last executing test programs: 9.956924739s ago: executing program 0 (id=35): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 9.634835295s ago: executing program 0 (id=46): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200008, &(0x7f0000000740)={[{@check_relaxed}, {@dmode={'dmode', 0x3d, 0x2}}, {@check_strict}, {@mode={'mode', 0x3d, 0x7ff00000}}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@utf8}, {@session={'session', 0x3d, 0x39}}, {@map_off}]}, 0x0, 0x3fc, &(0x7f0000000280)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, 0x0, 0x0) 9.192189387s ago: executing program 0 (id=41): syz_usb_connect(0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) 7.638435823s ago: executing program 0 (id=50): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000140)=0x8) 7.523659329s ago: executing program 0 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.83673535s ago: executing program 3 (id=82): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r0, 0x2000000) pread64(r0, &(0x7f0000000300)=""/84, 0x54, 0x8e) 2.661487399s ago: executing program 3 (id=83): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x81, 0xe, 0xb) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 2.304655097s ago: executing program 3 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd69, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004812}, 0x4080) 2.003760711s ago: executing program 3 (id=86): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 1.986556233s ago: executing program 2 (id=88): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000080)=0x203, 0x4) 1.880341338s ago: executing program 3 (id=89): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x2, 0x9, 0x1, 0x4, 0x1, 0x0, [{0x2, 0x2, 0x8, '\x00', 0x2006}]}) 1.324843325s ago: executing program 2 (id=92): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e4", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000) 1.247994759s ago: executing program 2 (id=93): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r0, 0x0, 0x0, 0x400) read(r0, &(0x7f0000000d40)=""/4096, 0x1000) 1.183590172s ago: executing program 1 (id=94): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000002000000}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) 1.047293019s ago: executing program 1 (id=95): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b182cc4c3705dc9f253d21fba2eace93b558c750cfba810dc7a19dbb15a5a39c850a7541d5e2765acdedc133065149a3bb764ba84b3305aaecab5141901b2fe9df9b70001000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.03403723s ago: executing program 2 (id=96): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 831.527869ms ago: executing program 2 (id=97): syz_80211_inject_frame(0x0, 0x0, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 761.896123ms ago: executing program 1 (id=98): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000d80ffff", 0x8) 563.154083ms ago: executing program 1 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd8c00fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="331900000300000014001680100001800c0009000180000000000000050021"], 0x3c}}, 0x4000000) 481.333667ms ago: executing program 0 (id=100): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') fchdir(r0) exit(0x3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) 295.468846ms ago: executing program 1 (id=101): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x400, 0x0) 261.288527ms ago: executing program 3 (id=102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xf, @private1, 0x3fe}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) 99.707426ms ago: executing program 2 (id=103): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 1 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 78.314394][ T5762] cgroup: Unknown subsys name 'net' [ 78.457616][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.115475][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.245138][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.254151][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.278911][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.287333][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.296230][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.304201][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.327207][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.353973][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.361483][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.379426][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.386998][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.396066][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.406150][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.417449][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.425750][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.433919][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.436228][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.443838][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.455462][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.460348][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.475731][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.485822][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.493910][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.507857][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.956530][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.023295][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 83.072165][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 83.115955][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.124016][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.132354][ T5774] bridge_slave_0: entered allmulticast mode [ 83.140167][ T5774] bridge_slave_0: entered promiscuous mode [ 83.157634][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.165142][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.172605][ T5774] bridge_slave_1: entered allmulticast mode [ 83.180305][ T5774] bridge_slave_1: entered promiscuous mode [ 83.242508][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.261264][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.287748][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.332248][ T5774] team0: Port device team_slave_0 added [ 83.356566][ T5774] team0: Port device team_slave_1 added [ 83.394287][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.401749][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.409116][ T5782] bridge_slave_0: entered allmulticast mode [ 83.416790][ T5782] bridge_slave_0: entered promiscuous mode [ 83.450902][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.458191][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.465870][ T5782] bridge_slave_1: entered allmulticast mode [ 83.473135][ T5782] bridge_slave_1: entered promiscuous mode [ 83.515629][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.523244][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.530784][ T5785] bridge_slave_0: entered allmulticast mode [ 83.537803][ T5785] bridge_slave_0: entered promiscuous mode [ 83.567772][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.575174][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.601512][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.615140][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.622241][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.648379][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.660147][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.667370][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.674730][ T5785] bridge_slave_1: entered allmulticast mode [ 83.682231][ T5785] bridge_slave_1: entered promiscuous mode [ 83.712922][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.767682][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.790138][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.803521][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.813100][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.821146][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.828415][ T5778] bridge_slave_0: entered allmulticast mode [ 83.835906][ T5778] bridge_slave_0: entered promiscuous mode [ 83.860080][ T5774] hsr_slave_0: entered promiscuous mode [ 83.866781][ T5774] hsr_slave_1: entered promiscuous mode [ 83.893135][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.900501][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.907707][ T5778] bridge_slave_1: entered allmulticast mode [ 83.916028][ T5778] bridge_slave_1: entered promiscuous mode [ 83.969230][ T5782] team0: Port device team_slave_0 added [ 83.979192][ T5785] team0: Port device team_slave_0 added [ 83.999900][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.012707][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.023817][ T5782] team0: Port device team_slave_1 added [ 84.043285][ T5785] team0: Port device team_slave_1 added [ 84.096279][ T5778] team0: Port device team_slave_0 added [ 84.106261][ T5778] team0: Port device team_slave_1 added [ 84.160641][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.167673][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.194249][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.206912][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.214963][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.241786][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.253607][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.261006][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.286962][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.331404][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.338421][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.365669][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.377744][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.385849][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.391489][ T5779] Bluetooth: hci0: command tx timeout [ 84.418086][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.432823][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.440186][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.467882][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.539042][ T5779] Bluetooth: hci2: command tx timeout [ 84.539149][ T5786] Bluetooth: hci1: command tx timeout [ 84.571654][ T5782] hsr_slave_0: entered promiscuous mode [ 84.578438][ T5782] hsr_slave_1: entered promiscuous mode [ 84.585130][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.593136][ T5782] Cannot create hsr debugfs directory [ 84.619321][ T5786] Bluetooth: hci3: command tx timeout [ 84.654111][ T5785] hsr_slave_0: entered promiscuous mode [ 84.660920][ T5785] hsr_slave_1: entered promiscuous mode [ 84.667254][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.675372][ T5785] Cannot create hsr debugfs directory [ 84.703322][ T5778] hsr_slave_0: entered promiscuous mode [ 84.710030][ T5778] hsr_slave_1: entered promiscuous mode [ 84.716208][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.724668][ T5778] Cannot create hsr debugfs directory [ 85.100473][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.119861][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.133739][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.144684][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.228572][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.246531][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.272970][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.283837][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.374873][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.386155][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.409603][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.422009][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.496189][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.514586][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.525954][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.537335][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.552740][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.607876][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.671113][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.678508][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.697392][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.704634][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.742928][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.828143][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.855283][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.862509][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.895284][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.906177][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.913432][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.950211][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.987920][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.995217][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.054390][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.075676][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.082962][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.128643][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.181560][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.199376][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.206665][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.235677][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.242943][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.444333][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.461897][ T5786] Bluetooth: hci0: command tx timeout [ 86.556633][ T5774] veth0_vlan: entered promiscuous mode [ 86.585642][ T5774] veth1_vlan: entered promiscuous mode [ 86.620619][ T5786] Bluetooth: hci2: command tx timeout [ 86.626113][ T5786] Bluetooth: hci1: command tx timeout [ 86.664004][ T5774] veth0_macvtap: entered promiscuous mode [ 86.675567][ T5774] veth1_macvtap: entered promiscuous mode [ 86.699759][ T5786] Bluetooth: hci3: command tx timeout [ 86.725326][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.758343][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.805134][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.815008][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.824579][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.833588][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.903958][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.944190][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.094211][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.119988][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.122723][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.218719][ T5785] veth0_vlan: entered promiscuous mode [ 87.276520][ T5785] veth1_vlan: entered promiscuous mode [ 87.323634][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.353744][ T5778] veth0_vlan: entered promiscuous mode [ 87.364252][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.375404][ T5782] veth0_vlan: entered promiscuous mode [ 87.413950][ T5782] veth1_vlan: entered promiscuous mode [ 87.445476][ T5778] veth1_vlan: entered promiscuous mode [ 87.515650][ T5785] veth0_macvtap: entered promiscuous mode [ 87.554409][ T5785] veth1_macvtap: entered promiscuous mode [ 87.610722][ T5778] veth0_macvtap: entered promiscuous mode [ 87.632698][ T5782] veth0_macvtap: entered promiscuous mode [ 87.653393][ T5778] veth1_macvtap: entered promiscuous mode [ 87.700671][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.744077][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.770961][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.819800][ T5782] veth1_macvtap: entered promiscuous mode [ 87.843580][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.869266][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881873][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.893206][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.911858][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.922747][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.933859][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.946104][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.971438][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.982477][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.993617][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.002457][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.025676][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.037124][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.048259][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.059646][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.071788][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.085139][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.104382][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.115304][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.129392][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.138149][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.177891][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.189386][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.201346][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.211950][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.228285][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.239176][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.249588][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 88.254353][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.275153][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.288023][ T5833] usb 1-1: config 1 has an invalid interface number: 124 but max is 0 [ 88.298032][ T5833] usb 1-1: config 1 has no interface number 0 [ 88.308050][ T5833] usb 1-1: config 1 interface 124 has no altsetting 0 [ 88.335287][ T5833] usb 1-1: New USB device found, idVendor=0c8e, idProduct=6000, bcdDevice=9c.3e [ 88.348235][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.355581][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.372095][ T5833] usb 1-1: Product: syz [ 88.376339][ T5833] usb 1-1: Manufacturer: syz [ 88.383366][ T5833] usb 1-1: SerialNumber: syz [ 88.391212][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.411974][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.425409][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.435747][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.446404][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.458350][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.511892][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.527507][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.538091][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.547665][ T5786] Bluetooth: hci0: command tx timeout [ 88.555559][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.604795][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.627758][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.692610][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.709164][ T5786] Bluetooth: hci1: command tx timeout [ 88.709661][ T5779] Bluetooth: hci2: command tx timeout [ 88.744146][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.762338][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.779493][ T5779] Bluetooth: hci3: command tx timeout [ 88.792282][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.827408][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.860480][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.973923][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.011827][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.053779][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.065616][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.076462][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.104935][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.116425][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.141524][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.176471][ T5833] usb 1-1: USB disconnect, device number 2 [ 89.186851][ T5840] netem: change failed [ 89.205845][ T5784] udevd[5784]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory [ 89.243573][ T5784] udevd[5784]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory [ 89.269958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.277852][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.408418][ T5847] syz.3.5[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.529318][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.750670][ T27] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 89.771339][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 89.795717][ T27] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 89.821939][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.840467][ T27] usb 2-1: Product: syz [ 89.848877][ T27] usb 2-1: Manufacturer: syz [ 89.873894][ T27] usb 2-1: SerialNumber: syz [ 89.913422][ T27] usb 2-1: config 0 descriptor?? [ 89.934376][ T27] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 90.014667][ T5859] C: renamed from team_slave_0 (while UP) [ 90.044236][ T5859] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 90.083977][ T5859] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9'. [ 90.105454][ T5859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 90.167215][ T5847] loop3: detected capacity change from 0 to 32768 [ 90.287023][ T28] audit: type=1800 audit(1774622024.088:2): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 90.619016][ T5779] Bluetooth: hci0: command tx timeout [ 90.629251][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.709519][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.753433][ T27] gspca_sunplus: reg_r err -71 [ 90.758333][ T27] sunplus: probe of 2-1:0.0 failed with error -71 [ 90.774342][ T27] usb 2-1: USB disconnect, device number 2 [ 90.780406][ T5779] Bluetooth: hci1: command tx timeout [ 90.793424][ T5779] Bluetooth: hci2: command tx timeout [ 90.847125][ T5833] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 90.859293][ T5779] Bluetooth: hci3: command tx timeout [ 90.875195][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.895883][ T5833] usb 1-1: Product: syz [ 90.902494][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.918199][ T5833] usb 1-1: Manufacturer: syz [ 90.923366][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.933618][ T5833] usb 1-1: SerialNumber: syz [ 90.952593][ T5833] usb 1-1: config 0 descriptor?? [ 90.968526][ T5816] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 90.988955][ T5833] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 90.995391][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.025193][ T5816] usb 3-1: config 0 descriptor?? [ 91.436247][ T5877] Set syz1 is full, maxelem 0 reached [ 91.528907][ T5816] hid-steam 0003:28DE:1102.0001: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 91.793153][ T5888] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 91.808051][ T5815] usb 3-1: USB disconnect, device number 2 [ 91.878249][ T5833] usb 1-1: USB disconnect, device number 3 [ 92.147486][ T967] cfg80211: failed to load regulatory.db [ 92.500106][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.956564][ T5917] loop2: detected capacity change from 0 to 1764 [ 93.107967][ T5923] loop3: detected capacity change from 0 to 512 [ 93.144502][ T5923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.199357][ T5923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.253806][ T5923] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.36: inode has both inline data and extents flags [ 93.282196][ T5923] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.36: couldn't read orphan inode 15 (err -117) [ 93.309874][ T5923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.395595][ T5930] loop0: detected capacity change from 0 to 136 [ 93.539837][ T5930] rock: directory entry would overflow storage [ 93.562501][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.587501][ T5930] rock: sig=0x4f50, size=4, remaining=3 [ 93.603984][ T5930] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 93.618673][ T5934] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 93.758844][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.790115][ T5936] loop3: detected capacity change from 0 to 2048 [ 93.968432][ T5815] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 93.979258][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.987421][ T5815] usb 2-1: Product: syz [ 94.000086][ T5815] usb 2-1: Manufacturer: syz [ 94.004925][ T5815] usb 2-1: SerialNumber: syz [ 94.013518][ T5815] usb 2-1: config 0 descriptor?? [ 94.028050][ T5815] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 94.506414][ T5936] loop3: p1 < > p3 [ 94.548017][ T5936] loop3: p3 size 134217728 extends beyond EOD, truncated [ 94.821649][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 94.840178][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.932503][ T967] usb 2-1: USB disconnect, device number 3 [ 95.145566][ T5949] loop2: detected capacity change from 0 to 512 [ 95.164407][ T5949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.196853][ T5949] EXT4-fs (loop2): 1 orphan inode deleted [ 95.220513][ T5949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.474753][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.785609][ T5965] loop1: detected capacity change from 0 to 4096 [ 95.803914][ T5965] ======================================================= [ 95.803914][ T5965] WARNING: The mand mount option has been deprecated and [ 95.803914][ T5965] and is ignored by this kernel. Remove the mand [ 95.803914][ T5965] option from the mount to silence this warning. [ 95.803914][ T5965] ======================================================= [ 95.852289][ T5967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.55'. [ 95.880489][ T5965] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 95.995216][ T5965] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 96.035787][ T5965] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 96.351018][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.518083][ T5973] capability: warning: `syz.3.58' uses 32-bit capabilities (legacy support in use) [ 96.542976][ T5974] loop1: detected capacity change from 0 to 512 [ 96.564264][ T5973] program syz.3.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.578155][ T5974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.587205][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 96.599102][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.607166][ T5815] usb 3-1: config 0 has no interface number 0 [ 96.685515][ T5974] EXT4-fs (loop1): 2 truncates cleaned up [ 96.694668][ T5815] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 96.730292][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.750954][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.799058][ T5815] usb 3-1: Product: syz [ 96.810879][ T5815] usb 3-1: Manufacturer: syz [ 96.839500][ T5815] usb 3-1: SerialNumber: syz [ 96.859405][ T5974] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1422: inode #12: block 7: comm syz.1.57: path /8/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 96.881185][ T5815] usb 3-1: config 0 descriptor?? [ 96.896902][ T5815] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 96.909834][ T5974] EXT4-fs (loop1): Remounting filesystem read-only [ 96.959136][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.743049][ T5992] loop1: detected capacity change from 0 to 1024 [ 97.789006][ T5815] gspca_spca1528: reg_w err -71 [ 97.828915][ T5815] spca1528: probe of 3-1:0.1 failed with error -71 [ 97.867421][ T5815] usb 3-1: USB disconnect, device number 3 [ 98.169745][ T5995] loop1: detected capacity change from 0 to 256 [ 98.248229][ T5995] FAT-fs (loop1): Directory bread(block 64) failed [ 98.267684][ T5995] FAT-fs (loop1): Directory bread(block 65) failed [ 98.288097][ T5995] FAT-fs (loop1): Directory bread(block 66) failed [ 98.321853][ T5995] FAT-fs (loop1): Directory bread(block 67) failed [ 98.334727][ T5995] FAT-fs (loop1): Directory bread(block 68) failed [ 98.362672][ T5996] loop3: detected capacity change from 0 to 512 [ 98.370579][ T5995] FAT-fs (loop1): Directory bread(block 69) failed [ 98.384495][ T5996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.399530][ T5995] FAT-fs (loop1): Directory bread(block 70) failed [ 98.422392][ T5995] FAT-fs (loop1): Directory bread(block 71) failed [ 98.436317][ T5996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.468336][ T5995] FAT-fs (loop1): Directory bread(block 72) failed [ 98.486607][ T5995] FAT-fs (loop1): Directory bread(block 73) failed [ 98.498139][ T5996] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.620314][ T5996] EXT4-fs (loop3): 1 truncate cleaned up [ 98.647258][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.764847][ T5996] EXT4-fs warning (device loop3): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 98.903757][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.916482][ T6006] loop2: detected capacity change from 0 to 512 [ 98.992081][ T6006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.005339][ T6006] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.293119][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.351076][ T6014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.617798][ T6021] loop1: detected capacity change from 0 to 64 [ 99.677710][ T28] audit: type=1800 audit(1774622033.488:3): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.78" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 100.248469][ T6031] loop3: detected capacity change from 0 to 2048 [ 100.284447][ T6031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.475277][ T6033] loop2: detected capacity change from 0 to 128 [ 100.530329][ T6033] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 100.554604][ T6033] hpfs: filesystem error: improperly stopped [ 100.560941][ T6033] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 100.568860][ T6033] hpfs: You really don't want any checks? You are crazy... [ 100.576280][ T6033] hpfs: Code page index out of array [ 100.632641][ T6033] hpfs: code page support is disabled [ 100.666616][ T6033] hpfs: hpfs_map_4sectors(): unaligned read [ 100.696838][ T6033] hpfs: hpfs_map_4sectors(): unaligned read [ 100.712426][ T6033] hpfs: filesystem error: unable to find root dir [ 100.759232][ T6033] hpfs: hpfs_map_sector(): read error [ 100.786007][ T6033] hpfs: hpfs_map_sector(): read error [ 101.989019][ T6058] program syz.1.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.157967][ T6043] loop3: detected capacity change from 0 to 32768 [ 102.166716][ T6059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.288165][ T6062] syz.1.98 (6062) used greatest stack depth: 20432 bytes left [ 102.341634][ T5958] Set syz1 is full, maxelem 65536 reached [ 102.353193][ T6043] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.480461][ T6068] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 102.532024][ T6043] syz.3.89 (6043) used greatest stack depth: 19216 bytes left [ 102.611074][ T6072] loop1: detected capacity change from 0 to 16 [ 102.642810][ T6072] erofs: (device loop1): mounted with root inode @ nid 36. [ 102.685096][ T6072] syz.1.101: attempt to access beyond end of device [ 102.685096][ T6072] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 102.686651][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 102.721827][ T6072] syz.1.101: attempt to access beyond end of device [ 102.721827][ T6072] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 102.751726][ T6072] syz.1.101: attempt to access beyond end of device [ 102.751726][ T6072] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 102.868555][ T5778] BUG: Bad page state in process syz-executor pfn:2a828 [ 102.876388][ T5778] page:ffffea0000aa0a00 refcount:0 mapcount:0 mapping:ffff88805a8607c8 index:0x2 pfn:0x2a828 [ 102.886806][ T5778] aops:z_erofs_cache_aops ino:0 [ 102.891818][ T5778] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 102.899674][ T5778] page_type: 0xffffffff() [ 102.904167][ T5778] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805a8607c8 [ 102.912875][ T5778] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 102.921692][ T5778] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 102.929290][ T5778] page_owner tracks the page as allocated [ 102.935316][ T5778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6072, tgid 6071 (syz.1.101), ts 102684419199, free_ts 92781802825 [ 102.957446][ T5778] post_alloc_hook+0x1c1/0x200 [ 102.963401][ T5778] get_page_from_freelist+0x1951/0x19e0 [ 102.969488][ T5778] __alloc_pages+0x1f0/0x460 [ 102.974139][ T5778] z_erofs_do_read_page+0x2181/0x36b0 [ 102.979689][ T5778] z_erofs_readahead+0x88b/0xda0 [ 102.984691][ T5778] read_pages+0x189/0x850 [ 102.989183][ T5778] page_cache_ra_unbounded+0x68a/0x770 [ 102.994691][ T5778] force_page_cache_ra+0x2c1/0x320 [ 102.999927][ T5778] generic_fadvise+0x47e/0x780 [ 103.004748][ T5778] __x64_sys_fadvise64+0x140/0x180 [ 103.009997][ T5778] do_syscall_64+0x55/0xa0 [ 103.014476][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.023161][ T5778] page last free stack trace: [ 103.027886][ T5778] free_unref_page_prepare+0x7b2/0x8c0 [ 103.034672][ T5778] free_unref_page+0x32/0x2e0 [ 103.039498][ T5778] __slab_free+0x35a/0x400 [ 103.043982][ T5778] qlist_free_all+0x75/0xd0 [ 103.048546][ T5778] kasan_quarantine_reduce+0x143/0x160 [ 103.054227][ T5778] __kasan_slab_alloc+0x22/0x80 [ 103.059266][ T5778] slab_post_alloc_hook+0x6e/0x4b0 [ 103.064527][ T5778] kmem_cache_alloc_lru+0x111/0x2d0 [ 103.071117][ T5778] sock_alloc_inode+0x28/0xc0 [ 103.075868][ T5778] new_inode_pseudo+0x63/0x1d0 [ 103.080967][ T5778] __sock_create+0x12d/0x940 [ 103.085630][ T5778] __sys_socket+0xd7/0x1a0 [ 103.090187][ T5778] __x64_sys_socket+0x7a/0x90 [ 103.094931][ T5778] do_syscall_64+0x55/0xa0 [ 103.099616][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.105570][ T5778] Modules linked in: [ 103.109610][ T5778] CPU: 1 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 103.117234][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.127349][ T5778] Call Trace: [ 103.130661][ T5778] [ 103.133602][ T5778] dump_stack_lvl+0x18c/0x250 [ 103.138317][ T5778] ? show_regs_print_info+0x20/0x20 [ 103.143570][ T5778] ? swiotlb_print_info+0x70/0x70 [ 103.148659][ T5778] bad_page+0x14b/0x170 [ 103.152870][ T5778] free_unref_page_prepare+0x85f/0x8c0 [ 103.158401][ T5778] free_unref_page+0x32/0x2e0 [ 103.163134][ T5778] ? __folio_put+0xef/0x210 [ 103.167689][ T5778] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 103.174220][ T5778] erofs_shrink_workstation+0x11f/0x290 [ 103.179823][ T5778] ? erofs_shrinker_unregister+0x170/0x170 [ 103.185662][ T5778] ? io_schedule+0xd0/0xd0 [ 103.190159][ T5778] ? kobject_put+0x428/0x460 [ 103.194793][ T5778] erofs_shrinker_unregister+0x5d/0x170 [ 103.200368][ T5778] erofs_put_super+0x4e/0x150 [ 103.205083][ T5778] ? erofs_free_inode+0xb0/0xb0 [ 103.209998][ T5778] generic_shutdown_super+0x134/0x2b0 [ 103.215406][ T5778] kill_block_super+0x44/0x90 [ 103.220110][ T5778] erofs_kill_sb+0x4c/0x140 [ 103.224666][ T5778] deactivate_locked_super+0x97/0x100 [ 103.230078][ T5778] cleanup_mnt+0x43b/0x4d0 [ 103.234527][ T5778] task_work_run+0x1d4/0x260 [ 103.239150][ T5778] ? task_work_cancel+0x220/0x220 [ 103.244210][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 103.249716][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 103.255033][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 103.260626][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 103.266205][ T5778] do_syscall_64+0x61/0xa0 [ 103.270661][ T5778] ? clear_bhb_loop+0x40/0x90 [ 103.275371][ T5778] ? clear_bhb_loop+0x40/0x90 [ 103.280078][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.286000][ T5778] RIP: 0033:0x7fea7239d9d7 [ 103.290804][ T5778] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.310483][ T5778] RSP: 002b:00007fff306b80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.319158][ T5778] RAX: 0000000000000000 RBX: 00007fea72432050 RCX: 00007fea7239d9d7 [ 103.327341][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff306b8180 [ 103.335444][ T5778] RBP: 00007fff306b8180 R08: 00007fff306b9180 R09: 00000000ffffffff [ 103.343449][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff306b9210 [ 103.351622][ T5778] R13: 00007fea72432050 R14: 000000000001917c R15: 00007fff306b9250 [ 103.359643][ T5778] [ 103.364801][ T5778] Disabling lock debugging due to kernel taint [ 103.371367][ T5778] BUG: Bad page state in process syz-executor pfn:2a829 [ 103.379593][ T5778] page:ffffea0000aa0a40 refcount:0 mapcount:0 mapping:ffff88805a8607c8 index:0x3 pfn:0x2a829 [ 103.389969][ T5778] aops:z_erofs_cache_aops ino:0 [ 103.394983][ T5778] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 103.402835][ T5778] page_type: 0xffffffff() [ 103.407207][ T5778] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805a8607c8 [ 103.415876][ T5778] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 103.424635][ T5778] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 103.431990][ T5778] page_owner tracks the page as allocated [ 103.437740][ T5778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6072, tgid 6071 (syz.1.101), ts 102684438193, free_ts 92780991883 [ 103.459631][ T5778] post_alloc_hook+0x1c1/0x200 [ 103.464481][ T5778] get_page_from_freelist+0x1951/0x19e0 [ 103.470327][ T5778] __alloc_pages+0x1f0/0x460 [ 103.476075][ T5778] z_erofs_do_read_page+0x2181/0x36b0 [ 103.481699][ T5778] z_erofs_readahead+0x88b/0xda0 [ 103.486694][ T5778] read_pages+0x189/0x850 [ 103.491124][ T5778] page_cache_ra_unbounded+0x68a/0x770 [ 103.496653][ T5778] force_page_cache_ra+0x2c1/0x320 [ 103.501932][ T5778] generic_fadvise+0x47e/0x780 [ 103.506780][ T5778] __x64_sys_fadvise64+0x140/0x180 [ 103.512116][ T5778] do_syscall_64+0x55/0xa0 [ 103.516597][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.522612][ T5778] page last free stack trace: [ 103.527336][ T5778] free_unref_page_prepare+0x7b2/0x8c0 [ 103.532907][ T5778] free_unref_page+0x32/0x2e0 [ 103.537646][ T5778] __unfreeze_partials+0x1cf/0x210 [ 103.542845][ T5778] put_cpu_partial+0x17c/0x250 [ 103.547666][ T5778] __slab_free+0x319/0x400 [ 103.552176][ T5778] qlist_free_all+0x75/0xd0 [ 103.556819][ T5778] kasan_quarantine_reduce+0x143/0x160 [ 103.562399][ T5778] __kasan_slab_alloc+0x22/0x80 [ 103.567307][ T5778] slab_post_alloc_hook+0x6e/0x4b0 [ 103.572545][ T5778] kmem_cache_alloc_lru+0x111/0x2d0 [ 103.578997][ T5778] sock_alloc_inode+0x28/0xc0 [ 103.583823][ T5778] new_inode_pseudo+0x63/0x1d0 [ 103.588717][ T5778] __sock_create+0x12d/0x940 [ 103.593712][ T5778] __sys_socket+0xd7/0x1a0 [ 103.598183][ T5778] __x64_sys_socket+0x7a/0x90 [ 103.602958][ T5778] do_syscall_64+0x55/0xa0 [ 103.607431][ T5778] Modules linked in: [ 103.611437][ T5778] CPU: 1 PID: 5778 Comm: syz-executor Tainted: G B syzkaller #0 [ 103.620490][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.630678][ T5778] Call Trace: [ 103.633980][ T5778] [ 103.636940][ T5778] dump_stack_lvl+0x18c/0x250 [ 103.641673][ T5778] ? show_regs_print_info+0x20/0x20 [ 103.646920][ T5778] ? swiotlb_print_info+0x70/0x70 [ 103.651990][ T5778] bad_page+0x14b/0x170 [ 103.656170][ T5778] free_unref_page_prepare+0x85f/0x8c0 [ 103.661667][ T5778] free_unref_page+0x32/0x2e0 [ 103.666379][ T5778] ? __folio_put+0xef/0x210 [ 103.670924][ T5778] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 103.677388][ T5778] erofs_shrink_workstation+0x11f/0x290 [ 103.682963][ T5778] ? erofs_shrinker_unregister+0x170/0x170 [ 103.688834][ T5778] ? io_schedule+0xd0/0xd0 [ 103.693314][ T5778] ? kobject_put+0x428/0x460 [ 103.697928][ T5778] erofs_shrinker_unregister+0x5d/0x170 [ 103.703521][ T5778] erofs_put_super+0x4e/0x150 [ 103.708230][ T5778] ? erofs_free_inode+0xb0/0xb0 [ 103.713108][ T5778] generic_shutdown_super+0x134/0x2b0 [ 103.718497][ T5778] kill_block_super+0x44/0x90 [ 103.723199][ T5778] erofs_kill_sb+0x4c/0x140 [ 103.727731][ T5778] deactivate_locked_super+0x97/0x100 [ 103.733142][ T5778] cleanup_mnt+0x43b/0x4d0 [ 103.737582][ T5778] task_work_run+0x1d4/0x260 [ 103.742286][ T5778] ? task_work_cancel+0x220/0x220 [ 103.747338][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 103.752844][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 103.758153][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 103.763825][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 103.769311][ T5778] do_syscall_64+0x61/0xa0 [ 103.773803][ T5778] ? clear_bhb_loop+0x40/0x90 [ 103.778515][ T5778] ? clear_bhb_loop+0x40/0x90 [ 103.783218][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.789147][ T5778] RIP: 0033:0x7fea7239d9d7 [ 103.793670][ T5778] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.813390][ T5778] RSP: 002b:00007fff306b80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.821824][ T5778] RAX: 0000000000000000 RBX: 00007fea72432050 RCX: 00007fea7239d9d7 [ 103.829885][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff306b8180 [ 103.837874][ T5778] RBP: 00007fff306b8180 R08: 00007fff306b9180 R09: 00000000ffffffff [ 103.845868][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff306b9210 [ 103.853969][ T5778] R13: 00007fea72432050 R14: 000000000001917c R15: 00007fff306b9250 [ 103.861973][ T5778] [ 103.867020][ T5778] BUG: Bad page state in process syz-executor pfn:7a7e6 [ 103.874711][ T5778] page:ffffea0001e9f980 refcount:0 mapcount:0 mapping:ffff88805a8607c8 index:0x4 pfn:0x7a7e6 [ 103.886124][ T5778] aops:z_erofs_cache_aops ino:0 [ 103.891193][ T5778] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 103.899082][ T5778] page_type: 0xffffffff() [ 103.903484][ T5778] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805a8607c8 [ 103.912140][ T5778] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 103.920814][ T5778] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 103.928131][ T5778] page_owner tracks the page as allocated [ 103.933918][ T5778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6072, tgid 6071 (syz.1.101), ts 102684456341, free_ts 92797999474 [ 103.956003][ T5778] post_alloc_hook+0x1c1/0x200 [ 103.960868][ T5778] get_page_from_freelist+0x1951/0x19e0 [ 103.966468][ T5778] __alloc_pages+0x1f0/0x460 [ 103.971163][ T5778] z_erofs_do_read_page+0x2181/0x36b0 [ 103.976589][ T5778] z_erofs_readahead+0x88b/0xda0 [ 103.981764][ T5778] read_pages+0x189/0x850 [ 103.986136][ T5778] page_cache_ra_unbounded+0x68a/0x770 [ 103.992885][ T5778] force_page_cache_ra+0x2c1/0x320 [ 103.998051][ T5778] generic_fadvise+0x47e/0x780 [ 104.003008][ T5778] __x64_sys_fadvise64+0x140/0x180 [ 104.008166][ T5778] do_syscall_64+0x55/0xa0 [ 104.012701][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.018650][ T5778] page last free stack trace: [ 104.023413][ T5778] free_unref_page_prepare+0x7b2/0x8c0 [ 104.028972][ T5778] free_unref_page+0x32/0x2e0 [ 104.033715][ T5778] __unfreeze_partials+0x1cf/0x210 [ 104.038917][ T5778] put_cpu_partial+0x17c/0x250 [ 104.043763][ T5778] __slab_free+0x319/0x400 [ 104.048218][ T5778] qlist_free_all+0x75/0xd0 [ 104.052817][ T5778] kasan_quarantine_reduce+0x143/0x160 [ 104.058332][ T5778] __kasan_slab_alloc+0x22/0x80 [ 104.063268][ T5778] slab_post_alloc_hook+0x6e/0x4b0 [ 104.068427][ T5778] kmem_cache_alloc+0x11a/0x2d0 [ 104.073401][ T5778] getname_flags+0xbb/0x500 [ 104.077958][ T5778] user_path_at_empty+0x2c/0x60 [ 104.083012][ T5778] __x64_sys_umount+0xfd/0x180 [ 104.087823][ T5778] do_syscall_64+0x55/0xa0 [ 104.093563][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.099667][ T5778] Modules linked in: [ 104.103624][ T5778] CPU: 1 PID: 5778 Comm: syz-executor Tainted: G B syzkaller #0 [ 104.112684][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.123041][ T5778] Call Trace: [ 104.126357][ T5778] [ 104.129321][ T5778] dump_stack_lvl+0x18c/0x250 [ 104.134060][ T5778] ? show_regs_print_info+0x20/0x20 [ 104.139305][ T5778] ? swiotlb_print_info+0x70/0x70 [ 104.144406][ T5778] bad_page+0x14b/0x170 [ 104.148602][ T5778] free_unref_page_prepare+0x85f/0x8c0 [ 104.154128][ T5778] free_unref_page+0x32/0x2e0 [ 104.158867][ T5778] ? __folio_put+0xef/0x210 [ 104.163425][ T5778] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 104.169906][ T5778] erofs_shrink_workstation+0x11f/0x290 [ 104.175499][ T5778] ? erofs_shrinker_unregister+0x170/0x170 [ 104.181352][ T5778] ? io_schedule+0xd0/0xd0 [ 104.185828][ T5778] ? kobject_put+0x428/0x460 [ 104.190504][ T5778] erofs_shrinker_unregister+0x5d/0x170 [ 104.196099][ T5778] erofs_put_super+0x4e/0x150 [ 104.200834][ T5778] ? erofs_free_inode+0xb0/0xb0 [ 104.205747][ T5778] generic_shutdown_super+0x134/0x2b0 [ 104.211160][ T5778] kill_block_super+0x44/0x90 [ 104.215884][ T5778] erofs_kill_sb+0x4c/0x140 [ 104.220431][ T5778] deactivate_locked_super+0x97/0x100 [ 104.225883][ T5778] cleanup_mnt+0x43b/0x4d0 [ 104.230442][ T5778] task_work_run+0x1d4/0x260 [ 104.235072][ T5778] ? task_work_cancel+0x220/0x220 [ 104.240132][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 104.245618][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 104.250931][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 104.256518][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 104.262020][ T5778] do_syscall_64+0x61/0xa0 [ 104.266473][ T5778] ? clear_bhb_loop+0x40/0x90 [ 104.271178][ T5778] ? clear_bhb_loop+0x40/0x90 [ 104.275969][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.281894][ T5778] RIP: 0033:0x7fea7239d9d7 [ 104.286327][ T5778] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.306050][ T5778] RSP: 002b:00007fff306b80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.314712][ T5778] RAX: 0000000000000000 RBX: 00007fea72432050 RCX: 00007fea7239d9d7 [ 104.322721][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff306b8180 [ 104.330716][ T5778] RBP: 00007fff306b8180 R08: 00007fff306b9180 R09: 00000000ffffffff [ 104.338708][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff306b9210 [ 104.346803][ T5778] R13: 00007fea72432050 R14: 000000000001917c R15: 00007fff306b9250 [ 104.354813][ T5778]