last executing test programs: 2m1.189371668s ago: executing program 4 (id=790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 2m0.943951852s ago: executing program 4 (id=795): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 1m59.09611107s ago: executing program 4 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r1, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) 1m58.681837346s ago: executing program 4 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)="5c8000000000", 0x6}], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x104) truncate(0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe0000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000001ec0)=""/4103) 8.43970886s ago: executing program 3 (id=1247): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x2, 0x558b, &(0x7f00000079c0)="$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") bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[0x0]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000ac0)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$uinput_user_dev(r7, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x47b07c7d, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe04, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) dup(r7) 8.282631402s ago: executing program 0 (id=1249): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d7, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000003070300000000000000040007004000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000002a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) 6.562764569s ago: executing program 1 (id=1254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 6.252921874s ago: executing program 2 (id=1255): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.515557025s ago: executing program 1 (id=1257): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000003c0)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/21], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) r5 = gettid() tkill(r5, 0x12) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x36f}], 0x1}, 0x20000044) 5.274316309s ago: executing program 0 (id=1259): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) mkdir(0x0, 0x101) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[]) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4.258800745s ago: executing program 1 (id=1260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r2, r2, 0x0, 0x6) 3.418691077s ago: executing program 5 (id=1261): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(0x0) close(r0) 1.741070323s ago: executing program 5 (id=1269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.569625826s ago: executing program 2 (id=1270): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 694.81342ms ago: executing program 5 (id=1271): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r2}) 646.74683ms ago: executing program 0 (id=1272): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 565.590051ms ago: executing program 1 (id=1273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffe}}}}}}}, 0x0) 562.918342ms ago: executing program 5 (id=1274): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 392.298554ms ago: executing program 1 (id=1275): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000200000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = openat(0xffffffffffffff9c, 0x0, 0x621c2, 0x0) ftruncate(r2, 0x8800000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) sendfile(r3, r2, 0x0, 0x558410e9) 368.007385ms ago: executing program 5 (id=1276): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 37.77815ms ago: executing program 3 (id=1277): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0xa5e6925171412427, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c000201e9ff7b09b4cc275488018c0d78a98db904000001020d000005240600010524006ddd0d240f01e1080000800000000006241a0400100905810308000300020904010000020d00000904010102020d0000090582020002020000090503021000000f01b3f00de70ea5e26b626cf9ca0dbeadecb6231a4bb6ce60082b7018adaacc51d3ddba40a62d1f704208050fac09609348e05d7e0fed02648b6eba55d1c7b94a47468d55ed3bde5b9aaa1e20fa24d9d420a639c19c2f345605104985e074"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 0s ago: executing program 1 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r1, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) kernel console output (not intermixed with test programs): parsing attributes in process `syz.1.372'. [ 126.699131][ T5391] loop1: detected capacity change from 0 to 512 [ 126.721846][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.754666][ T5397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.766125][ T5391] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.372: casefold flag without casefold feature [ 126.808663][ T5391] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.372: couldn't read orphan inode 15 (err -117) [ 126.856317][ T5391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.875799][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.928919][ T5397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 127.671852][ T4256] EXT4-fs (loop1): unmounting filesystem. [ 127.796962][ T5412] sd 0:0:1:0: device reset [ 129.039286][ T5433] loop4: detected capacity change from 0 to 1024 [ 129.053284][ T5433] EXT4-fs: Invalid want_extra_isize 0 [ 129.378904][ T5451] sd 0:0:1:0: device reset [ 129.468485][ T5453] siw: device registration error -23 [ 130.206468][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.226424][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.247386][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.266508][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.522107][ T5463] syz.0.398[5463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.524354][ T5463] syz.0.398[5463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.790773][ T26] audit: type=1326 audit(1749696135.312:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.023669][ T26] audit: type=1326 audit(1749696135.322:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.125177][ T26] audit: type=1326 audit(1749696135.372:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.240676][ T26] audit: type=1326 audit(1749696135.382:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.275984][ T5472] loop1: detected capacity change from 0 to 1024 [ 131.306428][ T5472] EXT4-fs: Invalid want_extra_isize 0 [ 131.312919][ T26] audit: type=1326 audit(1749696135.382:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.312959][ T26] audit: type=1326 audit(1749696135.402:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.312989][ T26] audit: type=1326 audit(1749696135.402:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.313019][ T26] audit: type=1326 audit(1749696135.412:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.313050][ T26] audit: type=1326 audit(1749696135.422:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.313080][ T26] audit: type=1326 audit(1749696135.422:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 131.919247][ T5488] sd 0:0:1:0: device reset [ 132.170840][ T5495] siw: device registration error -23 [ 132.245124][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 132.337880][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 132.593485][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606433][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.696366][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 132.730899][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 132.866288][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 133.194006][ T5507] siw: device registration error -23 [ 133.931864][ T5513] loop4: detected capacity change from 0 to 1024 [ 133.940174][ T5513] EXT4-fs: Invalid want_extra_isize 0 [ 133.946303][ T5514] syz.1.417[5514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.946396][ T5514] syz.1.417[5514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.139071][ T5519] loop3: detected capacity change from 0 to 512 [ 134.328827][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 134.329961][ T5519] EXT4-fs (loop3): too many log groups per flexible block group [ 134.352453][ T5519] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 134.359520][ T5519] EXT4-fs (loop3): mount failed [ 134.437925][ T5532] siw: device registration error -23 [ 135.981854][ T5549] siw: device registration error -23 [ 136.771885][ T5554] loop1: detected capacity change from 0 to 1024 [ 136.778999][ T5554] EXT4-fs: Invalid want_extra_isize 0 [ 136.888340][ T5563] __nla_validate_parse: 1 callbacks suppressed [ 136.888354][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 136.941500][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 137.066572][ T5571] loop0: detected capacity change from 0 to 1024 [ 137.175900][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 137.227654][ T5571] EXT4-fs: Ignoring removed nobh option [ 137.271336][ T5571] EXT4-fs: Ignoring removed bh option [ 137.559095][ T5571] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.905049][ T5571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.246173][ T5593] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.437: Allocating blocks 497-513 which overlap fs metadata [ 138.340027][ T5596] siw: device registration error -23 [ 139.051998][ T4243] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.222324][ T4243] usb 5-1: device descriptor read/64, error -71 [ 139.344045][ T5604] siw: device registration error -23 [ 140.493998][ T5605] siw: device registration error -23 [ 140.591050][ T5610] loop2: detected capacity change from 0 to 1024 [ 140.598128][ T5610] EXT4-fs: Invalid want_extra_isize 0 [ 140.620366][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 140.630734][ T4243] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.676495][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 140.700043][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 140.783035][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 140.800768][ T4243] usb 5-1: device descriptor read/64, error -71 [ 140.921621][ T4243] usb usb5-port1: attempt power cycle [ 141.372821][ T5632] siw: device registration error -23 [ 142.519453][ T5624] wÞ£ÿ (5624) used greatest stack depth: 18176 bytes left [ 142.577018][ T5642] loop3: detected capacity change from 0 to 1024 [ 142.606469][ T5642] EXT4-fs: Invalid want_extra_isize 0 [ 142.763799][ T5647] siw: device registration error -23 [ 143.299113][ T5646] loop4: detected capacity change from 0 to 1024 [ 143.332040][ T5646] EXT4-fs: Ignoring removed nobh option [ 143.392227][ T5646] EXT4-fs: Ignoring removed bh option [ 143.457936][ T5646] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.493877][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 143.518848][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 143.564923][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 143.580133][ T5646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.029530][ T5675] siw: device registration error -23 [ 144.156294][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 144.835037][ T5681] loop2: detected capacity change from 0 to 1024 [ 144.843145][ T5681] EXT4-fs: Invalid want_extra_isize 0 [ 144.892531][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 145.197945][ T5693] siw: device registration error -23 [ 145.939091][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 145.976912][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 146.225212][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 147.021585][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 147.109888][ T5722] loop4: detected capacity change from 0 to 1024 [ 147.139087][ T5722] EXT4-fs: Invalid want_extra_isize 0 [ 147.165741][ T5725] loop3: detected capacity change from 0 to 1024 [ 147.207962][ T5725] EXT4-fs: Ignoring removed nobh option [ 147.233349][ T5725] EXT4-fs: Ignoring removed bh option [ 147.319987][ T5725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.424465][ T5737] netlink: 'syz.1.495': attribute type 4 has an invalid length. [ 147.490016][ T5725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.515600][ T5741] siw: device registration error -23 [ 148.188027][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 148.248007][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 148.370030][ T5751] loop4: detected capacity change from 0 to 512 [ 148.410992][ T5751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.475010][ T5751] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.498: bad orphan inode 17 [ 148.526346][ T5751] EXT4-fs (loop4): Remounting filesystem read-only [ 148.573644][ T5751] ext4_test_bit(bit=16, block=4) = 1 [ 148.602062][ T5751] is_bad_inode(inode)=0 [ 148.606737][ T5751] NEXT_ORPHAN(inode)=2147418128 [ 148.611710][ T5751] max_ino=32 [ 148.615008][ T5751] i_nlink=0 [ 148.618720][ T5751] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 148.632435][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.733371][ T5760] siw: device registration error -23 [ 149.133783][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 149.448365][ T5762] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.609053][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 150.111495][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 150.284487][ T5792] siw: device registration error -23 [ 150.961825][ T5801] device syzkaller1 entered promiscuous mode [ 151.049744][ T5805] sd 0:0:1:0: device reset [ 151.333942][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 151.893497][ T5831] siw: device registration error -23 [ 152.464268][ T5833] sd 0:0:1:0: device reset [ 152.494312][ T5835] device bond0 entered promiscuous mode [ 152.534094][ T5835] device bond_slave_0 entered promiscuous mode [ 152.561540][ T5835] device bond_slave_1 entered promiscuous mode [ 152.944162][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 153.205742][ T5870] sd 0:0:1:0: device reset [ 153.505097][ T5871] siw: device registration error -23 [ 153.578824][ T5877] siw: device registration error -23 [ 154.299940][ T5884] netlink: 'syz.2.547': attribute type 3 has an invalid length. [ 154.890031][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 154.999282][ T5902] sd 0:0:1:0: device reset [ 155.586601][ T5916] siw: device registration error -23 [ 156.249650][ T5919] loop3: detected capacity change from 0 to 1024 [ 156.281536][ T5919] EXT4-fs: Ignoring removed nobh option [ 156.287171][ T5919] EXT4-fs: Ignoring removed bh option [ 156.311364][ T5919] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.336625][ T5923] netlink: 'syz.1.561': attribute type 3 has an invalid length. [ 156.428071][ T5919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.443098][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 156.443112][ T26] audit: type=1326 audit(1749696160.982:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 156.510791][ T26] audit: type=1326 audit(1749696161.002:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 156.621238][ T26] audit: type=1326 audit(1749696161.002:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 156.703658][ T5940] sd 0:0:1:0: device reset [ 156.736263][ T26] audit: type=1326 audit(1749696161.002:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 156.820491][ T5941] siw: device registration error -23 [ 156.844799][ T5918] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.560: Allocating blocks 497-513 which overlap fs metadata [ 156.866447][ T26] audit: type=1326 audit(1749696161.002:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 156.922521][ T26] audit: type=1326 audit(1749696161.002:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 156.966628][ T5918] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.560: Allocating blocks 497-513 which overlap fs metadata [ 156.990797][ T26] audit: type=1326 audit(1749696161.012:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 157.048856][ T26] audit: type=1326 audit(1749696161.012:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 157.101478][ T26] audit: type=1326 audit(1749696161.012:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 157.171342][ T26] audit: type=1326 audit(1749696161.012:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 157.219741][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 157.628772][ T5957] siw: device registration error -23 [ 158.365430][ T5964] netlink: 'syz.2.576': attribute type 3 has an invalid length. [ 158.486341][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 158.713866][ T5979] loop2: detected capacity change from 0 to 1024 [ 158.742078][ T5979] EXT4-fs: Ignoring removed nobh option [ 158.747671][ T5979] EXT4-fs: Ignoring removed bh option [ 158.793575][ T5979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.918327][ T5979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.179110][ T5982] program syz.0.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.202077][ T5982] netlink: 'syz.0.583': attribute type 11 has an invalid length. [ 159.220246][ T5982] netlink: 448 bytes leftover after parsing attributes in process `syz.0.583'. [ 159.683047][ T5994] siw: device registration error -23 [ 160.222689][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 160.675366][ T6007] siw: device registration error -23 [ 161.680202][ T6015] siw: device registration error -23 [ 162.186512][ T6021] netlink: 'syz.3.593': attribute type 3 has an invalid length. [ 162.542810][ T6033] loop3: detected capacity change from 0 to 1024 [ 162.570525][ T6033] EXT4-fs: Ignoring removed nobh option [ 162.595595][ T6033] EXT4-fs: Ignoring removed bh option [ 162.618807][ T6033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.697870][ T6033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.741453][ T6031] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.597: Allocating blocks 497-513 which overlap fs metadata [ 162.802052][ T6031] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.597: Allocating blocks 497-513 which overlap fs metadata [ 162.843609][ T6037] EXT4-fs (loop3): pa ffff8880738268c0: logic 0, phys. 113, len 25 [ 162.852175][ T6037] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 23, pa_free 24 [ 163.037483][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 163.545530][ T5981] lo speed is unknown, defaulting to 1000 [ 164.014485][ T6055] siw: device registration error -23 [ 164.896282][ T6063] sd 0:0:1:0: device reset [ 164.999405][ T6066] siw: device registration error -23 [ 166.282481][ T6085] siw: device registration error -23 [ 167.785375][ T6105] siw: device registration error -23 [ 168.507303][ T6110] sd 0:0:1:0: device reset [ 168.941539][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 168.941552][ T26] audit: type=1326 audit(1749696173.482:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 168.996392][ T26] audit: type=1326 audit(1749696173.512:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.037325][ T26] audit: type=1326 audit(1749696173.512:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.082052][ T26] audit: type=1326 audit(1749696173.512:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.130092][ T26] audit: type=1326 audit(1749696173.512:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.177798][ T26] audit: type=1326 audit(1749696173.512:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.177838][ T26] audit: type=1326 audit(1749696173.512:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.177868][ T26] audit: type=1326 audit(1749696173.512:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.178927][ T26] audit: type=1326 audit(1749696173.542:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.178960][ T26] audit: type=1326 audit(1749696173.542:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 169.777289][ T6135] loop3: detected capacity change from 0 to 512 [ 169.785601][ T6135] EXT4-fs: Ignoring removed nobh option [ 169.823717][ T6135] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.836726][ T6135] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 169.847988][ T6135] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.632: Corrupt directory, running e2fsck is recommended [ 169.881000][ T6135] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 169.890433][ T6135] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.632: corrupted in-inode xattr [ 169.907947][ T6135] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.632: couldn't read orphan inode 15 (err -117) [ 169.928129][ T6135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.957682][ T6135] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.971923][ T6135] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 169.982439][ T6135] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.632: Corrupt directory, running e2fsck is recommended [ 169.996452][ T6139] netlink: 'syz.4.633': attribute type 3 has an invalid length. [ 170.008528][ T6135] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.020146][ T6135] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 170.038884][ T6135] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.632: Corrupt directory, running e2fsck is recommended [ 170.065054][ T6140] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.078749][ T6140] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 170.090235][ T6140] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.632: Corrupt directory, running e2fsck is recommended [ 170.126099][ T6135] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.307944][ T6135] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.632: path /127/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 170.342534][ T6135] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 8: comm syz.3.632: path /127/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 171.108991][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 172.467480][ T6159] loop4: detected capacity change from 0 to 512 [ 172.510552][ T6159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 172.531279][ T6159] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.573567][ T6159] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 172.656405][ T6159] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 172.666869][ T6159] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.639: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 172.713911][ T6159] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.639: couldn't read orphan inode 13 (err -117) [ 172.745567][ T6159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.765402][ T6163] siw: device registration error -23 [ 172.777691][ T6159] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.639: inode #15: comm syz.4.639: iget: illegal inode # [ 172.815086][ T6159] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 172.836094][ T6159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 172.867176][ T6159] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 172.968930][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 173.064429][ T6171] netlink: 'syz.0.644': attribute type 3 has an invalid length. [ 173.099819][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 174.600841][ T6185] siw: device registration error -23 [ 176.619125][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 176.619137][ T26] audit: type=1326 audit(1749696181.152:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.683171][ T26] audit: type=1326 audit(1749696181.152:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.747335][ T26] audit: type=1326 audit(1749696181.192:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.800964][ T26] audit: type=1326 audit(1749696181.192:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.801000][ T26] audit: type=1326 audit(1749696181.192:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.801026][ T26] audit: type=1326 audit(1749696181.192:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.801052][ T26] audit: type=1326 audit(1749696181.192:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.801077][ T26] audit: type=1326 audit(1749696181.222:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.801103][ T26] audit: type=1326 audit(1749696181.282:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 176.801129][ T26] audit: type=1326 audit(1749696181.282:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadad3c11e5 code=0x7ffc0000 [ 176.992407][ T6215] netlink: 'syz.4.657': attribute type 3 has an invalid length. [ 177.026532][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.110185][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.149916][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 177.482811][ T6226] netlink: 68 bytes leftover after parsing attributes in process `syz.1.662'. [ 177.498318][ T6226] usb usb2: usbfs: interface 0 claimed by hub while 'syz.1.662' sets config #0 [ 178.265183][ T6245] netlink: 'syz.4.670': attribute type 3 has an invalid length. [ 178.452668][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 179.334019][ T6256] loop1: detected capacity change from 0 to 1024 [ 179.340521][ T6258] lo speed is unknown, defaulting to 1000 [ 179.357376][ T6256] EXT4-fs: Invalid want_extra_isize 0 [ 179.937559][ T6271] siw: device registration error -23 [ 180.257721][ T6272] siw: device registration error -23 [ 180.639293][ T6293] loop1: detected capacity change from 0 to 1024 [ 180.646991][ T6293] EXT4-fs: Invalid want_extra_isize 0 [ 181.540096][ T6312] siw: device registration error -23 [ 182.936754][ T6323] siw: device registration error -23 [ 183.712133][ T6334] loop3: detected capacity change from 0 to 1024 [ 183.727432][ T6334] EXT4-fs: Invalid want_extra_isize 0 [ 183.906599][ T6340] sd 0:0:1:0: device reset [ 184.652081][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 184.855128][ T6351] Falling back ldisc for ttyS3. [ 185.689484][ T6357] siw: device registration error -23 [ 185.870747][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 185.876858][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 185.883011][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 185.889018][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 186.237538][ T4693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.412613][ T4693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.425573][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 186.425586][ T26] audit: type=1326 audit(1749696190.972:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 186.535271][ T26] audit: type=1326 audit(1749696191.002:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 186.546656][ T4693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.613062][ T26] audit: type=1326 audit(1749696191.002:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2947f8e929 code=0x7ffc0000 [ 186.723693][ T4693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.911590][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.921777][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.929728][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.938334][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.947108][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.955173][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.000451][ T6394] siw: device registration error -23 [ 187.028775][ T6395] lo speed is unknown, defaulting to 1000 [ 187.182107][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 187.264652][ T6401] netlink: 72 bytes leftover after parsing attributes in process `syz.0.729'. [ 187.297355][ T6403] netlink: 72 bytes leftover after parsing attributes in process `syz.0.729'. [ 187.697432][ T6395] chnl_net:caif_netlink_parms(): no params data found [ 187.717277][ T6412] loop2: detected capacity change from 0 to 1024 [ 187.724516][ T6412] EXT4-fs: Ignoring removed nobh option [ 187.730345][ T6412] EXT4-fs: Ignoring removed bh option [ 187.739500][ T6413] siw: device registration error -23 [ 187.746523][ T6412] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.846543][ T6412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.920229][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.932051][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.960305][ T6395] device bridge_slave_0 entered promiscuous mode [ 188.046184][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.057782][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.086513][ T6395] device bridge_slave_1 entered promiscuous mode [ 188.191199][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.216589][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.624324][ T6395] team0: Port device team_slave_0 added [ 188.715096][ T6395] team0: Port device team_slave_1 added [ 188.888039][ T6444] netlink: 72 bytes leftover after parsing attributes in process `syz.4.741'. [ 188.900299][ T6448] netlink: 72 bytes leftover after parsing attributes in process `syz.4.741'. [ 188.916747][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 188.943550][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.967329][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.995089][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 189.022911][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.197446][ T4693] device hsr_slave_0 left promiscuous mode [ 189.239292][ T4693] device hsr_slave_1 left promiscuous mode [ 189.277150][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.321067][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.353220][ T6447] siw: device registration error -23 [ 189.376371][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.420765][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.445052][ T4693] device bridge_slave_1 left promiscuous mode [ 189.453002][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.473413][ T4693] device bridge_slave_0 left promiscuous mode [ 189.480676][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.527154][ T4693] device veth1_macvtap left promiscuous mode [ 189.534323][ T4693] device veth0_macvtap left promiscuous mode [ 189.549156][ T4693] device veth1_vlan left promiscuous mode [ 189.555717][ T4693] device veth0_vlan left promiscuous mode [ 189.869500][ T6470] siw: device registration error -23 [ 190.136537][ T6476] loop2: detected capacity change from 0 to 1024 [ 190.145649][ T6476] EXT4-fs: Ignoring removed nobh option [ 190.151769][ T6476] EXT4-fs: Ignoring removed bh option [ 190.157832][ T6476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.213069][ T6476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.740030][ T6475] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.754: Allocating blocks 497-513 which overlap fs metadata [ 190.773215][ T6475] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.754: Allocating blocks 497-513 which overlap fs metadata [ 190.860807][ T6474] EXT4-fs (loop2): pa ffff888055e7bb60: logic 604, phys. 353, len 10 [ 190.869449][ T6474] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 190.962099][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 191.009321][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 191.070909][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 191.077999][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.133757][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 191.258930][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.379273][ T6495] siw: device registration error -23 [ 191.625662][ T6504] 9pnet_fd: Insufficient options for proto=fd [ 191.792928][ T6510] siw: device registration error -23 [ 192.565520][ T4693] bond0 (unregistering): Released all slaves [ 192.744095][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.760474][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.804347][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.888747][ T6395] device hsr_slave_0 entered promiscuous mode [ 192.895760][ T6395] device hsr_slave_1 entered promiscuous mode [ 192.902702][ T6395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.916177][ T6395] Cannot create hsr debugfs directory [ 192.922520][ T6480] netlink: 72 bytes leftover after parsing attributes in process `syz.4.755'. [ 192.931618][ T6482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.755'. [ 192.942845][ T6520] siw: device registration error -23 [ 193.150947][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 193.380422][ T6529] loop3: detected capacity change from 0 to 1024 [ 193.428434][ T6529] EXT4-fs: Ignoring removed nobh option [ 193.483753][ T6529] EXT4-fs: Ignoring removed bh option [ 193.538254][ T6529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.730491][ T6529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.959889][ T6543] siw: device registration error -23 [ 193.967435][ T6395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.991157][ T6395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.019163][ T6395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.035490][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.044146][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.083999][ T6395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.197132][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.232503][ T6549] netlink: 72 bytes leftover after parsing attributes in process `syz.2.780'. [ 194.246726][ T6552] netlink: 72 bytes leftover after parsing attributes in process `syz.2.780'. [ 194.270163][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.514889][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.642666][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.795920][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.882207][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.994118][ T4892] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.001298][ T4892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.009685][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.046377][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.067696][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.078353][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.085536][ T4925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.097064][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.113087][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.166886][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.185609][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 195.217132][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.230888][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 195.278221][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.317277][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.338779][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.347120][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.356714][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.503699][ T6395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.529439][ T6568] siw: device registration error -23 [ 195.591470][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.631333][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.645888][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.732791][ T6582] siw: device registration error -23 [ 195.816275][ T6578] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.034633][ T6591] loop4: detected capacity change from 0 to 1024 [ 196.047586][ T6591] EXT4-fs: Ignoring removed nobh option [ 196.492185][ T6591] EXT4-fs: Ignoring removed bh option [ 196.617186][ T6591] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.758009][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.771750][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.804688][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.863141][ T6591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.929320][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.964439][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.043795][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.058673][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.095370][ T6395] device veth0_vlan entered promiscuous mode [ 197.102769][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.119602][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.134896][ T6395] device veth1_vlan entered promiscuous mode [ 197.256342][ T6395] device veth0_macvtap entered promiscuous mode [ 197.300263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.327383][ T6615] siw: device registration error -23 [ 197.329167][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.422139][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.444617][ T6395] device veth1_macvtap entered promiscuous mode [ 197.463494][ T6620] IPv6: Can't replace route, no match found [ 197.502139][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.518615][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.569161][ T6623] loop3: detected capacity change from 0 to 8192 [ 197.579026][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.597850][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.630848][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.658479][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.677242][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.688515][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.702132][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.712773][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.723260][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.733113][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.743670][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.753548][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.764647][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.774786][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.785390][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.798495][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.799799][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 197.844696][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.861987][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.893745][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.894383][ T6629] siw: device registration error -23 [ 197.908551][ T26] audit: type=1326 audit(1749696202.442:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 197.912587][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.959365][ T26] audit: type=1326 audit(1749696202.442:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 197.998698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.032347][ T6395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.051223][ T26] audit: type=1326 audit(1749696202.442:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 198.081613][ T6395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.090355][ T6395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.130712][ T6395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.135104][ T26] audit: type=1326 audit(1749696202.442:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 198.309350][ T4925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.327816][ T4925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.341936][ T26] audit: type=1326 audit(1749696202.442:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 198.364469][ T6636] Falling back ldisc for ttyS3. [ 198.366673][ T26] audit: type=1326 audit(1749696202.442:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 198.392239][ T26] audit: type=1326 audit(1749696202.442:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 198.417495][ T26] audit: type=1326 audit(1749696202.442:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 198.690862][ T26] audit: type=1326 audit(1749696202.442:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 199.038793][ T26] audit: type=1326 audit(1749696202.442:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 199.094204][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.128760][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.190781][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.205104][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.272305][ T6647] loop4: detected capacity change from 0 to 512 [ 199.359561][ T6647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.369058][ T6647] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.640883][ T4254] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /162/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 199.663352][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 199.721849][ T6662] siw: device registration error -23 [ 199.822488][ T6666] loop3: detected capacity change from 0 to 1024 [ 199.829637][ T6666] EXT4-fs: Ignoring removed nobh option [ 199.836817][ T6666] EXT4-fs: Ignoring removed bh option [ 199.854321][ T6666] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.929758][ T953] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 199.954847][ T6666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 199.996593][ T953] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.027688][ T6668] loop1: detected capacity change from 0 to 1024 [ 200.048323][ T6668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.122256][ T6668] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.175126][ T6668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.226345][ T6668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.510141][ T6395] EXT4-fs (loop1): unmounting filesystem. [ 200.616123][ T6682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.823'. [ 200.644505][ T6682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.823'. [ 200.712248][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 200.996889][ T6695] loop1: detected capacity change from 0 to 512 [ 201.046108][ T6695] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.830: casefold flag without casefold feature [ 201.072800][ T6695] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.830: couldn't read orphan inode 15 (err -117) [ 201.140983][ T6695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.413712][ T6395] EXT4-fs (loop1): unmounting filesystem. [ 201.425491][ T6706] siw: device registration error -23 [ 201.635736][ T6709] loop1: detected capacity change from 0 to 1024 [ 201.666345][ T6709] EXT4-fs: Ignoring removed nobh option [ 201.704028][ T6709] EXT4-fs: Ignoring removed bh option [ 201.734364][ T6709] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.817505][ T6715] netlink: 27 bytes leftover after parsing attributes in process `syz.3.837'. [ 201.833663][ T6709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.975357][ T6720] netlink: 72 bytes leftover after parsing attributes in process `syz.2.838'. [ 202.072280][ T6720] netlink: 72 bytes leftover after parsing attributes in process `syz.2.838'. [ 202.111827][ T6722] loop3: detected capacity change from 0 to 2048 [ 202.369420][ T6708] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.835: Allocating blocks 497-513 which overlap fs metadata [ 202.427009][ T6708] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.835: Allocating blocks 497-513 which overlap fs metadata [ 202.711000][ T6708] EXT4-fs (loop1): pa ffff888055e7b380: logic 568, phys. 321, len 12 [ 202.719534][ T6708] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 202.851501][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 203.537265][ T6395] EXT4-fs (loop1): unmounting filesystem. [ 203.729922][ T6744] syz.2.848 uses obsolete (PF_INET,SOCK_PACKET) [ 203.889451][ T6752] loop1: detected capacity change from 0 to 1024 [ 203.918501][ T6749] siw: device registration error -23 [ 203.919613][ T6752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 204.123211][ T6756] lo speed is unknown, defaulting to 1000 [ 204.454700][ T6758] loop3: detected capacity change from 0 to 1764 [ 204.666243][ T6758] ISOFS: Unable to identify CD-ROM format. [ 204.718263][ T6762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.851'. [ 204.730573][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 204.730589][ T26] audit: type=1804 audit(1749696209.272:631): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.846" name="/newroot/8/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 204.732483][ T6762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.851'. [ 204.968888][ T6395] EXT4-fs (loop1): unmounting filesystem. [ 205.334578][ T6778] loop3: detected capacity change from 0 to 1024 [ 205.341254][ T6771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.480272][ T6778] EXT4-fs: Ignoring removed nobh option [ 205.508073][ T6778] EXT4-fs: Ignoring removed bh option [ 205.556060][ T6778] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.757913][ T6778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.124186][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 207.347207][ T6791] siw: device registration error -23 [ 207.568817][ T6802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.863'. [ 207.634437][ T6800] siw: device registration error -23 [ 207.651646][ T6802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.863'. [ 207.987208][ T6807] siw: device registration error -23 [ 208.581428][ T26] audit: type=1800 audit(1749696213.122:632): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.856" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 208.726703][ T6810] loop2: detected capacity change from 0 to 512 [ 208.797789][ T6810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.836285][ T6810] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.865: bad orphan inode 17 [ 208.846858][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 208.867314][ T6810] EXT4-fs (loop2): Remounting filesystem read-only [ 208.868875][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 208.891945][ T6810] ext4_test_bit(bit=16, block=4) = 1 [ 208.897304][ T6810] is_bad_inode(inode)=0 [ 208.960798][ T6810] NEXT_ORPHAN(inode)=2147418128 [ 208.965701][ T6810] max_ino=32 [ 208.968897][ T6810] i_nlink=0 [ 208.973417][ T6810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.161721][ T6825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.276798][ T6829] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 209.283375][ T6829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.300120][ T6829] vhci_hcd vhci_hcd.0: Device attached [ 209.324641][ T6830] vhci_hcd: connection closed [ 209.324975][ T6740] vhci_hcd: stop threads [ 209.364994][ T6740] vhci_hcd: release socket [ 209.378412][ T6740] vhci_hcd: disconnect device [ 210.500843][ T6840] netlink: 72 bytes leftover after parsing attributes in process `syz.0.875'. [ 210.539125][ T6840] netlink: 72 bytes leftover after parsing attributes in process `syz.0.875'. [ 210.738981][ T6847] siw: device registration error -23 [ 210.795611][ T6786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 211.019442][ T6786] EXT4-fs (loop2): Remounting filesystem read-only [ 211.422952][ T6849] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 211.561752][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 211.803989][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 212.240248][ T6872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 212.246824][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.286448][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 212.317260][ T6875] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 212.323843][ T6875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.343106][ T6872] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 212.349689][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.358394][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 212.367045][ T6875] vhci_hcd vhci_hcd.0: Device attached [ 212.377450][ T26] audit: type=1326 audit(1749696216.922:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.400179][ T26] audit: type=1326 audit(1749696216.922:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.422961][ T6872] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 212.429579][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.449524][ T26] audit: type=1326 audit(1749696216.922:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.476050][ T6884] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.484522][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 212.491854][ T26] audit: type=1326 audit(1749696216.922:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.514724][ T26] audit: type=1326 audit(1749696216.922:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.537185][ T6875] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(7) [ 212.543722][ T6875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.561450][ T6872] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(12) [ 212.568099][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.596342][ T6875] vhci_hcd vhci_hcd.0: Device attached [ 212.604889][ T26] audit: type=1326 audit(1749696216.922:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.605353][ T6890] netlink: 72 bytes leftover after parsing attributes in process `syz.2.888'. [ 212.640857][ T14] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 212.650774][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 212.672932][ T6885] vhci_hcd: connection closed [ 212.674137][ T4693] vhci_hcd: stop threads [ 212.688554][ T6882] vhci_hcd: connection closed [ 212.688635][ T6878] vhci_hcd: connection closed [ 212.694594][ T6876] vhci_hcd: connection closed [ 212.698525][ T4693] vhci_hcd: release socket [ 212.699362][ T6873] vhci_hcd: connection reset by peer [ 212.708787][ T26] audit: type=1326 audit(1749696216.922:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 212.715603][ T6886] vhci_hcd: connection closed [ 212.752530][ T4693] vhci_hcd: disconnect device [ 212.767795][ T6890] netlink: 72 bytes leftover after parsing attributes in process `syz.2.888'. [ 212.786687][ T4693] vhci_hcd: stop threads [ 212.791024][ T4693] vhci_hcd: release socket [ 212.817019][ T4693] vhci_hcd: disconnect device [ 212.822008][ T26] audit: type=1326 audit(1749696216.922:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.849447][ T4693] vhci_hcd: stop threads [ 212.856490][ T4693] vhci_hcd: release socket [ 212.866653][ T4693] vhci_hcd: disconnect device [ 212.880748][ T4693] vhci_hcd: stop threads [ 212.885035][ T4693] vhci_hcd: release socket [ 212.897016][ T26] audit: type=1326 audit(1749696216.982:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 212.909487][ T4693] vhci_hcd: disconnect device [ 212.931851][ T26] audit: type=1326 audit(1749696217.292:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 212.956141][ T4693] vhci_hcd: stop threads [ 212.961681][ T4693] vhci_hcd: release socket [ 213.042415][ T4693] vhci_hcd: disconnect device [ 213.074524][ T4693] vhci_hcd: stop threads [ 213.089173][ T4693] vhci_hcd: release socket [ 213.109562][ T4693] vhci_hcd: disconnect device [ 213.182794][ T6898] siw: device registration error -23 [ 214.468884][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 215.295980][ T6931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 215.302562][ T6931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.326190][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.336252][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.345612][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.353828][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.362669][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.370022][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.384573][ T6931] vhci_hcd vhci_hcd.0: Device attached [ 215.407977][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 215.410756][ T6935] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 215.420254][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.453854][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 215.486783][ T6931] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 215.493339][ T6931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.501538][ T6931] vhci_hcd vhci_hcd.0: Device attached [ 215.535546][ T6935] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 215.538182][ T6016] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.542099][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.542448][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 215.591980][ T6931] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(10) [ 215.598633][ T6931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.612244][ T6930] lo speed is unknown, defaulting to 1000 [ 215.620779][ T6931] vhci_hcd vhci_hcd.0: Device attached [ 215.661843][ T6931] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 215.671038][ T953] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 215.720733][ T6931] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 215.721650][ T6016] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.727360][ T6931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 215.740779][ T6931] vhci_hcd vhci_hcd.0: Device attached [ 215.767065][ T6942] vhci_hcd: connection closed [ 215.767281][ T9] vhci_hcd: stop threads [ 215.771075][ T6940] vhci_hcd: connection closed [ 215.776566][ T6938] vhci_hcd: connection closed [ 215.777508][ T6936] vhci_hcd: connection closed [ 215.781879][ T9] vhci_hcd: release socket [ 215.795624][ T6932] vhci_hcd: connection reset by peer [ 215.799572][ T6947] vhci_hcd: connection closed [ 215.829765][ T9] vhci_hcd: disconnect device [ 215.840225][ T9] vhci_hcd: stop threads [ 215.854468][ T6945] lo speed is unknown, defaulting to 1000 [ 215.860378][ T9] vhci_hcd: release socket [ 215.870517][ T9] vhci_hcd: disconnect device [ 215.884812][ T9] vhci_hcd: stop threads [ 215.889113][ T9] vhci_hcd: release socket [ 215.900989][ T9] vhci_hcd: disconnect device [ 215.906878][ T9] vhci_hcd: stop threads [ 215.914675][ T9] vhci_hcd: release socket [ 215.925215][ T9] vhci_hcd: disconnect device [ 215.946084][ T9] vhci_hcd: stop threads [ 215.950383][ T9] vhci_hcd: release socket [ 215.990199][ T9] vhci_hcd: disconnect device [ 216.020495][ T6016] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.038673][ T9] vhci_hcd: stop threads [ 216.047853][ T9] vhci_hcd: release socket [ 216.069192][ T9] vhci_hcd: disconnect device [ 216.152525][ T6016] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.164832][ T6955] siw: device registration error -23 [ 216.190365][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 216.319462][ T6962] loop2: detected capacity change from 0 to 512 [ 216.377191][ T6962] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 216.377913][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.392335][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.400707][ T6930] device bridge_slave_0 entered promiscuous mode [ 216.403129][ T6962] System zones: [ 216.409682][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.420847][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.425091][ T6962] 0-2 [ 216.435062][ T6930] device bridge_slave_1 entered promiscuous mode [ 216.438385][ T6962] , 18-18, 34-34 [ 216.494250][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.494482][ T6962] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.907: corrupted inode contents [ 216.511556][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.602074][ T6962] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #3: comm syz.2.907: mark_inode_dirty error [ 216.637059][ T6962] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.907: corrupted inode contents [ 216.642167][ T6930] team0: Port device team_slave_0 added [ 216.661408][ T6930] team0: Port device team_slave_1 added [ 216.692452][ T6962] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.907: mark_inode_dirty error [ 216.851344][ T6962] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.907: Failed to acquire dquot type 0 [ 216.869530][ T6962] EXT4-fs (loop2): 1 orphan inode deleted [ 216.872362][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.875578][ T6962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.897153][ T6740] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:18: Failed to release dquot type 1 [ 216.910235][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.936979][ T6962] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.966733][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.008036][ T6962] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.907: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 217.035544][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.050698][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.120700][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.155158][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 217.334099][ T6930] device hsr_slave_0 entered promiscuous mode [ 217.364501][ T6930] device hsr_slave_1 entered promiscuous mode [ 217.386858][ T6930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.394795][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 217.403075][ T6930] Cannot create hsr debugfs directory [ 217.736499][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 217.736514][ T26] audit: type=1326 audit(1749696222.272:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 217.790721][ T26] audit: type=1326 audit(1749696222.302:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 217.790751][ T14] vhci_hcd: vhci_device speed not set [ 217.875454][ T26] audit: type=1326 audit(1749696222.372:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 218.037328][ T26] audit: type=1326 audit(1749696222.372:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 219.705371][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 219.924387][ T26] audit: type=1326 audit(1749696222.372:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 219.970823][ T26] audit: type=1326 audit(1749696222.372:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 220.023731][ T26] audit: type=1326 audit(1749696222.372:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 220.086721][ T26] audit: type=1326 audit(1749696222.372:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 220.149776][ T26] audit: type=1326 audit(1749696222.372:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 220.210276][ T26] audit: type=1326 audit(1749696222.372:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 220.885058][ T6998] lo speed is unknown, defaulting to 1000 [ 220.947205][ T953] vhci_hcd: vhci_device speed not set [ 221.018963][ T6930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.253801][ T6930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.263927][ T6930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.274974][ T6930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.327211][ T7012] siw: device registration error -23 [ 221.577284][ T6016] device hsr_slave_0 left promiscuous mode [ 221.592257][ T6016] device hsr_slave_1 left promiscuous mode [ 221.609885][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.629463][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.650160][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.674176][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.696414][ T6016] device bridge_slave_1 left promiscuous mode [ 221.724149][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.747716][ T6016] device bridge_slave_0 left promiscuous mode [ 221.765987][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.790918][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 221.840063][ T6016] device veth1_macvtap left promiscuous mode [ 221.898206][ T6016] device veth0_macvtap left promiscuous mode [ 221.904601][ T6016] device veth1_vlan left promiscuous mode [ 221.910480][ T6016] device veth0_vlan left promiscuous mode [ 222.388440][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 223.343388][ T7043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 223.349988][ T7043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.366769][ T7043] vhci_hcd vhci_hcd.0: Device attached [ 223.387213][ T7043] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 223.393767][ T7043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.402539][ T7043] vhci_hcd vhci_hcd.0: Device attached [ 223.410129][ T7043] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 223.416658][ T7043] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.425137][ T7043] vhci_hcd vhci_hcd.0: Device attached [ 223.432643][ T7043] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 223.439169][ T7043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.447164][ T7043] vhci_hcd vhci_hcd.0: Device attached [ 223.453800][ T7043] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.464503][ T7043] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.504569][ T7043] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 223.511205][ T7043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.524111][ T7043] vhci_hcd vhci_hcd.0: Device attached [ 223.533747][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 223.534618][ T7050] vhci_hcd: connection closed [ 223.541311][ T7052] vhci_hcd: connection closed [ 223.547276][ T7048] vhci_hcd: connection closed [ 223.552438][ T7046] vhci_hcd: connection closed [ 223.557171][ T6740] vhci_hcd: stop threads [ 223.565482][ T7044] vhci_hcd: connection closed [ 223.566623][ T6740] vhci_hcd: release socket [ 223.576249][ T6740] vhci_hcd: disconnect device [ 223.583428][ T6740] vhci_hcd: stop threads [ 223.587695][ T6740] vhci_hcd: release socket [ 223.592659][ T6740] vhci_hcd: disconnect device [ 223.598083][ T6740] vhci_hcd: stop threads [ 223.602915][ T6740] vhci_hcd: release socket [ 223.607429][ T6740] vhci_hcd: disconnect device [ 223.613096][ T6740] vhci_hcd: stop threads [ 223.617357][ T6740] vhci_hcd: release socket [ 223.622480][ T6740] vhci_hcd: disconnect device [ 223.623950][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 223.627382][ T6740] vhci_hcd: stop threads [ 223.639942][ T6740] vhci_hcd: release socket [ 223.642601][ T4257] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 223.653423][ T6740] vhci_hcd: disconnect device [ 223.656008][ T4257] usb 39-1: enqueue for inactive port 0 [ 223.688235][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.697601][ T6016] device bond_slave_1 left promiscuous mode [ 223.734161][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.743023][ T4257] vhci_hcd: vhci_device speed not set [ 223.749072][ T6016] device bond_slave_0 left promiscuous mode [ 223.872012][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 224.146849][ T6016] bond0 (unregistering): Released all slaves [ 224.554416][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.635431][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.691961][ T7055] siw: device registration error -23 [ 224.725504][ T6930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.756620][ T6930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.785548][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.793827][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.802713][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.812672][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.821223][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.828340][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.836578][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.845418][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.863016][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.870168][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.885464][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.915347][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.941581][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.958288][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.967489][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.997255][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.026851][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.076250][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.117521][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.167795][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.207082][ T7025] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 225.216630][ T7025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 225.226457][ T7025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.329011][ T126] lo speed is unknown, defaulting to 1000 [ 225.460366][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.491423][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.514392][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.540893][ T7065] lo speed is unknown, defaulting to 1000 [ 225.547319][ T7065] lo speed is unknown, defaulting to 1000 [ 225.554163][ T7065] lo speed is unknown, defaulting to 1000 [ 225.568468][ T7065] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 225.592191][ T7065] lo speed is unknown, defaulting to 1000 [ 225.598899][ T7065] lo speed is unknown, defaulting to 1000 [ 225.605708][ T7065] lo speed is unknown, defaulting to 1000 [ 225.612380][ T7065] lo speed is unknown, defaulting to 1000 [ 225.618991][ T7065] lo speed is unknown, defaulting to 1000 [ 225.625637][ T7065] lo speed is unknown, defaulting to 1000 [ 225.632762][ T7065] lo speed is unknown, defaulting to 1000 [ 225.884838][ T7079] device bridge_slave_0 left promiscuous mode [ 225.925312][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.974406][ T7079] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.097221][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.109431][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.151623][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.335413][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 226.335427][ T26] audit: type=1326 audit(1749696230.872:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 226.399976][ T26] audit: type=1326 audit(1749696230.872:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 226.459399][ T7097] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 226.465968][ T7097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.473719][ T26] audit: type=1326 audit(1749696230.912:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 226.548815][ T26] audit: type=1326 audit(1749696230.912:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 226.567638][ T7097] vhci_hcd vhci_hcd.0: Device attached [ 226.611200][ T26] audit: type=1326 audit(1749696230.912:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 226.645906][ T7101] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 226.652464][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.690863][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 226.746480][ T7105] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 226.753049][ T7105] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.813893][ T7105] vhci_hcd vhci_hcd.0: Device attached [ 226.837827][ T7101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.961662][ T7097] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 226.968223][ T7097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.096144][ T7119] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.163422][ T7097] vhci_hcd vhci_hcd.0: Device attached [ 227.201539][ T7105] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 227.208186][ T7105] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.229017][ T7105] vhci_hcd vhci_hcd.0: Device attached [ 227.235844][ T7121] vhci_hcd: connection closed [ 227.236173][ T7113] vhci_hcd: connection closed [ 227.236470][ T7098] vhci_hcd: connection closed [ 227.241234][ T7109] vhci_hcd: connection closed [ 227.250393][ T7106] vhci_hcd: connection closed [ 227.256727][ T4693] vhci_hcd: stop threads [ 227.280777][ T4301] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 227.287671][ T4693] vhci_hcd: release socket [ 227.293270][ T7099] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 227.305895][ T4693] vhci_hcd: disconnect device [ 227.314243][ T4693] vhci_hcd: stop threads [ 227.318594][ T4693] vhci_hcd: release socket [ 227.353992][ T4693] vhci_hcd: disconnect device [ 227.455822][ T4693] vhci_hcd: stop threads [ 227.498637][ T4693] vhci_hcd: release socket [ 227.560761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.569170][ T4693] vhci_hcd: disconnect device [ 227.582454][ T4693] vhci_hcd: stop threads [ 227.586746][ T4693] vhci_hcd: release socket [ 227.789768][ T7129] siw: device registration error -23 [ 228.806858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.963710][ T4693] vhci_hcd: disconnect device [ 229.071718][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.110485][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.140792][ T4693] vhci_hcd: stop threads [ 229.145111][ T4693] vhci_hcd: release socket [ 229.172647][ T6930] device veth0_vlan entered promiscuous mode [ 229.186712][ T4693] vhci_hcd: disconnect device [ 229.216147][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.235421][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.291048][ T6930] device veth1_vlan entered promiscuous mode [ 229.919543][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.036563][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.193469][ T6930] device veth0_macvtap entered promiscuous mode [ 230.225403][ T6930] device veth1_macvtap entered promiscuous mode [ 230.266257][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.314836][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.344089][ T7151] sd 0:0:1:0: device reset [ 230.366682][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.402044][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.446587][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.489236][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.534805][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.545930][ T953] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 230.596352][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.097993][ T7154] siw: device registration error -23 [ 231.193537][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.211875][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.262104][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.287656][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.298651][ T953] usb 4-1: Using ep0 maxpacket: 32 [ 231.336130][ T953] usb 4-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 231.370034][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.410823][ T953] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 231.416442][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.432578][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.449663][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.463107][ T953] usb 4-1: New USB device found, idVendor=05e6, idProduct=a4a1, bcdDevice= 0.40 [ 231.466657][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.477810][ T953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.500905][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.515788][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.528356][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.539439][ T6930] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.552209][ T6930] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.569626][ T6930] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.578951][ T6930] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.641623][ T7158] siw: device registration error -23 [ 231.741255][ T953] usb 4-1: Product: syz [ 231.745478][ T953] usb 4-1: Manufacturer: syz [ 231.750104][ T953] usb 4-1: SerialNumber: syz [ 231.757086][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.778057][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.864497][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.885719][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.918976][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.934783][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.942227][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.948669][ T7167] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 231.956032][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.963065][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.972199][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 231.983229][ T7167] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 231.989781][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.003249][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 232.654752][ T7167] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 232.661312][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 232.700380][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 232.725242][ T4257] usb 4-1: USB disconnect, device number 2 [ 232.778759][ T7167] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 232.785334][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.817482][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 232.834771][ T7180] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.844250][ T7179] overlayfs: failed to resolve './file1': -2 [ 232.853042][ T7167] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.906312][ T7167] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 232.912976][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.936077][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 232.953348][ T7181] vhci_hcd: connection closed [ 232.953517][ T7176] vhci_hcd: connection closed [ 232.956516][ T7173] vhci_hcd: connection closed [ 232.963123][ T7170] vhci_hcd: connection closed [ 232.967975][ T7168] vhci_hcd: connection reset by peer [ 232.982696][ T4494] vhci_hcd: stop threads [ 232.992035][ T4494] vhci_hcd: release socket [ 233.000951][ T4494] vhci_hcd: disconnect device [ 233.007882][ T4494] vhci_hcd: stop threads [ 233.034844][ T4494] vhci_hcd: release socket [ 233.045882][ T4494] vhci_hcd: disconnect device [ 233.098490][ T4494] vhci_hcd: stop threads [ 233.110780][ T7186] lo speed is unknown, defaulting to 1000 [ 233.143975][ T4494] vhci_hcd: release socket [ 233.171694][ T4494] vhci_hcd: disconnect device [ 233.177314][ T4494] vhci_hcd: stop threads [ 233.187716][ T4494] vhci_hcd: release socket [ 233.223519][ T4494] vhci_hcd: disconnect device [ 233.291184][ T4494] vhci_hcd: stop threads [ 233.340003][ T4494] vhci_hcd: release socket [ 233.384902][ T4494] vhci_hcd: disconnect device [ 233.461136][ T4301] vhci_hcd: vhci_device speed not set [ 233.913494][ T7195] lo speed is unknown, defaulting to 1000 [ 235.584395][ T7209] lo speed is unknown, defaulting to 1000 [ 235.931661][ T7218] siw: device registration error -23 [ 236.051171][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 236.255066][ T126] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 236.278424][ T126] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 236.318161][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.335253][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 236.372702][ T126] usb 1-1: config 0 has no interface number 0 [ 236.388964][ T126] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 236.410547][ T126] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 236.428220][ T126] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 236.447899][ T126] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.469478][ T126] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 236.479294][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.527138][ T126] usb 1-1: config 0 descriptor?? [ 236.570219][ T126] gspca_main: spca561-2.14.0 probing abcd:cdee [ 236.867623][ T26] audit: type=1326 audit(1749696241.402:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 236.949979][ T26] audit: type=1326 audit(1749696241.442:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.040833][ T26] audit: type=1326 audit(1749696241.442:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.075122][ T26] audit: type=1326 audit(1749696241.442:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.103718][ T126] spca561: probe of 1-1:0.156 failed with error -22 [ 237.112345][ T26] audit: type=1326 audit(1749696241.442:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.124427][ T126] usb 1-1: MIDIStreaming interface descriptor not found [ 237.199516][ T26] audit: type=1326 audit(1749696241.442:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.308002][ T26] audit: type=1326 audit(1749696241.442:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.381042][ T26] audit: type=1326 audit(1749696241.442:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.422220][ T26] audit: type=1326 audit(1749696241.942:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.423801][ T126] usb 1-1: USB disconnect, device number 2 [ 237.471175][ T26] audit: type=1326 audit(1749696241.942:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 237.739562][ T7245] siw: device registration error -23 [ 239.874938][ T7264] loop5: detected capacity change from 0 to 512 [ 239.906345][ T7264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.960272][ T7264] EXT4-fs (loop5): orphan cleanup on readonly fs [ 239.984434][ T7264] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.994: bg 0: block 248: padding at end of block bitmap is not set [ 240.013076][ T7264] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.994: Failed to acquire dquot type 1 [ 240.039634][ T7264] EXT4-fs (loop5): 1 truncate cleaned up [ 240.051759][ T7264] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.711700][ T6930] EXT4-fs (loop5): unmounting filesystem. [ 241.741324][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 241.881518][ T7279] siw: device registration error -23 [ 241.935677][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 241.955463][ T4257] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 241.976675][ T4257] usb 3-1: config 0 has no interface number 0 [ 242.033481][ T4257] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=a5.2a [ 242.052666][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.086505][ T4257] usb 3-1: Product: syz [ 242.095993][ T4257] usb 3-1: Manufacturer: syz [ 242.130899][ T4257] usb 3-1: SerialNumber: syz [ 242.161518][ T4257] usb 3-1: config 0 descriptor?? [ 242.380822][ T7287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.392527][ T7287] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 243.045689][ T4257] ftdi_sio 3-1:0.154: FTDI USB Serial Device converter detected [ 243.078815][ T4257] ftdi_sio ttyUSB0: unknown device type: 0xa52a [ 243.102588][ T4257] usb 3-1: USB disconnect, device number 2 [ 243.110111][ T4257] ftdi_sio 3-1:0.154: device disconnected [ 243.137438][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 243.137452][ T26] audit: type=1326 audit(1749696247.662:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 243.217785][ T26] audit: type=1326 audit(1749696247.712:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 243.284960][ T7293] loop5: detected capacity change from 0 to 512 [ 243.458199][ T7295] lo speed is unknown, defaulting to 1000 [ 243.765749][ T26] audit: type=1326 audit(1749696247.722:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 243.868991][ T26] audit: type=1326 audit(1749696247.722:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 243.893098][ T26] audit: type=1326 audit(1749696247.722:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 244.010873][ T26] audit: type=1326 audit(1749696247.722:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 244.037104][ T26] audit: type=1326 audit(1749696247.722:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 244.059740][ T26] audit: type=1326 audit(1749696247.722:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 244.064551][ T7293] EXT4-fs (loop5): 1 orphan inode deleted [ 244.091743][ T4334] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 244.102195][ T7293] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 244.111224][ T4334] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 1 [ 244.121084][ T7293] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.123873][ T26] audit: type=1326 audit(1749696247.722:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 244.733403][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 244.963019][ T6930] EXT4-fs (loop5): unmounting filesystem. [ 246.151619][ T7334] loop5: detected capacity change from 0 to 1024 [ 246.158653][ T7334] EXT4-fs: Ignoring removed orlov option [ 246.164406][ T7334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.219188][ T7339] sd 0:0:1:0: device reset [ 246.261340][ T7334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 246.788869][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 247.169938][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 248.524440][ T6930] EXT4-fs (loop5): unmounting filesystem. [ 248.936104][ T7378] sd 0:0:1:0: device reset [ 248.981858][ T7373] siw: device registration error -23 [ 249.108495][ T7385] siw: device registration error -23 [ 249.337688][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 249.688749][ T7393] loop2: detected capacity change from 0 to 8192 [ 249.737111][ T7393] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.070842][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 250.083988][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 250.745539][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 250.745552][ T26] audit: type=1326 audit(1749696255.282:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 250.840682][ T26] audit: type=1326 audit(1749696255.282:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 250.910764][ T26] audit: type=1326 audit(1749696255.282:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 250.985469][ T26] audit: type=1326 audit(1749696255.282:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 251.070795][ T26] audit: type=1326 audit(1749696255.332:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 251.125282][ T26] audit: type=1326 audit(1749696255.352:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 251.182872][ T7412] sd 0:0:1:0: device reset [ 251.215263][ T26] audit: type=1326 audit(1749696255.352:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 251.287272][ T26] audit: type=1326 audit(1749696255.352:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fb8e929 code=0x7ffc0000 [ 251.835986][ T7427] loop5: detected capacity change from 0 to 512 [ 251.974123][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 252.268006][ T7427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.877208][ T7427] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.901902][ T7427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1054: bg 0: block 248: padding at end of block bitmap is not set [ 252.923270][ T7427] Quota error (device loop5): write_blk: dquota write failed [ 252.931400][ T7427] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 252.941540][ T7427] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1054: Failed to acquire dquot type 1 [ 252.976885][ T7427] EXT4-fs (loop5): 1 truncate cleaned up [ 253.066847][ T7427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.218230][ T7438] loop2: detected capacity change from 0 to 256 [ 255.344335][ T6930] EXT4-fs (loop5): unmounting filesystem. [ 255.421684][ T7438] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 255.473052][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.479485][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.618657][ T7442] sd 0:0:1:0: device reset [ 256.122549][ T7452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.134103][ T7452] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 257.206800][ T7465] syz.3.1067[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.207256][ T7465] syz.3.1067[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.096881][ T7471] siw: device registration error -23 [ 259.145005][ T7466] xt_bpf: check failed: parse error [ 259.398135][ T7472] siw: device registration error -23 [ 259.583309][ T7478] loop5: detected capacity change from 0 to 8192 [ 259.757350][ T7480] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 261.167604][ T7495] lo speed is unknown, defaulting to 1000 [ 261.273141][ T7499] siw: device registration error -23 [ 261.640232][ T26] audit: type=1326 audit(1749696266.172:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 261.718076][ T26] audit: type=1326 audit(1749696266.212:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 262.895302][ T26] audit: type=1326 audit(1749696266.212:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 262.973324][ T7514] syz.5.1081[7514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.973418][ T7514] syz.5.1081[7514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.211650][ T26] audit: type=1326 audit(1749696266.212:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 263.330562][ T26] audit: type=1326 audit(1749696266.212:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 263.353061][ T26] audit: type=1326 audit(1749696266.212:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 263.375343][ T26] audit: type=1326 audit(1749696266.212:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 264.360722][ T26] audit: type=1326 audit(1749696266.212:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 264.430455][ T26] audit: type=1326 audit(1749696266.212:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 264.670170][ T26] audit: type=1326 audit(1749696266.212:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 265.735858][ T7540] siw: device registration error -23 [ 266.432797][ T7544] siw: device registration error -23 [ 266.615267][ T7545] loop2: detected capacity change from 0 to 512 [ 266.671055][ T7545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.683344][ T7547] sd 0:0:1:0: device reset [ 266.757543][ T7545] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1091: bad orphan inode 17 [ 266.771209][ T7545] EXT4-fs (loop2): Remounting filesystem read-only [ 266.777753][ T7545] ext4_test_bit(bit=16, block=4) = 1 [ 266.799679][ T7545] is_bad_inode(inode)=0 [ 266.837104][ T7545] NEXT_ORPHAN(inode)=2147418128 [ 266.865626][ T7545] max_ino=32 [ 266.875755][ T7545] i_nlink=0 [ 266.880167][ T7545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.127064][ T7555] device bridge_slave_0 left promiscuous mode [ 267.168025][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.257859][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1094'. [ 267.773091][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 267.781081][ T7555] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 267.866243][ T7558] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 267.876380][ T7558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 267.886021][ T7558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 270.917678][ T7603] sd 0:0:1:0: device reset [ 271.166814][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 271.824715][ T7609] siw: device registration error -23 [ 272.431288][ T126] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 272.723649][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 273.100690][ T126] usb 6-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 273.179484][ T126] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 273.242221][ T126] usb 6-1: New USB device found, idVendor=05e6, idProduct=a4a1, bcdDevice= 0.40 [ 273.288189][ T7618] lo speed is unknown, defaulting to 1000 [ 273.299452][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.332232][ T126] usb 6-1: Product: syz [ 273.336450][ T126] usb 6-1: Manufacturer: syz [ 273.389727][ T126] usb 6-1: SerialNumber: syz [ 274.261967][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 275.137030][ T7640] siw: device registration error -23 [ 275.323362][ T953] usb 6-1: USB disconnect, device number 2 [ 276.621248][ T7644] syz.5.1121[7644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.621340][ T7644] syz.5.1121[7644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.780207][ T7644] loop5: detected capacity change from 0 to 256 [ 277.545879][ T7657] tmpfs: Bad value for 'mpol' [ 278.087334][ T7665] siw: device registration error -23 [ 278.246680][ T7668] siw: device registration error -23 [ 278.654608][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1128'. [ 279.365909][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 279.376851][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 280.234785][ T7697] tmpfs: Bad value for 'mpol' [ 280.756040][ T7701] overlayfs: missing 'workdir' [ 281.218417][ T7698] device veth0_vlan left promiscuous mode [ 281.225644][ T7698] device veth0_vlan entered promiscuous mode [ 281.504798][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 281.536249][ T7711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 283.139212][ T7722] loop2: detected capacity change from 0 to 512 [ 283.146474][ T7722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.511794][ T7722] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 285.553218][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 285.553232][ T26] audit: type=1326 audit(1749696290.092:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 285.687006][ T26] audit: type=1326 audit(1749696290.122:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 285.750698][ T26] audit: type=1326 audit(1749696290.122:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 285.896129][ T26] audit: type=1326 audit(1749696290.122:790): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 286.015600][ T26] audit: type=1326 audit(1749696290.122:791): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b8e929 code=0x7ffc0000 [ 287.191048][ T7736] tipc: Started in network mode [ 287.237203][ T7736] tipc: Node identity aac23629a03a, cluster identity 4711 [ 287.254272][ T7736] tipc: Enabled bearer , priority 0 [ 287.289356][ T7742] device syzkaller0 entered promiscuous mode [ 287.341289][ T7736] tipc: Resetting bearer [ 287.377168][ T7734] tipc: Resetting bearer [ 287.458324][ T7734] tipc: Disabling bearer [ 287.606111][ T7750] loop2: detected capacity change from 0 to 512 [ 287.636061][ T7750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.758585][ T7750] EXT4-fs (loop2): orphan cleanup on readonly fs [ 287.773481][ T7750] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 287.783656][ T7750] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 287.793346][ T7750] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1155: Failed to acquire dquot type 1 [ 287.825536][ T7750] EXT4-fs (loop2): 1 truncate cleaned up [ 287.832358][ T7750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.937354][ T7750] lo speed is unknown, defaulting to 1000 [ 289.016325][ T7760] siw: device registration error -23 [ 289.408694][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 289.623186][ T7744] loop5: detected capacity change from 0 to 40427 [ 289.647861][ T7771] loop2: detected capacity change from 0 to 2048 [ 289.665695][ T7744] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 289.679977][ T7744] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 289.705770][ T7744] F2FS-fs (loop5): invalid crc value [ 289.738960][ T7744] F2FS-fs (loop5): Found nat_bits in checkpoint [ 289.745905][ T7771] loop2: p1 < > p3 [ 289.757429][ T7771] loop2: p3 size 134217728 extends beyond EOD, truncated [ 289.906257][ T7744] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 289.925085][ T7744] F2FS-fs (loop5): Start checkpoint disabled! [ 289.948563][ T7775] loop2: detected capacity change from 0 to 1024 [ 289.987987][ T7744] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 289.995492][ T7744] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 290.044171][ T7771] kvm: emulating exchange as write [ 290.063266][ T26] audit: type=1800 audit(1749696294.602:792): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1154" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 290.217510][ T7779] siw: device registration error -23 [ 290.304502][ T7723] kworker/u4:20: attempt to access beyond end of device [ 290.304502][ T7723] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 290.950974][ T7788] device bridge1 entered promiscuous mode [ 291.327499][ T7798] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 291.955758][ T7815] siw: device registration error -23 [ 292.226195][ T4301] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 292.289395][ T4301] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.300354][ T7819] siw: device registration error -23 [ 293.452073][ T7840] device bridge_slave_0 left promiscuous mode [ 293.482056][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.506413][ T7840] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.000935][ T7855] siw: device registration error -23 [ 294.644683][ T7860] siw: device registration error -23 [ 294.955769][ T7865] siw: device registration error -23 [ 295.871526][ T4301] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 295.921498][ T4301] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.341049][ T7884] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.693581][ T26] audit: type=1326 audit(1749696301.232:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 296.764954][ T26] audit: type=1326 audit(1749696301.232:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 296.817994][ T26] audit: type=1326 audit(1749696301.232:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 296.890671][ T26] audit: type=1326 audit(1749696301.232:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 296.922338][ T26] audit: type=1326 audit(1749696301.232:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 297.099395][ T7899] lo speed is unknown, defaulting to 1000 [ 297.483567][ T26] audit: type=1326 audit(1749696301.232:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 297.505964][ T26] audit: type=1326 audit(1749696301.232:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 297.557453][ T26] audit: type=1326 audit(1749696301.232:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 297.665364][ T26] audit: type=1326 audit(1749696301.232:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 299.054503][ T7907] loop2: detected capacity change from 0 to 40427 [ 299.135839][ T7907] F2FS-fs (loop2): Invalid log sectorsize (131081) [ 299.142512][ T7907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 299.167476][ T7907] F2FS-fs (loop2): invalid crc value [ 299.323367][ T26] audit: type=1326 audit(1749696301.232:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadad38e929 code=0x7ffc0000 [ 299.548553][ T7907] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 299.749714][ T7907] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 299.829804][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 299.946786][ T7907] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 299.954065][ T7907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 300.358716][ T126] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 300.418780][ T7921] device bridge_slave_0 left promiscuous mode [ 300.465000][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.473097][ T126] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.536755][ T7921] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 302.384962][ T7953] siw: device registration error -23 [ 303.041835][ T7961] overlayfs: missing 'lowerdir' [ 303.783254][ T7964] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 303.977646][ T7968] tipc: Started in network mode [ 303.990639][ T7968] tipc: Node identity 6af7f90f402, cluster identity 4711 [ 303.997938][ T7968] tipc: Enabled bearer , priority 0 [ 304.032158][ T7971] device syzkaller0 entered promiscuous mode [ 304.135761][ T7967] tipc: Resetting bearer [ 304.206992][ T7967] tipc: Disabling bearer [ 304.215646][ T7970] device syzkaller0 entered promiscuous mode [ 304.476130][ T7987] loop2: detected capacity change from 0 to 1024 [ 304.488864][ T7987] EXT4-fs: Invalid want_extra_isize 0 [ 304.672869][ T7991] overlayfs: failed to resolve './file0': -2 [ 305.661794][ T8006] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 306.277633][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1237'. [ 306.452660][ T8012] tipc: Enabled bearer , priority 0 [ 306.471499][ T8012] device syzkaller0 entered promiscuous mode [ 306.491133][ T8011] tipc: Resetting bearer [ 306.565378][ T8011] tipc: Disabling bearer [ 306.671683][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 307.783586][ T8026] xt_bpf: check failed: parse error [ 308.635827][ T8042] sd 0:0:1:0: device reset [ 309.390922][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'. [ 309.556677][ T8051] loop5: detected capacity change from 0 to 512 [ 309.635737][ T8051] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.805931][ T8051] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1252: bad orphan inode 17 [ 309.863097][ T8051] EXT4-fs (loop5): Remounting filesystem read-only [ 309.910419][ T8051] ext4_test_bit(bit=16, block=4) = 1 [ 309.939761][ T8051] is_bad_inode(inode)=0 [ 309.964507][ T8051] NEXT_ORPHAN(inode)=2147418128 [ 309.969416][ T8051] max_ino=32 [ 310.025283][ T8051] i_nlink=0 [ 310.028873][ T8051] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 310.584181][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 311.144021][ T8062] tipc: Enabled bearer , priority 0 [ 311.161733][ T6930] EXT4-fs (loop5): unmounting filesystem. [ 311.181414][ T8062] device syzkaller0 entered promiscuous mode [ 311.217014][ T8060] tipc: Resetting bearer [ 311.335317][ T8060] tipc: Disabling bearer [ 313.240122][ T8077] input: syz1 as /devices/virtual/input/input5 [ 314.239052][ T8086] sd 0:0:1:0: device reset [ 314.500980][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 314.841617][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1264'. [ 315.389907][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1269'. [ 316.034616][ T8109] loop2: detected capacity change from 0 to 1024 [ 316.092148][ T8109] EXT4-fs: Ignoring removed nobh option [ 316.106062][ T8109] EXT4-fs: Ignoring removed bh option [ 316.127172][ T8109] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.202202][ T8118] sd 0:0:1:0: device reset [ 316.301406][ T8109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 316.457820][ T8140] tipc: Started in network mode [ 316.492931][ T8140] tipc: Node identity ce5ee204626d, cluster identity 4711 [ 316.506825][ T8140] tipc: Enabled bearer , priority 0 [ 316.546800][ T8154] device syzkaller0 entered promiscuous mode [ 316.635024][ T8138] tipc: Resetting bearer [ 316.754861][ T8138] tipc: Disabling bearer [ 316.798942][ T8106] ================================================================== [ 316.807034][ T8106] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 [ 316.814425][ T8106] Read of size 4 at addr ffff888044b01c98 by task syz.2.1270/8106 [ 316.822237][ T8106] [ 316.824578][ T8106] CPU: 0 PID: 8106 Comm: syz.2.1270 Not tainted 6.1.141-syzkaller #0 [ 316.832648][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.842801][ T8106] Call Trace: [ 316.846082][ T8106] [ 316.849024][ T8106] dump_stack_lvl+0x168/0x22e [ 316.853717][ T8106] ? __lock_acquire+0x7c50/0x7c50 [ 316.858754][ T8106] ? show_regs_print_info+0x12/0x12 [ 316.863968][ T8106] ? load_image+0x3b0/0x3b0 [ 316.868485][ T8106] ? __virt_addr_valid+0x465/0x540 [ 316.873611][ T8106] ? ext4_find_extent+0xbcc/0xe00 [ 316.878641][ T8106] print_report+0xa8/0x220 [ 316.883077][ T8106] kasan_report+0x10b/0x140 [ 316.887606][ T8106] ? ext4_find_extent+0xbcc/0xe00 [ 316.892644][ T8106] ext4_find_extent+0xbcc/0xe00 [ 316.897507][ T8106] ext4_ext_map_blocks+0x27d/0x66d0 [ 316.902721][ T8106] ? __lock_acquire+0x12e5/0x7c50 [ 316.907766][ T8106] ? ext4_ext_release+0x10/0x10 [ 316.912631][ T8106] ? rwsem_write_trylock+0x12f/0x1b0 [ 316.917932][ T8106] ? ext4_es_lookup_extent+0x443/0xb20 [ 316.923409][ T8106] ext4_map_blocks+0x9d1/0x1b60 [ 316.928275][ T8106] ? ext4_issue_zeroout+0x250/0x250 [ 316.933492][ T8106] _ext4_get_block+0x1d7/0x4e0 [ 316.938266][ T8106] ? alloc_buffer_head+0xd4/0x100 [ 316.943307][ T8106] ? __lock_acquire+0x7c50/0x7c50 [ 316.948346][ T8106] ? ext4_get_block+0x40/0x40 [ 316.953032][ T8106] ? attach_page_private+0x110/0x300 [ 316.958336][ T8106] ? create_empty_buffers+0x59e/0x7a0 [ 316.963725][ T8106] ? do_raw_spin_unlock+0x11d/0x230 [ 316.968943][ T8106] ext4_get_block_unwritten+0x2a/0x100 [ 316.974422][ T8106] __block_write_begin_int+0x54b/0x1a70 [ 316.979991][ T8106] ? _ext4_get_block+0x4e0/0x4e0 [ 316.984950][ T8106] ? page_zero_new_buffers+0x650/0x650 [ 316.990427][ T8106] ? ext4_journal_check_start+0x17e/0x240 [ 316.996163][ T8106] block_page_mkwrite+0x2d8/0x5f0 [ 317.001200][ T8106] ? _ext4_get_block+0x4e0/0x4e0 [ 317.006149][ T8106] ext4_page_mkwrite+0x3b2/0x10c0 [ 317.011187][ T8106] ? _ext4_get_block+0x4e0/0x4e0 [ 317.016157][ T8106] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 317.022410][ T8106] ? count_memcg_event_mm+0x8f/0x3b0 [ 317.027707][ T8106] ? count_memcg_event_mm+0x358/0x3b0 [ 317.033091][ T8106] ? vm_normal_page+0x95/0x1d0 [ 317.037872][ T8106] do_page_mkwrite+0x16b/0x5c0 [ 317.042657][ T8106] wp_page_shared+0x167/0x370 [ 317.047349][ T8106] handle_mm_fault+0x1ca6/0x3e70 [ 317.052296][ T8106] ? mt_find+0x145/0x810 [ 317.056567][ T8106] ? numa_migrate_prep+0x250/0x250 [ 317.061697][ T8106] ? lock_chain_count+0x20/0x20 [ 317.066564][ T8106] ? lock_mm_and_find_vma+0xae/0x2f0 [ 317.071874][ T8106] do_user_addr_fault+0x51f/0xb10 [ 317.076923][ T8106] exc_page_fault+0x60/0x100 [ 317.081525][ T8106] asm_exc_page_fault+0x22/0x30 [ 317.086399][ T8106] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 317.093010][ T8106] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 317.112631][ T8106] RSP: 0018:ffffc90004277a88 EFLAGS: 00050246 [ 317.118715][ T8106] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040 [ 317.126699][ T8106] RDX: 0000000000000040 RSI: ffffc90004277b20 RDI: 00002000000a8000 [ 317.134680][ T8106] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200084ef6c [ 317.142666][ T8106] R10: fffff5200084ef6c R11: 1ffff9200084ef64 R12: 00007fffffffefc0 [ 317.150646][ T8106] R13: 000000007ff8aa80 R14: 00002000000a8000 R15: ffffc90004277b20 [ 317.158628][ T8106] ? _copy_to_user+0xa1/0x130 [ 317.163328][ T8106] _copy_to_user+0xea/0x130 [ 317.167850][ T8106] rng_dev_read+0x3c5/0x710 [ 317.172365][ T8106] ? hwrng_yield+0x20/0x20 [ 317.176788][ T8106] ? common_file_perm+0x171/0x1c0 [ 317.181832][ T8106] ? fsnotify_perm+0x39b/0x550 [ 317.186611][ T8106] do_iter_read+0x49f/0xb10 [ 317.191135][ T8106] ? vfs_iter_read+0xa0/0xa0 [ 317.195736][ T8106] ? __import_iovec+0x315/0x500 [ 317.200643][ T8106] ? import_iovec+0x6f/0xa0 [ 317.205157][ T8106] do_preadv+0x1f6/0x330 [ 317.209413][ T8106] ? do_writev+0x410/0x410 [ 317.213856][ T8106] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 317.219860][ T8106] ? lock_chain_count+0x20/0x20 [ 317.224726][ T8106] ? lockdep_hardirqs_on+0x94/0x140 [ 317.229940][ T8106] do_syscall_64+0x4c/0xa0 [ 317.234374][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 317.239060][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 317.243748][ T8106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.249662][ T8106] RIP: 0033:0x7eff3fb8e929 [ 317.254093][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.273711][ T8106] RSP: 002b:00007eff409d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 317.282133][ T8106] RAX: ffffffffffffffda RBX: 00007eff3fdb5fa0 RCX: 00007eff3fb8e929 [ 317.290113][ T8106] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 317.298090][ T8106] RBP: 00007eff3fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 317.306070][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.314048][ T8106] R13: 0000000000000000 R14: 00007eff3fdb5fa0 R15: 00007ffcf932bad8 [ 317.322037][ T8106] [ 317.325065][ T8106] [ 317.327392][ T8106] The buggy address belongs to the physical page: [ 317.333830][ T8106] page:ffffea000112c040 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x44b01 [ 317.343999][ T8106] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 317.351142][ T8106] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 317.359743][ T8106] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 317.368334][ T8106] page dumped because: kasan: bad access detected [ 317.374755][ T8106] page_owner tracks the page as freed [ 317.380126][ T8106] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8068, tgid 8067 (syz.5.1258), ts 311587150818, free_ts 312650236856 [ 317.397857][ T8106] post_alloc_hook+0x173/0x1a0 [ 317.402653][ T8106] get_page_from_freelist+0x1a26/0x1ac0 [ 317.408224][ T8106] __alloc_pages+0x1df/0x4e0 [ 317.412833][ T8106] __folio_alloc+0xe/0x30 [ 317.417180][ T8106] vma_alloc_folio+0x4a3/0x900 [ 317.421964][ T8106] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 317.427702][ T8106] shmem_get_folio_gfp+0x1361/0x3400 [ 317.433012][ T8106] shmem_fault+0x1be/0x7b0 [ 317.437454][ T8106] __do_fault+0x13b/0x4e0 [ 317.441803][ T8106] handle_mm_fault+0x28ca/0x3e70 [ 317.446763][ T8106] __get_user_pages+0x3ff/0xeb0 [ 317.451641][ T8106] populate_vma_page_range+0x214/0x2b0 [ 317.457120][ T8106] __mm_populate+0x248/0x370 [ 317.461730][ T8106] vm_mmap_pgoff+0x203/0x2b0 [ 317.466326][ T8106] do_syscall_64+0x4c/0xa0 [ 317.470756][ T8106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.476678][ T8106] page last free stack trace: [ 317.481352][ T8106] free_unref_page_prepare+0x8b4/0x9a0 [ 317.486835][ T8106] free_unref_page_list+0xbb/0x8e0 [ 317.491965][ T8106] release_pages+0x1f92/0x2200 [ 317.496739][ T8106] __pagevec_release+0x6d/0xe0 [ 317.501604][ T8106] shmem_undo_range+0x75b/0x2050 [ 317.506558][ T8106] shmem_evict_inode+0x248/0xa40 [ 317.511513][ T8106] evict+0x485/0x870 [ 317.515426][ T8106] __dentry_kill+0x431/0x650 [ 317.520029][ T8106] dentry_kill+0xb8/0x290 [ 317.524372][ T8106] dput+0xfa/0x1d0 [ 317.528110][ T8106] __fput+0x5e0/0x920 [ 317.532105][ T8106] task_work_run+0x1ca/0x250 [ 317.536706][ T8106] do_exit+0x936/0x2400 [ 317.540877][ T8106] do_group_exit+0x217/0x2d0 [ 317.545484][ T8106] get_signal+0x1272/0x1350 [ 317.550011][ T8106] arch_do_signal_or_restart+0xb0/0x1230 [ 317.555658][ T8106] [ 317.557986][ T8106] Memory state around the buggy address: [ 317.563624][ T8106] ffff888044b01b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 317.571701][ T8106] ffff888044b01c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 317.579774][ T8106] >ffff888044b01c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 317.587864][ T8106] ^ [ 317.592723][ T8106] ffff888044b01d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 317.600800][ T8106] ffff888044b01d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 317.608870][ T8106] ================================================================== [ 317.620653][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.625268][ T126] tipc: Node number set to 2889081348 [ 317.626974][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.823567][ T8106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 317.830808][ T8106] CPU: 0 PID: 8106 Comm: syz.2.1270 Not tainted 6.1.141-syzkaller #0 [ 317.838888][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.848959][ T8106] Call Trace: [ 317.852253][ T8106] [ 317.855196][ T8106] dump_stack_lvl+0x168/0x22e [ 317.859888][ T8106] ? memcpy+0x3c/0x60 [ 317.863881][ T8106] ? show_regs_print_info+0x12/0x12 [ 317.869096][ T8106] ? load_image+0x3b0/0x3b0 [ 317.873610][ T8106] panic+0x2c9/0x710 [ 317.877519][ T8106] ? bpf_jit_dump+0xd0/0xd0 [ 317.882029][ T8106] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 317.887945][ T8106] ? _raw_spin_unlock+0x40/0x40 [ 317.892807][ T8106] ? print_memory_metadata+0x314/0x400 [ 317.898281][ T8106] check_panic_on_warn+0x80/0xa0 [ 317.903233][ T8106] ? ext4_find_extent+0xbcc/0xe00 [ 317.908270][ T8106] end_report+0x66/0x110 [ 317.912533][ T8106] kasan_report+0x118/0x140 [ 317.917058][ T8106] ? ext4_find_extent+0xbcc/0xe00 [ 317.922094][ T8106] ext4_find_extent+0xbcc/0xe00 [ 317.926955][ T8106] ext4_ext_map_blocks+0x27d/0x66d0 [ 317.932163][ T8106] ? __lock_acquire+0x12e5/0x7c50 [ 317.937207][ T8106] ? ext4_ext_release+0x10/0x10 [ 317.942070][ T8106] ? rwsem_write_trylock+0x12f/0x1b0 [ 317.947369][ T8106] ? ext4_es_lookup_extent+0x443/0xb20 [ 317.952841][ T8106] ext4_map_blocks+0x9d1/0x1b60 [ 317.957706][ T8106] ? ext4_issue_zeroout+0x250/0x250 [ 317.962919][ T8106] _ext4_get_block+0x1d7/0x4e0 [ 317.967688][ T8106] ? alloc_buffer_head+0xd4/0x100 [ 317.972724][ T8106] ? __lock_acquire+0x7c50/0x7c50 [ 317.977760][ T8106] ? ext4_get_block+0x40/0x40 [ 317.982444][ T8106] ? attach_page_private+0x110/0x300 [ 317.987754][ T8106] ? create_empty_buffers+0x59e/0x7a0 [ 317.993141][ T8106] ? do_raw_spin_unlock+0x11d/0x230 [ 317.998355][ T8106] ext4_get_block_unwritten+0x2a/0x100 [ 318.003825][ T8106] __block_write_begin_int+0x54b/0x1a70 [ 318.009394][ T8106] ? _ext4_get_block+0x4e0/0x4e0 [ 318.014338][ T8106] ? page_zero_new_buffers+0x650/0x650 [ 318.019813][ T8106] ? ext4_journal_check_start+0x17e/0x240 [ 318.025543][ T8106] block_page_mkwrite+0x2d8/0x5f0 [ 318.030573][ T8106] ? _ext4_get_block+0x4e0/0x4e0 [ 318.035516][ T8106] ext4_page_mkwrite+0x3b2/0x10c0 [ 318.040554][ T8106] ? _ext4_get_block+0x4e0/0x4e0 [ 318.045498][ T8106] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 318.051753][ T8106] ? count_memcg_event_mm+0x8f/0x3b0 [ 318.057049][ T8106] ? count_memcg_event_mm+0x358/0x3b0 [ 318.062432][ T8106] ? vm_normal_page+0x95/0x1d0 [ 318.067206][ T8106] do_page_mkwrite+0x16b/0x5c0 [ 318.071984][ T8106] wp_page_shared+0x167/0x370 [ 318.076678][ T8106] handle_mm_fault+0x1ca6/0x3e70 [ 318.081626][ T8106] ? mt_find+0x145/0x810 [ 318.085895][ T8106] ? numa_migrate_prep+0x250/0x250 [ 318.091020][ T8106] ? lock_chain_count+0x20/0x20 [ 318.095881][ T8106] ? lock_mm_and_find_vma+0xae/0x2f0 [ 318.101159][ T8106] do_user_addr_fault+0x51f/0xb10 [ 318.106193][ T8106] exc_page_fault+0x60/0x100 [ 318.110773][ T8106] asm_exc_page_fault+0x22/0x30 [ 318.115625][ T8106] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 318.122208][ T8106] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 318.141830][ T8106] RSP: 0018:ffffc90004277a88 EFLAGS: 00050246 [ 318.147902][ T8106] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040 [ 318.155861][ T8106] RDX: 0000000000000040 RSI: ffffc90004277b20 RDI: 00002000000a8000 [ 318.163818][ T8106] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200084ef6c [ 318.171786][ T8106] R10: fffff5200084ef6c R11: 1ffff9200084ef64 R12: 00007fffffffefc0 [ 318.179764][ T8106] R13: 000000007ff8aa80 R14: 00002000000a8000 R15: ffffc90004277b20 [ 318.187730][ T8106] ? _copy_to_user+0xa1/0x130 [ 318.192412][ T8106] _copy_to_user+0xea/0x130 [ 318.196924][ T8106] rng_dev_read+0x3c5/0x710 [ 318.201427][ T8106] ? hwrng_yield+0x20/0x20 [ 318.205843][ T8106] ? common_file_perm+0x171/0x1c0 [ 318.210866][ T8106] ? fsnotify_perm+0x39b/0x550 [ 318.215648][ T8106] do_iter_read+0x49f/0xb10 [ 318.220154][ T8106] ? vfs_iter_read+0xa0/0xa0 [ 318.224727][ T8106] ? __import_iovec+0x315/0x500 [ 318.229562][ T8106] ? import_iovec+0x6f/0xa0 [ 318.234059][ T8106] do_preadv+0x1f6/0x330 [ 318.238302][ T8106] ? do_writev+0x410/0x410 [ 318.242716][ T8106] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.248702][ T8106] ? lock_chain_count+0x20/0x20 [ 318.253539][ T8106] ? lockdep_hardirqs_on+0x94/0x140 [ 318.258722][ T8106] do_syscall_64+0x4c/0xa0 [ 318.263135][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 318.267812][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 318.272483][ T8106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.278391][ T8106] RIP: 0033:0x7eff3fb8e929 [ 318.282799][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.302420][ T8106] RSP: 002b:00007eff409d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 318.310849][ T8106] RAX: ffffffffffffffda RBX: 00007eff3fdb5fa0 RCX: 00007eff3fb8e929 [ 318.318835][ T8106] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 318.326806][ T8106] RBP: 00007eff3fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.334766][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.342732][ T8106] R13: 0000000000000000 R14: 00007eff3fdb5fa0 R15: 00007ffcf932bad8 [ 318.350718][ T8106] [ 318.353984][ T8106] Kernel Offset: disabled [ 318.358299][ T8106] Rebooting in 86400 seconds..