T5614] hsr_slave_0: entered promiscuous mode [ 84.054768][ T5614] hsr_slave_1: entered promiscuous mode [ 84.056918][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.056967][ T5614] Cannot create hsr debugfs directory [ 84.538001][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.553403][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.558584][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.571668][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.579574][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.590031][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.606622][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.618507][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.678817][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.688105][ T52] Bluetooth: hci0: command tx timeout [ 84.688253][ T5618] Bluetooth: hci4: command tx timeout [ 84.692938][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.701738][ T5618] Bluetooth: hci3: command tx timeout [ 84.721093][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.731372][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.733684][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.746292][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.757633][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.766863][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.774117][ T5618] Bluetooth: hci2: command tx timeout [ 84.778324][ T5618] Bluetooth: hci1: command tx timeout [ 84.885649][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.896955][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.905698][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.915488][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.926668][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.938171][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.950986][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.959986][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.039635][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.070946][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.081121][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.088720][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.101775][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.118824][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.129235][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.134544][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.145162][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.205345][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.250680][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.251063][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.283765][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.293897][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.303245][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.313031][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.326847][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.339986][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.350221][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.352329][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.367696][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.382382][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.382479][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.460066][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.501244][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.502317][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.540558][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.552131][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.552461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.644207][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.667030][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.701772][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.701992][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.761699][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.771430][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.771562][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.822065][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.822346][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.873003][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.873326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.933044][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.084367][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.142948][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.143247][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.223982][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.224106][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.529739][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.767842][ T5618] Bluetooth: hci3: command tx timeout [ 86.767888][ T5633] Bluetooth: hci0: command tx timeout [ 86.768387][ T52] Bluetooth: hci4: command tx timeout [ 86.817465][ T5623] veth0_vlan: entered promiscuous mode [ 86.847912][ T5618] Bluetooth: hci1: command tx timeout [ 86.847959][ T5618] Bluetooth: hci2: command tx timeout [ 86.891557][ T5623] veth1_vlan: entered promiscuous mode [ 87.027008][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.177906][ T5623] veth0_macvtap: entered promiscuous mode [ 87.213726][ T5623] veth1_macvtap: entered promiscuous mode [ 87.330856][ T5613] veth0_vlan: entered promiscuous mode [ 87.369676][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.407298][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.421783][ T5613] veth1_vlan: entered promiscuous mode [ 87.491237][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.518263][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.523424][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.624010][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.684431][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.722454][ T5613] veth0_macvtap: entered promiscuous mode [ 87.738515][ T1012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.775676][ T5613] veth1_macvtap: entered promiscuous mode [ 87.850381][ T614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.850439][ T614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.946190][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.986411][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.994076][ T5615] veth0_vlan: entered promiscuous mode [ 88.007121][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.012514][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.012563][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.076575][ T5615] veth1_vlan: entered promiscuous mode [ 88.128712][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.128787][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.128826][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.128954][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.237829][ T5623] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.296071][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.296116][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.383973][ T5614] veth0_vlan: entered promiscuous mode [ 88.426999][ T5615] veth0_macvtap: entered promiscuous mode [ 88.469169][ T5813] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 88.476903][ T5813] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6'. [ 88.515031][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.515085][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.535477][ T5615] veth1_macvtap: entered promiscuous mode [ 88.562317][ T5614] veth1_vlan: entered promiscuous mode [ 88.612368][ T5817] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.642307][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.739538][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.772864][ T5616] veth0_vlan: entered promiscuous mode [ 88.833681][ T5614] veth0_macvtap: entered promiscuous mode [ 88.841288][ T5616] veth1_vlan: entered promiscuous mode [ 88.848898][ T52] Bluetooth: hci4: command tx timeout [ 88.848948][ T52] Bluetooth: hci0: command tx timeout [ 88.862818][ T5618] Bluetooth: hci3: command tx timeout [ 88.878335][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.880551][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.880688][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.880791][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.927727][ T5618] Bluetooth: hci2: command tx timeout [ 88.927847][ T5618] Bluetooth: hci1: command tx timeout [ 88.949253][ T5614] veth1_macvtap: entered promiscuous mode [ 89.085804][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.169124][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.208123][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.211958][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.214085][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.214137][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.254269][ T5616] veth0_macvtap: entered promiscuous mode [ 89.292856][ T5616] veth1_macvtap: entered promiscuous mode [ 89.322661][ T5830] loop1: detected capacity change from 0 to 256 [ 89.340149][ T5830] ======================================================= [ 89.340149][ T5830] WARNING: The mand mount option has been deprecated and [ 89.340149][ T5830] and is ignored by this kernel. Remove the mand [ 89.340149][ T5830] option from the mount to silence this warning. [ 89.340149][ T5830] ======================================================= [ 89.462338][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.462382][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.489105][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.500393][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.540793][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.614111][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.742745][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 89.742801][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 89.799011][ T5834] pim6reg1: entered promiscuous mode [ 89.799060][ T5834] pim6reg1: entered allmulticast mode [ 89.811575][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820891][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820939][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820978][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858312][ T5839] loop3: detected capacity change from 0 to 256 [ 90.044976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.045037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.163419][ T5841] loop1: detected capacity change from 0 to 32768 [ 90.186777][ T5841] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.16 (5841) [ 90.221498][ T5841] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 90.232749][ T5841] BTRFS info (device loop1): using crc32c checksum algorithm [ 90.389882][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.389924][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.479789][ T5841] BTRFS info (device loop1): enabling ssd optimizations [ 90.486901][ T5841] BTRFS info (device loop1): turning on async discard [ 90.495747][ T5841] BTRFS info (device loop1): enabling free space tree [ 90.543412][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.543459][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.695401][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.704646][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.163909][ T5613] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.531066][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 91.531126][ T5881] netlink: 'syz.4.27': attribute type 10 has an invalid length. [ 91.832811][ T10] cfg80211: failed to load regulatory.db [ 91.858871][ T5631] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.889789][ T5631] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.925116][ T5892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.553131][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 92.581493][ T5910] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 92.817333][ T5919] process 'syz.1.43' launched '/dev/fd/3' with NULL argv: empty string added [ 92.853681][ T5919] loop1: detected capacity change from 0 to 128 [ 92.871166][ T5919] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 92.885335][ T5919] hpfs: filesystem error: improperly stopped [ 92.892160][ T5919] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 92.900254][ T5919] hpfs: You really don't want any checks? You are crazy... [ 92.910664][ T5919] hpfs: Code page index out of array [ 92.910707][ T5919] hpfs: code page support is disabled [ 92.932728][ T5919] hpfs: hpfs_map_4sectors(): unaligned read [ 92.937032][ T5919] hpfs: hpfs_map_4sectors(): unaligned read [ 92.937074][ T5919] hpfs: filesystem error: unable to find root dir [ 92.967773][ T5631] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.129299][ T5631] usb 5-1: Using ep0 maxpacket: 8 [ 93.136160][ T5631] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.152250][ T5631] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 93.160666][ T5631] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.171114][ T5631] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.181058][ T5631] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.191520][ T5631] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.191571][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.424595][ T5926] netlink: 84 bytes leftover after parsing attributes in process `syz.0.47'. [ 93.435476][ T5926] netlink: 84 bytes leftover after parsing attributes in process `syz.0.47'. [ 93.447119][ T5926] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 93.468139][ T5631] usb 5-1: usb_control_msg returned -32 [ 93.468200][ T5631] usbtmc 5-1:16.0: can't read capabilities [ 93.708642][ T5816] usb 5-1: USB disconnect, device number 2 [ 93.754741][ T5934] capability: warning: `syz.3.49' uses 32-bit capabilities (legacy support in use) [ 94.016700][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 94.191756][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 94.206630][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.361222][ T31] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 94.389741][ T31] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 94.389783][ T31] usb 1-1: Product: syz [ 94.389814][ T31] usb 1-1: SerialNumber: syz [ 94.491621][ T31] usb 1-1: config 0 descriptor?? [ 94.492629][ T5945] loop3: detected capacity change from 0 to 32768 [ 94.545519][ T5945] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.545568][ T5945] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.642240][ T5945] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 94.660864][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.660907][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.738498][ T31] hso 1-1:0.0: Failed to find BULK eps [ 94.974186][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 313ms [ 95.025008][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 95.026244][ T5945] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 95.092115][ T5966] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 95.404496][ T5972] loop4: detected capacity change from 0 to 128 [ 95.534975][ T5631] usb 1-1: USB disconnect, device number 2 [ 95.721867][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.724950][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.985114][ T5980] syzkaller1: entered promiscuous mode [ 95.985160][ T5980] syzkaller1: entered allmulticast mode [ 96.015788][ T5958] loop1: detected capacity change from 0 to 40427 [ 96.512396][ T6000] capability: warning: `syz.2.78' uses deprecated v2 capabilities in a way that may be insecure [ 96.595513][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'. [ 96.825450][ T6009] input: syz0 as /devices/virtual/input/input5 [ 97.078579][ T6011] loop2: detected capacity change from 0 to 2048 [ 97.117684][ T6013] loop1: detected capacity change from 0 to 512 [ 97.154525][ T6013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.220325][ T6011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.253277][ T5999] loop0: detected capacity change from 0 to 32768 [ 97.278629][ T5999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.77 (5999) [ 97.320934][ T5999] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.331529][ T5999] BTRFS info (device loop0): using crc32c checksum algorithm [ 97.356692][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.438949][ T5999] BTRFS info (device loop0): enabling ssd optimizations [ 97.446144][ T5999] BTRFS info (device loop0): turning on flush-on-commit [ 97.453424][ T5999] BTRFS info (device loop0): enabling free space tree [ 97.460513][ T5999] BTRFS info (device loop0): enabling auto defrag [ 97.467066][ T5999] BTRFS info (device loop0): use lzo compression, level 1 [ 97.474453][ T5999] BTRFS info (device loop0): max_inline set to 4096 [ 97.548680][ T6031] loop1: detected capacity change from 0 to 512 [ 97.559030][ T6031] EXT4-fs: Ignoring removed orlov option [ 97.564806][ T6031] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.740112][ T6031] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.85: corrupted in-inode xattr: e_value size too large [ 97.740823][ T6031] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.757427][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 97.757473][ C0] EXT4-fs (loop1): initial error at time 1786678052: ext4_iget_extra_inode:5210: inode 15 [ 97.757528][ C0] EXT4-fs (loop1): last error at time 1786678052: ext4_iget_extra_inode:5210: inode 15 [ 97.779999][ T6031] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.85: couldn't read orphan inode 15 (err -117) [ 97.780474][ T6031] loop1: lost filesystem error report for type 5 error -117 [ 97.835560][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.856972][ T5623] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.928715][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.959128][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 98.199911][ T6041] loop1: detected capacity change from 0 to 512 [ 98.254607][ T6007] loop3: detected capacity change from 0 to 32768 [ 98.345163][ T6041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.345204][ T6041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.390732][ T6041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 98.402156][ T6041] System zones: 1-12 [ 98.419048][ T6041] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.88: bad orphan inode 131072 [ 98.429553][ T6041] loop1: lost filesystem error report for type 5 error -117 [ 98.445896][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.566440][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.975342][ T6061] loop4: detected capacity change from 0 to 256 [ 99.588690][ T6076] syzkaller1: entered promiscuous mode [ 99.588734][ T6076] syzkaller1: entered allmulticast mode [ 100.375080][ T6098] loop0: detected capacity change from 0 to 2048 [ 100.452817][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.470603][ T6101] warning: `syz.1.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.499428][ T6084] loop3: detected capacity change from 0 to 32768 [ 100.581370][ T6084] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.708790][ T6084] XFS (loop3): Ending clean mount [ 100.745175][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.755884][ T6084] XFS (loop3): Quotacheck needed: Please wait. [ 100.807535][ T5631] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.962635][ T6084] XFS (loop3): Quotacheck: Done. [ 100.980580][ T5631] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 100.992364][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.010061][ T5631] usb 5-1: config 0 descriptor?? [ 101.040304][ T5631] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 101.104618][ T6123] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 101.124934][ T6123] overlayfs: overlapping lowerdir path [ 101.262933][ T5615] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.295729][ T6118] loop1: detected capacity change from 0 to 32768 [ 101.350735][ T6118] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.534158][ T6139] loop0: detected capacity change from 0 to 512 [ 101.548538][ T6139] EXT4-fs: Ignoring removed orlov option [ 101.557102][ T6139] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.581706][ T6139] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.122: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 101.581851][ T6139] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.599184][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 101.599212][ C1] EXT4-fs (loop0): initial error at time 1786678056: ext4_ext_check_inode:521: inode 16 [ 101.599251][ C1] EXT4-fs (loop0): last error at time 1786678056: ext4_ext_check_inode:521: inode 16 [ 101.642547][ T6118] XFS (loop1): Ending clean mount [ 101.660704][ T6139] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.122: couldn't read orphan inode 16 (err -117) [ 101.672986][ T6139] loop0: lost filesystem error report for type 5 error -117 [ 101.674457][ T6139] EXT4-fs (loop0): 1 orphan inode deleted [ 101.696452][ T6139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.796371][ T6139] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 101.910621][ T5631] gspca_cpia1: usb_control_msg 02, error -71 [ 101.911734][ T5631] gspca_cpia1: usb_control_msg 05, error -71 [ 101.914842][ T5631] gspca_cpia1: usb_control_msg 04, error -71 [ 101.915061][ T5631] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 101.958656][ T5631] usb 5-1: USB disconnect, device number 3 [ 101.985879][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.020895][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.458740][ T6155] loop2: detected capacity change from 0 to 128 [ 102.648877][ T6155] syz.2.129: attempt to access beyond end of device [ 102.648877][ T6155] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 102.727043][ T6160] syz.2.129: attempt to access beyond end of device [ 102.727043][ T6160] loop2: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 102.729788][ T6160] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 102.729976][ T6160] syz.2.129: attempt to access beyond end of device [ 102.729976][ T6160] loop2: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 102.730053][ T6160] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 102.730138][ T6160] syz.2.129: attempt to access beyond end of device [ 102.730138][ T6160] loop2: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 102.730208][ T6160] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 102.730894][ T6160] syz.2.129: attempt to access beyond end of device [ 102.730894][ T6160] loop2: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 102.743461][ T6155] syz.2.129: attempt to access beyond end of device [ 102.743461][ T6155] loop2: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 102.743539][ T6155] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 102.743663][ T6155] syz.2.129: attempt to access beyond end of device [ 102.743663][ T6155] loop2: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 102.743737][ T6155] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 102.744056][ T6155] syz.2.129: attempt to access beyond end of device [ 102.744056][ T6155] loop2: rw=8390657, sector=146, nr_sectors = 2 limit=128 [ 102.744119][ T6155] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 103.057768][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.130347][ T52] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 103.209085][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 103.227186][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.227244][ T10] usb 5-1: Product: syz [ 103.227278][ T10] usb 5-1: Manufacturer: syz [ 103.227313][ T10] usb 5-1: SerialNumber: syz [ 103.292683][ T10] usb 5-1: config 0 descriptor?? [ 103.336524][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 103.366291][ T6172] input: syz1 as /devices/virtual/input/input6 [ 103.366404][ T6172] input: failed to attach handler leds to device input6, error: -6 [ 103.421398][ T6175] loop1: detected capacity change from 0 to 2048 [ 103.445874][ T6175] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=11586, location=11586 [ 103.484316][ T6175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.548629][ T32] audit: type=1800 audit(1786678058.762:2): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.136" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 103.726824][ T6183] loop2: detected capacity change from 0 to 512 [ 103.746893][ T6183] EXT4-fs: Ignoring removed i_version option [ 103.805786][ T6183] EXT4-fs (loop2): 1 orphan inode deleted [ 103.816825][ T6183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.916089][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.971551][ T5631] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.127795][ T5631] usb 2-1: Using ep0 maxpacket: 32 [ 104.128664][ T5631] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 104.130137][ T5631] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 104.130203][ T5631] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 104.130248][ T5631] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.130281][ T5631] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 104.134452][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.134511][ T5631] usb 2-1: Product: syz [ 104.134542][ T5631] usb 2-1: Manufacturer: syz [ 104.134562][ T5631] usb 2-1: SerialNumber: syz [ 104.293823][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 104.369822][ T5631] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input7 [ 104.457125][ T10] usb 5-1: USB disconnect, device number 4 [ 104.517804][ T5631] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 104.540466][ T5631] (id 0x00) [ 104.660656][ T5631] rc_core: IR keymap rc-imon-pad not found [ 104.660700][ T5631] Registered IR keymap rc-empty [ 104.661023][ T5631] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 104.661081][ T5631] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.741526][ T5631] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 104.773976][ T5631] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input8 [ 104.871510][ T5631] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:2> initialized [ 105.012399][ T5631] usb 2-1: USB disconnect, device number 2 [ 105.220515][ T6208] loop4: detected capacity change from 0 to 512 [ 105.242837][ T6208] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.281355][ T6208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 105.281647][ T6208] System zones: 1-12 [ 105.282312][ T6208] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.147: bad orphan inode 131072 [ 105.282384][ T6208] loop4: lost filesystem error report for type 5 error -117 [ 105.342383][ T6208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.593633][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.831386][ T6224] loop4: detected capacity change from 0 to 2048 [ 105.880994][ T6224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.202233][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.457719][ T6237] netlink: 104 bytes leftover after parsing attributes in process `syz.1.158'. [ 106.492461][ T6239] loop0: detected capacity change from 0 to 2048 [ 106.548436][ T6239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.620853][ T5619] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 106.779995][ T5619] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.796053][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 106.796102][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 106.822133][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.822174][ T5619] usb 3-1: Product: syz [ 106.822208][ T5619] usb 3-1: Manufacturer: syz [ 106.822229][ T5619] usb 3-1: SerialNumber: syz [ 106.856347][ T5619] usb 3-1: config 0 descriptor?? [ 106.901765][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.338131][ T5619] usb 3-1: USB disconnect, device number 2 [ 108.960309][ T189] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.001851][ T6280] Zero length message leads to an empty skb [ 109.057456][ T5816] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 109.120842][ T189] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 109.127156][ T189] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 109.127234][ T189] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 109.146607][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.146671][ T189] usb 4-1: Product: syz [ 109.146705][ T189] usb 4-1: Manufacturer: syz [ 109.146747][ T189] usb 4-1: SerialNumber: syz [ 109.185462][ T189] usb 4-1: config 0 descriptor?? [ 109.216729][ T189] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 109.248248][ T5816] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.260620][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.260661][ T5816] usb 2-1: Product: syz [ 109.260682][ T5816] usb 2-1: Manufacturer: syz [ 109.260700][ T5816] usb 2-1: SerialNumber: syz [ 109.288340][ T5816] usb 2-1: config 0 descriptor?? [ 109.423821][ T6284] loop4: detected capacity change from 0 to 16 [ 109.509764][ T5816] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.541125][ T6284] erofs (device loop4): mounted with root inode @ nid 36. [ 109.572418][ T6284] program syz.4.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.624010][ T6285] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 110.133390][ T6290] loop0: detected capacity change from 0 to 32768 [ 110.140604][ T6290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.180 (6290) [ 110.159822][ T6290] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.159871][ T6290] BTRFS info (device loop0): using crc32c checksum algorithm [ 110.291038][ T6290] BTRFS info (device loop0): enabling ssd optimizations [ 110.291100][ T6290] BTRFS info (device loop0): turning on flush-on-commit [ 110.291135][ T6290] BTRFS info (device loop0): turning on async discard [ 110.291157][ T6290] BTRFS info (device loop0): enabling free space tree [ 110.291177][ T6290] BTRFS info (device loop0): enabling auto defrag [ 110.291197][ T6290] BTRFS info (device loop0): use lzo compression, level 1 [ 110.291222][ T6290] BTRFS info (device loop0): max_inline set to 4096 [ 110.340039][ T5816] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 110.352643][ T5816] usb 2-1: USB disconnect, device number 3 [ 110.409119][ T32] audit: type=1800 audit(1786678065.612:3): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.180" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 110.456018][ T31] usb 4-1: USB disconnect, device number 2 [ 110.548774][ T5623] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.048741][ T6317] loop9: detected capacity change from 0 to 524287936 [ 111.532048][ T6329] loop0: detected capacity change from 0 to 256 [ 111.542574][ T6329] exfat: Deprecated parameter 'utf8' [ 111.640360][ T6329] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 113.467173][ T6368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.554438][ T6371] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 113.590047][ T6363] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200 pfn:0x7a361 [ 113.590092][ T6363] memcg:ffff88807ee35800 [ 113.590119][ T6363] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 113.590159][ T6363] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 113.590182][ T6363] raw: 0000000000000200 0000000000000000 00000001ffffffff ffff88807ee35800 [ 113.590198][ T6363] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 113.590214][ T6363] page_owner tracks the page as allocated [ 113.590225][ T6363] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6363, tgid 6360 (syz.1.199), ts 113590008231 [ 113.590263][ T6363] post_alloc_hook+0x1f9/0x250 [ 113.590306][ T6363] get_page_from_freelist+0x2209/0x2280 [ 113.590339][ T6363] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 113.590370][ T6363] alloc_pages_mpol+0x21e/0x390 [ 113.590401][ T6363] alloc_pages_noprof+0xb1/0x2b0 [ 113.590434][ T6363] folio_alloc_noprof+0x1e/0x30 [ 113.590468][ T6363] filemap_alloc_folio_noprof+0x111/0x460 [ 113.590503][ T6363] page_cache_ra_order+0x569/0xee0 [ 113.590538][ T6363] do_sync_mmap_readahead+0x75e/0x990 [ 113.590562][ T6363] filemap_fault+0x7d9/0x13b0 [ 113.590584][ T6363] __do_fault+0x138/0x2a0 [ 113.590621][ T6363] do_pte_missing+0x2215/0x34b0 [ 113.590648][ T6363] handle_mm_fault+0x1a53/0x3750 [ 113.590671][ T6363] __get_user_pages+0x1675/0x2750 [ 113.590705][ T6363] populate_vma_page_range+0x2be/0x3c0 [ 113.590740][ T6363] __mm_populate+0x25f/0x390 [ 113.590773][ T6363] page last free pid 6370 tgid 6370 ts 113571744670 stack trace: [ 113.590792][ T6363] __free_frozen_pages+0xc93/0xd90 [ 113.590819][ T6363] __folio_put+0x4b3/0x590 [ 113.590842][ T6363] iommu_put_pages_list+0x60/0x90 [ 113.590876][ T6363] amdv1_mock_deinit+0x39e/0x490 [ 113.590902][ T6363] mock_domain_free+0x68/0x80 [ 113.590930][ T6363] iommufd_hwpt_paging_destroy+0x1f0/0x2f0 [ 113.590969][ T6363] iommufd_object_remove+0x35a/0x4c0 [ 113.590999][ T6363] iommufd_hw_pagetable_detach+0x564/0x6a0 [ 113.591030][ T6363] iommufd_device_detach+0x1c/0x80 [ 113.591060][ T6363] iommufd_selftest_destroy+0x82/0xf0 [ 113.591084][ T6363] iommufd_fops_release+0x186/0x3b0 [ 113.591114][ T6363] __fput+0x418/0xa50 [ 113.591146][ T6363] task_work_run+0x1d9/0x270 [ 113.591171][ T6363] exit_to_user_mode_loop+0x204/0x770 [ 113.591195][ T6363] do_syscall_64+0x328/0x520 [ 113.591227][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.591447][ T6363] ------------[ cut here ]------------ [ 113.591461][ T6363] kernel BUG at mm/filemap.c:859! [ 113.591513][ T6363] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 113.850843][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 113.860054][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.870120][ T6363] RIP: 0010:__filemap_add_folio+0x128c/0x1400 [ 113.876214][ T6363] Code: ff 4c 89 f7 48 c7 c6 c0 63 18 8c e8 4e 38 21 ff 90 0f 0b e8 76 d6 c0 ff 48 8b 7c 24 20 48 c7 c6 80 58 18 8c e8 35 38 21 ff 90 <0f> 0b e8 5d d6 c0 ff 4c 89 f7 48 c7 c6 c0 63 18 8c e8 1e 38 21 ff [ 113.895836][ T6363] RSP: 0000:ffffc9000d5af1a0 EFLAGS: 00010246 [ 113.901936][ T6363] RAX: e8314c7146044800 RBX: 0000000000000000 RCX: 0000000000000046 [ 113.909924][ T6363] RDX: ffffc9000dbf1000 RSI: ffffffff8e6e6737 RDI: ffff88801f308000 [ 113.917916][ T6363] RBP: ffffc9000d5af338 R08: ffffc9000d5aeba7 R09: 1ffff92001ab5d74 [ 113.925941][ T6363] R10: dffffc0000000000 R11: fffff52001ab5d75 R12: dffffc0000000000 [ 113.933925][ T6363] R13: ffff88802396b6c0 R14: 0000000000000002 R15: ffff88802396b7d8 [ 113.942000][ T6363] FS: 00007fe62c2ef6c0(0000) GS:ffff888124d03000(0000) knlGS:0000000000000000 [ 113.950942][ T6363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.957541][ T6363] CR2: 0000001b33d0fff8 CR3: 00000000773fe000 CR4: 00000000003526f0 [ 113.965542][ T6363] Call Trace: [ 113.968857][ T6363] [ 113.971823][ T6363] ? __pfx_try_charge_memcg+0x10/0x10 [ 113.977233][ T6363] ? lock_acquire+0x115/0x350 [ 113.981923][ T6363] ? lock_acquire+0x115/0x350 [ 113.986698][ T6363] ? __pfx___filemap_add_folio+0x10/0x10 [ 113.992435][ T6363] ? percpu_ref_put+0x19/0x180 [ 113.997214][ T6363] ? percpu_ref_put+0xf9/0x180 [ 114.001995][ T6363] filemap_add_folio+0x251/0x4e0 [ 114.006960][ T6363] page_cache_ra_order+0x6d1/0xee0 [ 114.012104][ T6363] do_sync_mmap_readahead+0x75e/0x990 [ 114.017504][ T6363] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 114.023429][ T6363] ? count_memcg_event_mm+0x1d/0x250 [ 114.028749][ T6363] ? count_memcg_event_mm+0x1d/0x250 [ 114.034052][ T6363] filemap_fault+0x7d9/0x13b0 [ 114.038752][ T6363] ? filemap_map_pages+0x1d1/0x2170 [ 114.043976][ T6363] ? __pfx_filemap_fault+0x10/0x10 [ 114.049105][ T6363] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.054587][ T6363] ? lock_acquire+0x115/0x350 [ 114.059280][ T6363] __do_fault+0x138/0x2a0 [ 114.063631][ T6363] ? do_pte_missing+0x140c/0x34b0 [ 114.068671][ T6363] do_pte_missing+0x2215/0x34b0 [ 114.073554][ T6363] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 114.079817][ T6363] ? mtree_range_walk+0x707/0x8b0 [ 114.084870][ T6363] handle_mm_fault+0x1a53/0x3750 [ 114.089818][ T6363] ? mt_find+0x186/0x630 [ 114.094085][ T6363] ? handle_mm_fault+0xf1/0x3750 [ 114.099038][ T6363] ? __pfx_handle_mm_fault+0x10/0x10 [ 114.104334][ T6363] ? kasan_save_free_info+0x40/0x50 [ 114.109560][ T6363] ? kfree+0x1c5/0x650 [ 114.113646][ T6363] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 114.119314][ T6363] __get_user_pages+0x1675/0x2750 [ 114.124381][ T6363] populate_vma_page_range+0x2be/0x3c0 [ 114.129866][ T6363] ? __pfx_populate_vma_page_range+0x10/0x10 [ 114.135901][ T6363] ? down_read+0x2be/0x330 [ 114.140345][ T6363] __mm_populate+0x25f/0x390 [ 114.144960][ T6363] ? __pfx___mm_populate+0x10/0x10 [ 114.150099][ T6363] vm_mmap_pgoff+0x353/0x4e0 [ 114.154709][ T6363] ? lock_acquire+0x115/0x350 [ 114.159397][ T6363] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.164531][ T6363] ? __fget_files+0x2a/0x420 [ 114.169143][ T6363] ? __fget_files+0x3a2/0x420 [ 114.173833][ T6363] ? __fget_files+0x2a/0x420 [ 114.178438][ T6363] ksys_mmap_pgoff+0x4dc/0x760 [ 114.183221][ T6363] do_syscall_64+0x166/0x520 [ 114.187839][ T6363] ? trace_irq_disable+0x3b/0x140 [ 114.192885][ T6363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.198966][ T6363] ? clear_bhb_loop+0x70/0xc0 [ 114.203659][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.209577][ T6363] RIP: 0033:0x7fe62b39e0d9 [ 114.214037][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.233670][ T6363] RSP: 002b:00007fe62c2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.242115][ T6363] RAX: ffffffffffffffda RBX: 00007fe62b626090 RCX: 00007fe62b39e0d9 [ 114.250126][ T6363] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 114.258122][ T6363] RBP: 00007fe62b435024 R08: 0000000000000004 R09: 000000007478b000 [ 114.266112][ T6363] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 114.274105][ T6363] R13: 00007fe62b626128 R14: 00007fe62b626090 R15: 00007ffc995d9768 [ 114.282106][ T6363] [ 114.285145][ T6363] Modules linked in: [ 114.290990][ T6363] ---[ end trace 0000000000000000 ]--- [ 114.320384][ T6363] RIP: 0010:__filemap_add_folio+0x128c/0x1400 [ 114.326588][ T6363] Code: ff 4c 89 f7 48 c7 c6 c0 63 18 8c e8 4e 38 21 ff 90 0f 0b e8 76 d6 c0 ff 48 8b 7c 24 20 48 c7 c6 80 58 18 8c e8 35 38 21 ff 90 <0f> 0b e8 5d d6 c0 ff 4c 89 f7 48 c7 c6 c0 63 18 8c e8 1e 38 21 ff [ 114.346418][ T6363] RSP: 0000:ffffc9000d5af1a0 EFLAGS: 00010246 [ 114.352603][ T6363] RAX: e8314c7146044800 RBX: 0000000000000000 RCX: 0000000000000046 [ 114.360841][ T6363] RDX: ffffc9000dbf1000 RSI: ffffffff8e6e6737 RDI: ffff88801f308000 [ 114.369200][ T6363] RBP: ffffc9000d5af338 R08: ffffc9000d5aeba7 R09: 1ffff92001ab5d74 [ 114.377400][ T6363] R10: dffffc0000000000 R11: fffff52001ab5d75 R12: dffffc0000000000 [ 114.385449][ T6363] R13: ffff88802396b6c0 R14: 0000000000000002 R15: ffff88802396b7d8 [ 114.393632][ T6363] FS: 00007fe62c2ef6c0(0000) GS:ffff888124e03000(0000) knlGS:0000000000000000 [ 114.402767][ T6363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.409550][ T6363] CR2: 0000200000000740 CR3: 00000000773fe000 CR4: 00000000003526f0 [ 114.458573][ T6363] Kernel panic - not syncing: Fatal exception [ 114.465268][ T6363] Kernel Offset: disabled [ 114.469605][ T6363] Rebooting in 86400 seconds..