last executing test programs: 3.760370286s ago: executing program 4 (id=361): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffd, 0x0, 0x0, 0x6}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8501) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x10004, 0x1, 0x0}) 3.579796232s ago: executing program 4 (id=365): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) 3.467888388s ago: executing program 0 (id=366): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) read$char_usb(r2, &(0x7f00000005c0)=""/33, 0x21) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0x40042) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000040)) 2.719681463s ago: executing program 2 (id=368): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/238, 0xee}], 0x7}, 0x4}], 0x1, 0x42, 0x0) 2.577105472s ago: executing program 4 (id=369): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r1, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa0000060001000100000008000200020000000800010000000400050003"], 0x64}}, 0x0) 2.380000116s ago: executing program 4 (id=371): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 2.345613071s ago: executing program 2 (id=372): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 2.235949049s ago: executing program 4 (id=374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 2.206259129s ago: executing program 3 (id=375): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x20, 0x1, 0x4, [{@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010102, 0x5}]}]}}}], 0x38}}], 0x2, 0x0) 2.197862535s ago: executing program 2 (id=376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x90, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 2.1119038s ago: executing program 4 (id=378): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) symlink(&(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0xf1460, 0x0, 0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") rename(&(0x7f000001fb40)='./file0/file0\x00', &(0x7f000001fb80)='./file2\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x10}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) close(0xffffffffffffffff) sendmsg$can_bcm(r0, 0x0, 0x800) 2.089868571s ago: executing program 3 (id=379): ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) 2.063864216s ago: executing program 2 (id=380): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000002640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r5}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005d40)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000000)=""/75, 0x4b, 0x7984e2f5) read$FUSE(r6, &(0x7f0000007d80)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x12102, 0x0) 1.74829907s ago: executing program 1 (id=381): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x4000000a, 0x0) syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.128258335s ago: executing program 3 (id=382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 963.150992ms ago: executing program 2 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 839.906877ms ago: executing program 1 (id=384): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 837.486041ms ago: executing program 2 (id=385): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 800.926111ms ago: executing program 3 (id=386): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x20, 0x0, 0x0, &(0x7f0000000300)=""/21, 0x8}, 0x0) 719.058123ms ago: executing program 1 (id=387): quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 697.052452ms ago: executing program 0 (id=388): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x9, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) 631.829271ms ago: executing program 3 (id=389): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xc41a}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 594.569228ms ago: executing program 1 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x90, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 544.950247ms ago: executing program 0 (id=391): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 441.770039ms ago: executing program 3 (id=392): ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) 396.489168ms ago: executing program 1 (id=393): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="090000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 331.098076ms ago: executing program 1 (id=394): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x4000000a, 0x0) syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 233.052093ms ago: executing program 0 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="dd2315dbe8a89671746ff42bfbe7b031706c648355c18e41d227ce2ddd473ec0d693837f2134ff98ea01b0f6de8a977d8c3a0c3127377aeb164334496fff") socket(0x1d, 0x2, 0x6) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x3, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) fstatfs(r3, &(0x7f00000003c0)=""/221) 87.886698ms ago: executing program 0 (id=396): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) 0s ago: executing program 0 (id=397): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x8, 0x0, {0x9, 0x1}, {0x47, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000001c0)=""/138) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 65.731155][ T5817] cgroup: Unknown subsys name 'net' [ 65.881308][ T5817] cgroup: Unknown subsys name 'cpuset' [ 65.890034][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.238796][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.146985][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.156353][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.165137][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.165150][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.173235][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.181105][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.188982][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.194691][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.201340][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.208465][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.217287][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.229585][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.237333][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.245662][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.253204][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.253667][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.261349][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.271589][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.275456][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.283036][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.341866][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.358249][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.366085][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.374973][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.383071][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.437788][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444755][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.984055][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.015171][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.031355][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.101088][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 72.151578][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.314096][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.321865][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.329308][ T5836] bridge_slave_0: entered allmulticast mode [ 72.336437][ T5836] bridge_slave_0: entered promiscuous mode [ 72.385940][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.393682][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.401025][ T5836] bridge_slave_1: entered allmulticast mode [ 72.408028][ T5836] bridge_slave_1: entered promiscuous mode [ 72.463921][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.472065][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.479306][ T5830] bridge_slave_0: entered allmulticast mode [ 72.486330][ T5830] bridge_slave_0: entered promiscuous mode [ 72.493985][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.501295][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.508527][ T5831] bridge_slave_0: entered allmulticast mode [ 72.515533][ T5831] bridge_slave_0: entered promiscuous mode [ 72.532904][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.540084][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.547303][ T5829] bridge_slave_0: entered allmulticast mode [ 72.554396][ T5829] bridge_slave_0: entered promiscuous mode [ 72.575600][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.586237][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.593517][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.601404][ T5830] bridge_slave_1: entered allmulticast mode [ 72.608521][ T5830] bridge_slave_1: entered promiscuous mode [ 72.615645][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.623494][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.630838][ T5831] bridge_slave_1: entered allmulticast mode [ 72.638128][ T5831] bridge_slave_1: entered promiscuous mode [ 72.645317][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.652593][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.659799][ T5844] bridge_slave_0: entered allmulticast mode [ 72.666698][ T5844] bridge_slave_0: entered promiscuous mode [ 72.673925][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.681397][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.688657][ T5829] bridge_slave_1: entered allmulticast mode [ 72.695893][ T5829] bridge_slave_1: entered promiscuous mode [ 72.715597][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.758333][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.765545][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.772947][ T5844] bridge_slave_1: entered allmulticast mode [ 72.780048][ T5844] bridge_slave_1: entered promiscuous mode [ 72.830977][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.853350][ T5836] team0: Port device team_slave_0 added [ 72.861998][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.878341][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.890346][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.922709][ T5836] team0: Port device team_slave_1 added [ 72.930723][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.942553][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.964549][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.976825][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.019658][ T5829] team0: Port device team_slave_0 added [ 73.065303][ T5829] team0: Port device team_slave_1 added [ 73.073445][ T5831] team0: Port device team_slave_0 added [ 73.081612][ T5831] team0: Port device team_slave_1 added [ 73.098993][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.105955][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.132197][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.145813][ T5830] team0: Port device team_slave_0 added [ 73.173571][ T5844] team0: Port device team_slave_0 added [ 73.181389][ T5844] team0: Port device team_slave_1 added [ 73.191693][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.199047][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.225546][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.238584][ T5830] team0: Port device team_slave_1 added [ 73.267892][ T5837] Bluetooth: hci1: command tx timeout [ 73.309113][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.316076][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.342587][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.347271][ T5837] Bluetooth: hci0: command tx timeout [ 73.356245][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.359235][ T5841] Bluetooth: hci3: command tx timeout [ 73.365889][ T5846] Bluetooth: hci2: command tx timeout [ 73.378491][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.404886][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.416825][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.423862][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.426929][ T5846] Bluetooth: hci4: command tx timeout [ 73.450448][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.469164][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.476223][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.502797][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.531480][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.538526][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.564469][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.576186][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.583659][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.610137][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.629620][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.636562][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.662880][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.682596][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.689983][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.716109][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.808410][ T5836] hsr_slave_0: entered promiscuous mode [ 73.814839][ T5836] hsr_slave_1: entered promiscuous mode [ 73.838529][ T5829] hsr_slave_0: entered promiscuous mode [ 73.844816][ T5829] hsr_slave_1: entered promiscuous mode [ 73.851168][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 73.857140][ T5829] Cannot create hsr debugfs directory [ 73.868981][ T5831] hsr_slave_0: entered promiscuous mode [ 73.875345][ T5831] hsr_slave_1: entered promiscuous mode [ 73.881829][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 73.887604][ T5831] Cannot create hsr debugfs directory [ 73.932758][ T5844] hsr_slave_0: entered promiscuous mode [ 73.939212][ T5844] hsr_slave_1: entered promiscuous mode [ 73.945796][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 73.951777][ T5844] Cannot create hsr debugfs directory [ 73.980550][ T5830] hsr_slave_0: entered promiscuous mode [ 73.987634][ T5830] hsr_slave_1: entered promiscuous mode [ 73.993688][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 73.999509][ T5830] Cannot create hsr debugfs directory [ 74.567042][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.580008][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.589728][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.614713][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.695795][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.726261][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.741606][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.751836][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.827205][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.838921][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.849677][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.890624][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.011225][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.049011][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.066313][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.115379][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.164274][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.197254][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.211174][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.232447][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.249415][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.264051][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.286016][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.331586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.338994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.351124][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.351280][ T5846] Bluetooth: hci1: command tx timeout [ 75.385940][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.393141][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.427146][ T5846] Bluetooth: hci3: command tx timeout [ 75.428088][ T5841] Bluetooth: hci0: command tx timeout [ 75.432572][ T5846] Bluetooth: hci2: command tx timeout [ 75.449497][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.456666][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.466376][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.473568][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.507412][ T5846] Bluetooth: hci4: command tx timeout [ 75.533224][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.623336][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.652626][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.659835][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.694655][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.701855][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.783022][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.880785][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.913468][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.960548][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.967777][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.011086][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.072602][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.079826][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.090349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.097553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.123980][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.131291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.157743][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.239485][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.421394][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.551831][ T5830] veth0_vlan: entered promiscuous mode [ 76.602264][ T5830] veth1_vlan: entered promiscuous mode [ 76.744978][ T5829] veth0_vlan: entered promiscuous mode [ 76.781504][ T5829] veth1_vlan: entered promiscuous mode [ 76.791198][ T5830] veth0_macvtap: entered promiscuous mode [ 76.805618][ T5830] veth1_macvtap: entered promiscuous mode [ 76.843762][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.862746][ T5831] veth0_vlan: entered promiscuous mode [ 76.889209][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.903937][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.918208][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.956065][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.965915][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.985715][ T5829] veth0_macvtap: entered promiscuous mode [ 76.993498][ T5831] veth1_vlan: entered promiscuous mode [ 77.001529][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.010708][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039386][ T5829] veth1_macvtap: entered promiscuous mode [ 77.120758][ T5844] veth0_vlan: entered promiscuous mode [ 77.142414][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.184044][ T5831] veth0_macvtap: entered promiscuous mode [ 77.201085][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.210262][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.211479][ T5844] veth1_vlan: entered promiscuous mode [ 77.229730][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.233514][ T5831] veth1_macvtap: entered promiscuous mode [ 77.280803][ T5836] veth0_vlan: entered promiscuous mode [ 77.301153][ T3472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.310828][ T3472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.337300][ T3472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354499][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.369956][ T3472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377110][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.386487][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.405802][ T5836] veth1_vlan: entered promiscuous mode [ 77.427041][ T5846] Bluetooth: hci1: command tx timeout [ 77.429117][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.476135][ T3579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.485346][ T3579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503092][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.519023][ T5846] Bluetooth: hci0: command tx timeout [ 77.519060][ T5837] Bluetooth: hci3: command tx timeout [ 77.524439][ T5846] Bluetooth: hci2: command tx timeout [ 77.550007][ T3579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.559176][ T3579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.576771][ T5844] veth0_macvtap: entered promiscuous mode [ 77.598796][ T5846] Bluetooth: hci4: command tx timeout [ 77.635173][ T5836] veth0_macvtap: entered promiscuous mode [ 77.682335][ T5844] veth1_macvtap: entered promiscuous mode [ 77.705831][ T5836] veth1_macvtap: entered promiscuous mode [ 77.773787][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.808012][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.844915][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.875622][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.938642][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.948929][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.951462][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.973203][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.993467][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.997495][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.026668][ T3579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039458][ T3579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.048914][ T3579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.087222][ T3579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.107026][ T3579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.116084][ T3579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.177457][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 78.191114][ T3579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.211500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.227192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.248141][ T3579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.410502][ T5962] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 78.417181][ T5962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.437593][ T5962] vhci_hcd vhci_hcd.0: Device attached [ 78.481585][ T5963] usbip_core: unknown command [ 78.487749][ T5963] vhci_hcd: unknown pdu 0 [ 78.497720][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.509445][ T5963] usbip_core: unknown command [ 78.528033][ T12] vhci_hcd vhci_hcd.2: stop threads [ 78.537841][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.557544][ T12] vhci_hcd vhci_hcd.2: release socket [ 78.572412][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 78.658821][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.674334][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.695196][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.717090][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.792364][ T5976] loop0: detected capacity change from 0 to 512 [ 78.800318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.815166][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.899178][ T5974] sctp: [Deprecated]: syz.4.13 (pid 5974) Use of int in max_burst socket option deprecated. [ 78.899178][ T5974] Use struct sctp_assoc_value instead [ 78.956070][ T5976] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14: bg 0: block 393: padding at end of block bitmap is not set [ 79.022463][ T5976] loop0: lost filesystem error report for type 5 error -117 [ 79.027508][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 79.041479][ C1] EXT4-fs (loop0): initial error at time 1769613640: ext4_validate_block_bitmap:441 [ 79.050992][ C1] EXT4-fs (loop0): last error at time 1769613640: ext4_validate_block_bitmap:441 [ 79.080208][ T5976] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 79.134500][ T5976] loop0: lost filesystem error report for type 5 error -117 [ 79.139631][ T5976] EXT4-fs (loop0): 2 truncates cleaned up [ 79.199136][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.229851][ T5983] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.442277][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.482614][ T5993] loop1: detected capacity change from 0 to 512 [ 79.483511][ T5992] loop2: detected capacity change from 0 to 164 [ 79.505942][ T5993] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.533792][ T5846] Bluetooth: hci1: command tx timeout [ 79.588075][ T5846] Bluetooth: hci2: command tx timeout [ 79.591618][ T5837] Bluetooth: hci3: command tx timeout [ 79.593647][ T5846] Bluetooth: hci0: command tx timeout [ 79.599631][ T5993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.667658][ T5846] Bluetooth: hci4: command tx timeout [ 79.715926][ T5993] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.733941][ T5993] EXT4-fs (loop1): 1 truncate cleaned up [ 79.771104][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.850049][ T6004] vcan0: tx drop: invalid sa for name 0x0000000000000401 [ 79.930731][ T5993] Dead loop on virtual device ip6_vti0, fix it urgently! [ 79.950654][ T6009] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 79.957214][ T6009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.980514][ T6009] vhci_hcd vhci_hcd.0: Device attached [ 79.985029][ T6006] loop3: detected capacity change from 0 to 512 [ 80.048679][ T6006] ======================================================= [ 80.048679][ T6006] WARNING: The mand mount option has been deprecated and [ 80.048679][ T6006] and is ignored by this kernel. Remove the mand [ 80.048679][ T6006] option from the mount to silence this warning. [ 80.048679][ T6006] ======================================================= [ 80.145378][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.182652][ T6010] usbip_core: unknown command [ 80.187781][ T6010] vhci_hcd: unknown pdu 0 [ 80.192238][ T6010] usbip_core: unknown command [ 80.208238][ T68] vhci_hcd vhci_hcd.0: stop threads [ 80.213573][ T68] vhci_hcd vhci_hcd.0: release socket [ 80.877288][ T5885] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 80.923704][ T6006] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.27: invalid indirect mapped block 4294967295 (level 1) [ 80.945084][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 80.994599][ T6006] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.995834][ T6006] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.27: invalid indirect mapped block 4294967295 (level 1) [ 81.005164][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 81.005196][ C0] EXT4-fs (loop3): initial error at time 1769613642: ext4_free_branches:1023: inode 11 [ 81.005230][ C0] EXT4-fs (loop3): last error at time 1769613642: ext4_free_branches:1023: inode 11 [ 81.135138][ T6006] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.135951][ T6006] EXT4-fs (loop3): 2 truncates cleaned up [ 81.172500][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.351078][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.501401][ T6042] loop4: detected capacity change from 0 to 512 [ 82.574232][ T6042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.590749][ T29] audit: type=1326 audit(1769613644.349:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 82.681483][ T6046] Zero length message leads to an empty skb [ 82.687285][ T29] audit: type=1326 audit(1769613644.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 82.750014][ T29] audit: type=1326 audit(1769613644.359:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 82.795013][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 82.809050][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.844876][ T29] audit: type=1326 audit(1769613644.359:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 82.870274][ T6055] loop0: detected capacity change from 0 to 512 [ 82.889011][ T6055] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.902497][ T6055] EXT4-fs: inline encryption not supported [ 82.927246][ T6055] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.974463][ T29] audit: type=1326 audit(1769613644.359:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 83.005222][ T6055] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.015014][ T29] audit: type=1326 audit(1769613644.359:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 83.055745][ T6055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.090177][ T6055] EXT4-fs (loop0): 1 truncate cleaned up [ 83.116965][ T29] audit: type=1326 audit(1769613644.359:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 83.140645][ T6055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.141785][ T29] audit: type=1326 audit(1769613644.359:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 83.176248][ T29] audit: type=1326 audit(1769613644.359:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 83.199918][ T29] audit: type=1326 audit(1769613644.359:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e19aeb9 code=0x7ffc0000 [ 83.916867][ T6068] loop4: detected capacity change from 0 to 128 [ 83.962980][ T6054] loop2: detected capacity change from 0 to 128 [ 84.023502][ T6073] capability: warning: `syz.3.47' uses 32-bit capabilities (legacy support in use) [ 84.033889][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.160539][ T6073] program syz.3.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.216531][ T5900] IPVS: starting estimator thread 0... [ 84.331274][ T6077] IPVS: using max 35 ests per chain, 84000 per kthread [ 84.403128][ T6080] loop4: detected capacity change from 0 to 1024 [ 84.486451][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.514931][ T6091] loop2: detected capacity change from 0 to 512 [ 84.667537][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.696244][ T6091] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.845586][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.922611][ T6091] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #12: comm syz.2.55: invalid size [ 84.957659][ T6091] EXT4-fs (loop2): Remounting filesystem read-only [ 85.020962][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.040059][ T6103] loop3: detected capacity change from 0 to 512 [ 85.151958][ T6103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.293571][ T6103] EXT4-fs (loop3): 1 truncate cleaned up [ 85.432464][ T6112] loop4: detected capacity change from 0 to 512 [ 85.560236][ T6112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.574684][ T6112] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.310421][ T6103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.289999][ T10] cfg80211: failed to load regulatory.db [ 87.298773][ T5885] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 87.565320][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.630218][ T13] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.663503][ T13] __quota_error: 146 callbacks suppressed [ 87.663517][ T13] Quota error (device loop2): write_blk: dquota write failed [ 87.690953][ T13] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 87.700332][ T13] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.713226][ T13] Quota error (device loop2): write_blk: dquota write failed [ 87.724110][ T13] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 87.754017][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.903066][ T6126] program syz.2.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.002778][ T6099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.015208][ T1048] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.047961][ T1048] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.094164][ T1048] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.104340][ T1048] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.131504][ T29] audit: type=1326 audit(1769613649.919:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad259aeb9 code=0x7ffc0000 [ 88.224975][ T29] audit: type=1326 audit(1769613649.949:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad259aeb9 code=0x7ffc0000 [ 88.273971][ T29] audit: type=1326 audit(1769613649.949:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad259aeb9 code=0x7ffc0000 [ 88.309446][ T6137] 9p: Bad value for 'wfdno' [ 88.362603][ T29] audit: type=1326 audit(1769613649.949:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad259aeb9 code=0x7ffc0000 [ 88.451210][ T29] audit: type=1326 audit(1769613649.949:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad259aeb9 code=0x7ffc0000 [ 88.527135][ T29] audit: type=1326 audit(1769613649.949:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7ad259aeb9 code=0x7ffc0000 [ 88.582869][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 88.743891][ T6150] loop0: detected capacity change from 0 to 4096 [ 88.856850][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.929862][ T6160] program syz.4.81 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.162847][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.423649][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 89.451907][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 90.015641][ T6198] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 90.022206][ T6198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.084330][ T6198] vhci_hcd vhci_hcd.0: Device attached [ 90.146874][ T6199] usbip_core: unknown command [ 90.155332][ T6199] vhci_hcd: unknown pdu 0 [ 90.172045][ T6199] usbip_core: unknown command [ 90.186707][ T13] vhci_hcd vhci_hcd.0: stop threads [ 90.192084][ T13] vhci_hcd vhci_hcd.0: release socket [ 90.236529][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 90.276406][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 90.341967][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 90.536542][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 90.545702][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.556318][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.587684][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.595113][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.648437][ T6228] 9p: Bad value for 'wfdno' [ 90.764945][ T6230] xt_bpf: check failed: parse error [ 91.690374][ T6243] loop4: detected capacity change from 0 to 1024 [ 91.717248][ T6243] EXT4-fs: Ignoring removed bh option [ 91.807971][ T6243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.050276][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.056059][ T6257] loop0: detected capacity change from 0 to 1024 [ 92.108057][ T6257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.182557][ T6257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 92.265475][ T6257] System zones: 0-1, 3-36 [ 92.299473][ T5900] kernel read not supported for file bpf-prog (pid: 5900 comm: kworker/1:5) [ 92.329066][ T6257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.441430][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.128'. [ 93.679086][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.915511][ T5900] kernel read not supported for file bpf-prog (pid: 5900 comm: kworker/1:5) [ 93.936326][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 93.967235][ T6303] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.385215][ T6312] loop4: detected capacity change from 0 to 1024 [ 94.415832][ T6314] loop1: detected capacity change from 0 to 1024 [ 94.423770][ T6312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.462403][ T6316] loop0: detected capacity change from 0 to 512 [ 94.498706][ T6312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 94.520506][ T6312] System zones: 0-1, 3-36 [ 94.547146][ T6316] EXT4-fs: inline encryption not supported [ 94.553029][ T6316] EXT4-fs: Ignoring removed i_version option [ 94.562911][ T6312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.664849][ T6314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.706499][ T6316] EXT4-fs (loop0): 1 orphan inode deleted [ 94.716488][ T6316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.766269][ T6314] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.913456][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.135707][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.675583][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.434166][ T6342] loop2: detected capacity change from 0 to 1024 [ 96.470796][ T6344] netlink: 'syz.3.152': attribute type 13 has an invalid length. [ 96.515612][ T6342] EXT4-fs: Ignoring removed oldalloc option [ 96.533627][ T6342] EXT4-fs: Ignoring removed bh option [ 96.598770][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.740335][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.749156][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.821150][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.049861][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.074419][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.308370][ T6360] netlink: 204 bytes leftover after parsing attributes in process `syz.1.157'. [ 97.336216][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.356227][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.396372][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.405650][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.544886][ T6378] loop2: detected capacity change from 0 to 1024 [ 97.685257][ T6378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.543574][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.550905][ T6407] loop0: detected capacity change from 0 to 1024 [ 98.773352][ T6407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.901087][ T6422] xt_bpf: check failed: parse error [ 99.461621][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.577421][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 99.602147][ T6432] loop0: detected capacity change from 0 to 256 [ 99.608198][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 99.696153][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 100.812595][ T6467] xt_bpf: check failed: parse error [ 101.841190][ T6492] syz.1.208 uses obsolete (PF_INET,SOCK_PACKET) [ 101.983932][ T6500] loop0: detected capacity change from 0 to 512 [ 102.025133][ T6500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.102574][ T6500] EXT4-fs (loop0): 1 truncate cleaned up [ 102.133002][ T6500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.429668][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.459233][ T6510] dummy0: entered promiscuous mode [ 102.476489][ T6510] vlan2: entered promiscuous mode [ 102.907954][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 102.987095][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 102.999243][ T6537] loop4: detected capacity change from 0 to 512 [ 103.009383][ T6535] 8021q: VLANs not supported on vcan0 [ 103.016793][ T6537] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.023345][ T6537] EXT4-fs: inline encryption not supported [ 103.054223][ T6537] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.079962][ T6537] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.092983][ T6537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.128604][ T6537] EXT4-fs (loop4): 1 truncate cleaned up [ 103.146675][ T6537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.271613][ T1048] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.312939][ T1048] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.352195][ T1048] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.391011][ T1048] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.039807][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.146303][ T6552] tipc: Started in network mode [ 104.151246][ T6552] tipc: Node identity ac1414aa, cluster identity 4711 [ 104.176533][ T6552] tipc: Enabled bearer , priority 10 [ 104.471307][ T6566] program syz.0.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.977592][ T6589] loop2: detected capacity change from 0 to 256 [ 105.271970][ T6593] loop0: detected capacity change from 0 to 1024 [ 105.331275][ T6593] EXT4-fs: Ignoring removed oldalloc option [ 105.365726][ T6593] EXT4-fs: Ignoring removed bh option [ 105.646180][ T6601] loop1: detected capacity change from 0 to 1024 [ 105.682755][ T6601] EXT4-fs: inline encryption not supported [ 105.858874][ T9] tipc: Node number set to 2886997162 [ 106.076316][ T6589] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 106.090476][ T6589] exFAT-fs (loop2): failed to load alloc-bitmap [ 106.096898][ T6589] exFAT-fs (loop2): failed to recognize exfat type [ 106.138768][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.171880][ T6593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.238000][ T6601] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 106.331916][ T6601] EXT4-fs (loop1): Remounting filesystem read-only [ 106.378900][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.450881][ T6611] loop2: detected capacity change from 0 to 512 [ 106.525066][ T6617] loop0: detected capacity change from 0 to 1024 [ 106.533009][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.551391][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.579688][ T6620] netlink: 'syz.3.254': attribute type 3 has an invalid length. [ 106.597073][ T6617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.619207][ T6620] netlink: 'syz.3.254': attribute type 3 has an invalid length. [ 106.638977][ T6611] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.796209][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.941801][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.527783][ T6634] loop0: detected capacity change from 0 to 512 [ 107.559071][ T6634] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.661288][ T6634] EXT4-fs (loop0): 1 truncate cleaned up [ 107.681453][ T6634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.721078][ T6638] xt_hashlimit: size too large, truncated to 1048576 [ 107.925264][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.959683][ T6647] loop1: detected capacity change from 0 to 256 [ 108.020453][ T6647] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 108.057411][ T6647] exFAT-fs (loop1): failed to load alloc-bitmap [ 108.063704][ T6647] exFAT-fs (loop1): failed to recognize exfat type [ 108.086977][ T6655] program syz.2.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.150567][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 108.236822][ T6659] vlan2: entered promiscuous mode [ 108.241986][ T6659] bond0: entered promiscuous mode [ 108.263733][ T6659] bond_slave_0: entered promiscuous mode [ 108.276268][ T6659] bond_slave_1: entered promiscuous mode [ 108.663711][ T6678] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 108.762048][ T6681] loop2: detected capacity change from 0 to 256 [ 108.818468][ T6681] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.853985][ T6687] program syz.1.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.053708][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.101156][ T6693] loop1: detected capacity change from 0 to 1024 [ 109.160301][ T6693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.329847][ T47] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.338859][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.352401][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.368513][ T47] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.379426][ T47] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.392724][ T47] usb 5-1: Product: syz [ 109.397006][ T47] usb 5-1: Manufacturer: syz [ 109.430391][ T47] cdc_wdm 5-1:1.0: skipping garbage [ 109.441418][ T47] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 109.477377][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.637595][ T47] usb 5-1: USB disconnect, device number 2 [ 109.782636][ T6721] loop2: detected capacity change from 0 to 512 [ 109.817504][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.920767][ T6721] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.008884][ T6721] EXT4-fs error (device loop2): ext4_do_update_inode:5596: inode #2: comm syz.2.293: corrupted inode contents [ 110.061187][ T6732] loop0: detected capacity change from 0 to 256 [ 110.078786][ T6721] EXT4-fs error (device loop2): ext4_dirty_inode:6481: inode #2: comm syz.2.293: mark_inode_dirty error [ 110.133156][ T6732] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.164420][ T6721] EXT4-fs error (device loop2): ext4_do_update_inode:5596: inode #2: comm syz.2.293: corrupted inode contents [ 110.212277][ T6732] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 110.236124][ T6721] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.293: mark_inode_dirty error [ 110.253078][ T6732] FAT-fs (loop0): Filesystem has been set read-only [ 110.277604][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 110.277622][ T29] audit: type=1800 audit(1769613671.990:247): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.296" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 110.294199][ T6733] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.293: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 110.294199][ T6733] [ 110.499090][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.616105][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.956623][ T47] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.901942][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.917259][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.932286][ T47] usb 5-1: string descriptor 0 read error: -71 [ 111.938640][ T47] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.749437][ T47] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.777816][ T47] usb 5-1: can't set config #1, error -71 [ 112.790384][ T47] usb 5-1: USB disconnect, device number 3 [ 112.833207][ T6782] loop0: detected capacity change from 0 to 128 [ 112.857173][ T6781] loop2: detected capacity change from 0 to 512 [ 112.858379][ T6782] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.884279][ T6782] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.903473][ T6781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.933932][ T6781] EXT4-fs (loop2): 1 truncate cleaned up [ 112.975589][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.021479][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.073990][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.234803][ T47] kernel read not supported for file bpf-prog (pid: 47 comm: kworker/1:1) [ 113.254282][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 113.423653][ T6803] loop0: detected capacity change from 0 to 256 [ 113.442954][ T6804] loop4: detected capacity change from 0 to 128 [ 113.466308][ T6804] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.494864][ T6803] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.525967][ T6804] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.637507][ T6808] Process accounting resumed [ 113.888987][ T35] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.983630][ T6829] loop2: detected capacity change from 0 to 512 [ 114.017831][ T6828] netlink: 'syz.4.334': attribute type 13 has an invalid length. [ 114.056721][ T6829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.074003][ T6829] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.357888][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.365774][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.102084][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 115.135078][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.143987][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.184266][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.206982][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.256691][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.271622][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.307246][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.338604][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.805395][ T6892] netlink: 'syz.3.356': attribute type 13 has an invalid length. [ 116.008003][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.017130][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.044975][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.070756][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.190748][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 116.218440][ T6899] loop1: detected capacity change from 0 to 1024 [ 116.240187][ T6899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.291704][ T6899] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 116.301311][ T6899] System zones: 0-1, 3-36 [ 116.364401][ T6899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.413945][ T6906] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 116.507885][ T6910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.785121][ T6915] loop4: detected capacity change from 0 to 256 [ 116.798855][ T6915] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.811275][ T6915] exFAT-fs (loop4): failed to load alloc-bitmap [ 116.817665][ T6915] exFAT-fs (loop4): failed to recognize exfat type [ 116.824922][ T6847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.998127][ T6847] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.012512][ T6847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.031993][ T6847] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.061836][ T6847] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.080404][ T6847] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.107617][ T6847] usb 1-1: Product: syz [ 117.112413][ T6847] usb 1-1: Manufacturer: syz [ 117.127865][ T6847] cdc_wdm 1-1:1.0: skipping garbage [ 117.133868][ T6847] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 117.317865][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.450656][ T6847] usb 1-1: USB disconnect, device number 2 [ 117.503556][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.919217][ T6938] netlink: 'syz.2.376': attribute type 3 has an invalid length. [ 118.024682][ T6946] loop2: detected capacity change from 0 to 1024 [ 118.037256][ T6946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.048531][ T6946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 118.056971][ T6946] System zones: 0-1, 3-36 [ 118.064321][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.164840][ T6847] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.354845][ T6847] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.372089][ T6955] loop4: detected capacity change from 0 to 512 [ 118.388868][ T6847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.437326][ T6955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.456020][ T6955] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.460700][ T6847] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.521914][ T6847] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.534854][ T6847] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.548726][ T6847] usb 1-1: Product: syz [ 118.552971][ T6847] usb 1-1: Manufacturer: syz [ 118.574950][ T6847] cdc_wdm 1-1:1.0: skipping garbage [ 118.580283][ T6847] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 118.780992][ T6847] usb 1-1: USB disconnect, device number 3 [ 119.028097][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.505425][ T6977] netlink: 'syz.1.390': attribute type 3 has an invalid length. [ 119.661604][ T6982] mmap: syz.0.391 (6982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.160785][ T6996] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 120.172711][ T6996] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 120.181154][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(full) [ 120.190360][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 120.200415][ T6996] RIP: 0010:__queue_work+0xa2/0xf90 [ 120.205631][ T6996] Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 120.225352][ T6996] RSP: 0018:ffffc9000b447418 EFLAGS: 00010002 [ 120.231433][ T6996] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 120.239404][ T6996] RDX: ffffc900046c2000 RSI: 00000000000002cf RDI: 00000000000002d0 [ 120.247379][ T6996] RBP: 0000000000000000 R08: ffff88813ff72017 R09: 1ffff11027fee402 [ 120.255442][ T6996] R10: dffffc0000000000 R11: ffffed1027fee403 R12: dffffc0000000000 [ 120.263416][ T6996] R13: ffff88813ff72010 R14: 00000000000001c0 R15: 0000000000000000 [ 120.271392][ T6996] FS: 00007f7f72a706c0(0000) GS:ffff8881252af000(0000) knlGS:0000000000000000 [ 120.280414][ T6996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.287068][ T6996] CR2: 000000110c395c38 CR3: 00000000389e2000 CR4: 00000000003526f0 [ 120.295066][ T6996] Call Trace: [ 120.298343][ T6996] [ 120.301295][ T6996] ? __asan_memcpy+0x40/0x70 [ 120.305906][ T6996] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 120.312178][ T6996] queue_work_on+0x106/0x1d0 [ 120.316799][ T6996] puts_queue+0xa3/0xe0 [ 120.320991][ T6996] ? __pfx_puts_queue+0x10/0x10 [ 120.325877][ T6996] k_fn+0x7c/0xd0 [ 120.329527][ T6996] k_pad+0x79a/0xa90 [ 120.333432][ T6996] ? lock_acquire+0x106/0x330 [ 120.338116][ T6996] ? atomic_notifier_call_chain+0x26/0x180 [ 120.343954][ T6996] ? __pfx_k_pad+0x10/0x10 [ 120.348386][ T6996] ? atomic_notifier_call_chain+0x26/0x180 [ 120.354199][ T6996] ? atomic_notifier_call_chain+0x26/0x180 [ 120.360010][ T6996] kbd_event+0x2ec1/0x40d0 [ 120.364434][ T6996] ? __pfx_kbd_event+0x10/0x10 [ 120.369190][ T6996] ? add_lock_to_list+0xc7/0x100 [ 120.374121][ T6996] ? __lock_acquire+0x6b5/0x2cf0 [ 120.379084][ T6996] ? __lock_acquire+0x6b5/0x2cf0 [ 120.384012][ T6996] ? __lock_acquire+0x6b5/0x2cf0 [ 120.388962][ T6996] ? __lock_acquire+0x6b5/0x2cf0 [ 120.394168][ T6996] ? input_pass_values+0x8d/0x890 [ 120.399182][ T6996] ? lock_acquire+0x106/0x330 [ 120.403856][ T6996] ? input_pass_values+0x8d/0x890 [ 120.409086][ T6996] input_handle_events_default+0xd4/0x1a0 [ 120.414825][ T6996] ? input_pass_values+0x8d/0x890 [ 120.419852][ T6996] input_pass_values+0x288/0x890 [ 120.424788][ T6996] ? input_handle_event+0x70c/0xf30 [ 120.429973][ T6996] input_event_dispose+0x330/0x6b0 [ 120.435082][ T6996] input_inject_event+0x1dd/0x340 [ 120.440094][ T6996] ? input_inject_event+0xb6/0x340 [ 120.445195][ T6996] evdev_write+0x325/0x4c0 [ 120.449624][ T6996] ? __lock_acquire+0x6b5/0x2cf0 [ 120.454551][ T6996] ? __pfx_evdev_write+0x10/0x10 [ 120.459480][ T6996] ? bpf_lsm_file_permission+0x9/0x20 [ 120.464837][ T6996] ? security_file_permission+0x75/0x260 [ 120.470464][ T6996] ? rw_verify_area+0x255/0x4d0 [ 120.475398][ T6996] ? __pfx_evdev_write+0x10/0x10 [ 120.480332][ T6996] vfs_write+0x29a/0xb90 [ 120.484570][ T6996] ? __pfx_vfs_write+0x10/0x10 [ 120.489337][ T6996] ? __fget_files+0x2a/0x420 [ 120.494104][ T6996] ? __fget_files+0x2a/0x420 [ 120.498684][ T6996] ? __fget_files+0x3a0/0x420 [ 120.503439][ T6996] ? __fget_files+0x2a/0x420 [ 120.508145][ T6996] ksys_write+0x150/0x270 [ 120.512473][ T6996] ? __pfx_ksys_write+0x10/0x10 [ 120.517322][ T6996] do_syscall_64+0xe2/0xf80 [ 120.521821][ T6996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.527885][ T6996] ? trace_irq_disable+0x37/0x100 [ 120.532991][ T6996] ? clear_bhb_loop+0x40/0x90 [ 120.537657][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.543552][ T6996] RIP: 0033:0x7f7f71b9aeb9 [ 120.547990][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.567598][ T6996] RSP: 002b:00007f7f72a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.576023][ T6996] RAX: ffffffffffffffda RBX: 00007f7f71e15fa0 RCX: 00007f7f71b9aeb9 [ 120.583981][ T6996] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 120.591941][ T6996] RBP: 00007f7f71c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 120.599908][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.607869][ T6996] R13: 00007f7f71e16038 R14: 00007f7f71e15fa0 R15: 00007ffe713abf68 [ 120.615839][ T6996] [ 120.618843][ T6996] Modules linked in: [ 120.622742][ T6996] ---[ end trace 0000000000000000 ]--- [ 120.628275][ T6996] RIP: 0010:__queue_work+0xa2/0xf90 [ 120.633472][ T6996] Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 120.653091][ T6996] RSP: 0018:ffffc9000b447418 EFLAGS: 00010002 [ 120.659153][ T6996] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 120.667117][ T6996] RDX: ffffc900046c2000 RSI: 00000000000002cf RDI: 00000000000002d0 [ 120.675074][ T6996] RBP: 0000000000000000 R08: ffff88813ff72017 R09: 1ffff11027fee402 [ 120.683052][ T6996] R10: dffffc0000000000 R11: ffffed1027fee403 R12: dffffc0000000000 [ 120.691011][ T6996] R13: ffff88813ff72010 R14: 00000000000001c0 R15: 0000000000000000 [ 120.698971][ T6996] FS: 00007f7f72a706c0(0000) GS:ffff8881252af000(0000) knlGS:0000000000000000 [ 120.707888][ T6996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.714457][ T6996] CR2: 000000110c395c38 CR3: 00000000389e2000 CR4: 00000000003526f0 [ 120.722420][ T6996] Kernel panic - not syncing: Fatal exception [ 120.728807][ T6996] Kernel Offset: disabled [ 120.733117][ T6996] Rebooting in 86400 seconds..