last executing test programs: 2.300715006s ago: executing program 4 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000980)={0x14, 0x7, 0x1, {{0x7, 'TIPCv2\x00'}, 0x8}}, 0x14) 2.246281568s ago: executing program 4 (id=453): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) 2.171480306s ago: executing program 4 (id=457): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 2.012778542s ago: executing program 4 (id=463): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x5}, 0x2) 1.957682788s ago: executing program 4 (id=468): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.907687956s ago: executing program 4 (id=471): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 1.131458815s ago: executing program 3 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7f, 0x4, 0x6, 0x1, 0x4, 0x4, 0xb6]}}]}]}]}, 0x44}}, 0x0) 1.058692836s ago: executing program 3 (id=506): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.004358584s ago: executing program 3 (id=509): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000480)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 899.086028ms ago: executing program 3 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/21/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 827.720883ms ago: executing program 3 (id=518): r0 = syz_open_dev$vim2m(&(0x7f0000001880), 0x4000000007d39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 675.714293ms ago: executing program 3 (id=524): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000001c0)=[{0x0, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) 641.833114ms ago: executing program 1 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x5}]}}}}}}}, 0x0) 563.372751ms ago: executing program 1 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) 521.297257ms ago: executing program 1 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 445.608416ms ago: executing program 1 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0xac, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe, 0xf410, 0x2b6, 0x2, 0x9, 0xffffffff}}, {0x4}}]}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x0, 0x7, 0x4, 0x7, 0xb, 0x7, 0x9, 0xb, 0x1, 0x1, 0x5, 0xf, 0x1, 0x2, 0x4], 0x1, [0x6, 0x6, 0x6f6c, 0x29, 0x657, 0x9, 0x6, 0x1, 0x8, 0x9, 0x8, 0x8, 0xffff, 0x0, 0xb, 0xffff], [0x4, 0x8001, 0x81, 0x2, 0xde, 0x1, 0x8, 0x800, 0x5, 0xfc01, 0xfd, 0x7, 0x0, 0x0, 0x2, 0x1023]}}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 388.889276ms ago: executing program 1 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 325.72341ms ago: executing program 0 (id=538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$can_j1939(r1, &(0x7f0000005080)={0x0, 0x0, 0x0}, 0x40000020) 296.951125ms ago: executing program 2 (id=539): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@numtail}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@numtail}, {@shortname_winnt}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x3, 0x27b, &(0x7f0000001080)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xc97}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 291.675458ms ago: executing program 1 (id=540): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x400, 0x800}, {0x1, 0xb7ba, 0x1000}], 0x2) semctl$GETNCNT(r0, 0x2, 0xe, 0x0) 270.580308ms ago: executing program 0 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) 246.06564ms ago: executing program 0 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x195c0000, 0x4, 0x1) 245.517573ms ago: executing program 2 (id=553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$can_j1939(r1, &(0x7f0000005080)={0x0, 0x0, 0x0}, 0x40000020) 224.499831ms ago: executing program 0 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='101:', 0x4) 209.858906ms ago: executing program 2 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 161.894185ms ago: executing program 2 (id=545): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00001af000/0x3000)=nil, &(0x7f0000779000/0x1000)=nil, 0x3000, 0x2, 0x2}) 161.15862ms ago: executing program 0 (id=557): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 126.372816ms ago: executing program 2 (id=546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001240)="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", 0xdc1}], 0x1}}], 0x1, 0x4000800) 533.51µs ago: executing program 0 (id=548): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0xa, 0x10000}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000088205820540000102030109026e00030109e002080b0000010130fc0904000000010130000a24010c0a00fbffffff0904010000010230000904010101"], 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x37, 0x2, {0x1, 0x7, 0xc, 0x0, 0x1, '\xbb'}}, 0x1f) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 2 (id=560): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000500)='k', 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x24031, 0xffffffffffffffff, 0xbe9f5000) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0xceaf, 0x8000000, 0x9, 0x2, 0x1, 0x9, 0x0, 0x0, 0x80, 0x800}}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 28.196258][ T4696] cgroup: Unknown subsys name 'net' [ 28.297322][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.299494][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.486933][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.207625][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.208011][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.208185][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.208335][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.208960][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.212291][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.212547][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.212633][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.217821][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.218194][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.218399][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.218935][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.219362][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.219576][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.219965][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.220143][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.220478][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.220882][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.221392][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.222570][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.223370][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.225888][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.228090][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.249055][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.251331][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.605746][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.606018][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.606128][ T4715] bridge_slave_0: entered allmulticast mode [ 29.606607][ T4715] bridge_slave_0: entered promiscuous mode [ 29.607823][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.607846][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.607937][ T4715] bridge_slave_1: entered allmulticast mode [ 29.608386][ T4715] bridge_slave_1: entered promiscuous mode [ 29.631662][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.631764][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.631818][ T4722] bridge_slave_0: entered allmulticast mode [ 29.632242][ T4722] bridge_slave_0: entered promiscuous mode [ 29.634970][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.634994][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.635058][ T4722] bridge_slave_1: entered allmulticast mode [ 29.635644][ T4722] bridge_slave_1: entered promiscuous mode [ 29.640676][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.655808][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.659029][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.660277][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.661847][ T4710] bridge_slave_0: entered allmulticast mode [ 29.663503][ T4710] bridge_slave_0: entered promiscuous mode [ 29.667250][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.668763][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.670153][ T4710] bridge_slave_1: entered allmulticast mode [ 29.671646][ T4710] bridge_slave_1: entered promiscuous mode [ 29.678356][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.679443][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.693126][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.693211][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.693276][ T4709] bridge_slave_0: entered allmulticast mode [ 29.693924][ T4709] bridge_slave_0: entered promiscuous mode [ 29.698983][ T4715] team0: Port device team_slave_0 added [ 29.703320][ T4715] team0: Port device team_slave_1 added [ 29.708487][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.709416][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.712146][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.712438][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.712529][ T4709] bridge_slave_1: entered allmulticast mode [ 29.712934][ T4709] bridge_slave_1: entered promiscuous mode [ 29.725498][ T4710] team0: Port device team_slave_0 added [ 29.731877][ T4722] team0: Port device team_slave_0 added [ 29.732658][ T4722] team0: Port device team_slave_1 added [ 29.736737][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.739323][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.741597][ T4710] team0: Port device team_slave_1 added [ 29.746592][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.746614][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.746639][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.747418][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.747426][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.747442][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.757837][ T4715] hsr_slave_0: entered promiscuous mode [ 29.758161][ T4715] hsr_slave_1: entered promiscuous mode [ 29.786763][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.788216][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.792921][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.795526][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.796861][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.801587][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.802398][ T4709] team0: Port device team_slave_0 added [ 29.802596][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.802611][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.802633][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.803255][ T4709] team0: Port device team_slave_1 added [ 29.819116][ T4710] hsr_slave_0: entered promiscuous mode [ 29.820539][ T4710] hsr_slave_1: entered promiscuous mode [ 29.821763][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.822839][ T4710] Cannot create hsr debugfs directory [ 29.824139][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.824165][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.824181][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.836825][ T4722] hsr_slave_0: entered promiscuous mode [ 29.838149][ T4722] hsr_slave_1: entered promiscuous mode [ 29.839353][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 29.840489][ T4722] Cannot create hsr debugfs directory [ 29.842193][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.842264][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.842330][ T4708] bridge_slave_0: entered allmulticast mode [ 29.842762][ T4708] bridge_slave_0: entered promiscuous mode [ 29.855762][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.855833][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.855898][ T4708] bridge_slave_1: entered allmulticast mode [ 29.856320][ T4708] bridge_slave_1: entered promiscuous mode [ 29.864699][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.871196][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.871223][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.871240][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.871780][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.871787][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.871797][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.882483][ T4709] hsr_slave_0: entered promiscuous mode [ 29.882781][ T4709] hsr_slave_1: entered promiscuous mode [ 29.882980][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 29.882989][ T4709] Cannot create hsr debugfs directory [ 29.896579][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.931246][ T4708] team0: Port device team_slave_0 added [ 29.932153][ T4708] team0: Port device team_slave_1 added [ 29.956659][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.956685][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.956699][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.967010][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.967036][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.967050][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.002691][ T4708] hsr_slave_0: entered promiscuous mode [ 30.003053][ T4708] hsr_slave_1: entered promiscuous mode [ 30.003280][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.003290][ T4708] Cannot create hsr debugfs directory [ 30.017511][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.020489][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.021190][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.023099][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.032166][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.034530][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.041602][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.044117][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.069091][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.071769][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.079185][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.081372][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.081725][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.083804][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.088249][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.088300][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.088452][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.088486][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.090136][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.091951][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.109078][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.111563][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.115135][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.116286][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.116581][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.118530][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.122805][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.126372][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.137430][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.137483][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.137565][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.137599][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.148664][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.151295][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.152850][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.155489][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.159703][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.161902][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.162441][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.163930][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.168576][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.168620][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.168696][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.168724][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.175330][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.192244][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.193666][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.195416][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.197051][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.199389][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.200712][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.209226][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.213143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.213189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.218589][ T1254] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.218631][ T1254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.223792][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.228024][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.229707][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.231818][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.233505][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.236084][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.237772][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.239730][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.260393][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.261776][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.280891][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.287129][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.309596][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.321068][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.331183][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.331230][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.335745][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.342390][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.342432][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.349613][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.349658][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.350050][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.350068][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.363843][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.363878][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.367151][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.370983][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.380722][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.380773][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.384217][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.403633][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.403681][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.423851][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.423904][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.429355][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.429402][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.434272][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.436942][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.448371][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.468204][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.472612][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.480294][ T4715] veth0_vlan: entered promiscuous mode [ 30.495548][ T4715] veth1_vlan: entered promiscuous mode [ 30.506081][ T4715] veth0_macvtap: entered promiscuous mode [ 30.511781][ T4715] veth1_macvtap: entered promiscuous mode [ 30.518660][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.523434][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.548837][ T1579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.549098][ T1579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.549131][ T1579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.549151][ T1579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.601862][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.601900][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.613961][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.613991][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.645079][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.661990][ T4709] veth0_vlan: entered promiscuous mode [ 30.665066][ T4709] veth1_vlan: entered promiscuous mode [ 30.672523][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.677939][ T4709] veth0_macvtap: entered promiscuous mode [ 30.682607][ T4709] veth1_macvtap: entered promiscuous mode [ 30.684510][ T4715] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.715942][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.716979][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.732484][ T1254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.732535][ T1254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.732563][ T1254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.732579][ T1254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.749017][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.772053][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.801360][ T4710] veth0_vlan: entered promiscuous mode [ 30.807984][ T4710] veth1_vlan: entered promiscuous mode [ 30.825395][ T4708] veth0_vlan: entered promiscuous mode [ 30.830455][ T4708] veth1_vlan: entered promiscuous mode [ 30.842399][ T4892] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7'. [ 30.848176][ T4722] veth0_vlan: entered promiscuous mode [ 30.850823][ T4708] veth0_macvtap: entered promiscuous mode [ 30.854157][ T4708] veth1_macvtap: entered promiscuous mode [ 30.860511][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.860545][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.869578][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.873992][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.883161][ T4722] veth1_vlan: entered promiscuous mode [ 30.897013][ T1579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.897073][ T1579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.897094][ T1579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.897110][ T1579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.898873][ T1579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.898883][ T1579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.911888][ T4710] veth0_macvtap: entered promiscuous mode [ 30.918493][ T4894] tun0: tun_chr_ioctl cmd 1074025680 [ 30.923904][ T4722] veth0_macvtap: entered promiscuous mode [ 30.930004][ T4710] veth1_macvtap: entered promiscuous mode [ 30.948927][ T4722] veth1_macvtap: entered promiscuous mode [ 30.951139][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.951489][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.968314][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.970933][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.980519][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.993094][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.993192][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.993252][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.993376][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.006600][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.011715][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.011742][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.019641][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019688][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019831][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019858][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107965][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.107997][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.131334][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.131365][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.131962][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.131972][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.174019][ T4907] loop4: detected capacity change from 0 to 1024 [ 31.175002][ T4907] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.180483][ T4907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.187212][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.187239][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.207079][ T4907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.225277][ T4712] Bluetooth: hci3: command tx timeout [ 31.230948][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.263932][ T4905] Injecting memory failure for pfn 0x134a03 at process virtual address 0x20003000 [ 31.275306][ T4905] Memory failure: 0x134a03: recovery action for dirty LRU page: Recovered [ 31.301990][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.306530][ T50] Bluetooth: hci1: command tx timeout [ 31.306548][ T4719] Bluetooth: hci2: command tx timeout [ 31.306854][ T50] Bluetooth: hci0: command tx timeout [ 31.306974][ T4712] Bluetooth: hci4: command tx timeout [ 31.396294][ T4926] ======================================================= [ 31.396294][ T4926] WARNING: The mand mount option has been deprecated and [ 31.396294][ T4926] and is ignored by this kernel. Remove the mand [ 31.396294][ T4926] option from the mount to silence this warning. [ 31.396294][ T4926] ======================================================= [ 31.408338][ T4930] loop1: detected capacity change from 0 to 512 [ 31.410041][ T4930] EXT4-fs: inline encryption not supported [ 31.413024][ T4930] EXT4-fs: Ignoring removed i_version option [ 31.426680][ T4930] EXT4-fs (loop1): 1 orphan inode deleted [ 31.427155][ T4930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.434596][ T4930] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.18: Directory hole found for htree leaf block 0 [ 31.467407][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.492803][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 31.579332][ T4954] loop1: detected capacity change from 0 to 128 [ 31.586889][ T4954] FAT-fs (loop1): invalid media value (0x00) [ 31.588218][ T4954] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 31.589969][ T4954] FAT-fs (loop1): Can't find a valid FAT filesystem [ 31.643597][ T4960] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 31.818070][ T4972] xt_hashlimit: size too large, truncated to 1048576 [ 31.874521][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 32.218537][ T5024] loop2: detected capacity change from 0 to 512 [ 32.220866][ T5024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.221302][ T5024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.233359][ T5024] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.233717][ T5024] EXT4-fs (loop2): 1 truncate cleaned up [ 32.234179][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.281817][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.318302][ T5035] netlink: 96 bytes leftover after parsing attributes in process `syz.1.68'. [ 32.341504][ T5037] udc dummy_udc.0: soft-connect without a gadget driver [ 32.462723][ T5057] syz.3.78 uses obsolete (PF_INET,SOCK_PACKET) [ 32.535693][ T5065] vlan2: entered allmulticast mode [ 32.536898][ T5065] macsec0: entered allmulticast mode [ 32.536937][ T5065] veth1_macvtap: entered allmulticast mode [ 32.663511][ T5079] loop1: detected capacity change from 0 to 128 [ 32.963988][ T5120] loop2: detected capacity change from 0 to 512 [ 32.968273][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.972095][ T5120] EXT4-fs: Ignoring removed nobh option [ 32.978819][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.010249][ T5120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.057493][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 33.074227][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.157340][ T5146] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 33.160625][ T5148] vlan2: entered promiscuous mode [ 33.160666][ T5148] bond0: entered promiscuous mode [ 33.160675][ T5148] bond_slave_0: entered promiscuous mode [ 33.160736][ T5148] bond_slave_1: entered promiscuous mode [ 33.186025][ T5152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 33.196019][ T5152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 33.241332][ T5160] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 ! [ 33.305649][ T4718] Bluetooth: hci3: command tx timeout [ 33.384930][ T4718] Bluetooth: hci2: command tx timeout [ 33.396141][ T4719] Bluetooth: hci0: command tx timeout [ 33.396174][ T4719] Bluetooth: hci1: command tx timeout [ 33.398286][ T4718] Bluetooth: hci4: command tx timeout [ 33.402000][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 33.532579][ T5196] loop3: detected capacity change from 0 to 512 [ 33.555151][ T5196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.599544][ T5196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.640871][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.870067][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 34.025714][ T5251] loop2: detected capacity change from 0 to 256 [ 34.040634][ T5251] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 34.042724][ T5251] FAT-fs (loop2): Filesystem has been set read-only [ 34.280287][ T5288] loop3: detected capacity change from 0 to 128 [ 34.284567][ T5288] FAT-fs (loop3): bogus logical sector size 0 [ 34.284610][ T5288] FAT-fs (loop3): Can't find a valid FAT filesystem [ 34.298563][ T4397] veth0_vlan: left promiscuous mode [ 34.306612][ T4795] veth0_vlan: entered promiscuous mode [ 34.736105][ T5333] loop0: detected capacity change from 0 to 8 [ 34.776777][ T5333] SQUASHFS error: Failed to read block 0x260685: -5 [ 34.778253][ T5333] SQUASHFS error: Unable to read metadata cache entry [260685] [ 34.779730][ T5333] SQUASHFS error: Unable to read directory block [260685:0] [ 35.007665][ T5360] vhci_hcd: not connected 4 [ 35.169523][ T5376] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 35.230687][ T5385] usb_storage.quirks: string doesn't fit in 127 chars. [ 35.286854][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.366817][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.385222][ T4718] Bluetooth: hci3: command tx timeout [ 35.387605][ T5407] netlink: 'syz.3.224': attribute type 3 has an invalid length. [ 35.447660][ T5412] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.465165][ T4718] Bluetooth: hci4: command tx timeout [ 35.465569][ T4712] Bluetooth: hci1: command tx timeout [ 35.465591][ T4712] Bluetooth: hci0: command tx timeout [ 35.465606][ T4712] Bluetooth: hci2: command tx timeout [ 35.528143][ T5424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.548771][ T5424] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.229: corrupted xattr block 33: invalid header [ 35.550200][ T5424] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.229: corrupted xattr block 33: invalid header [ 35.562333][ T5424] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.229: corrupted xattr block 33: invalid header [ 35.604665][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.702304][ T5444] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.706682][ T5444] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.735791][ T5449] bridge0: port 3(syz_tun) entered blocking state [ 35.735924][ T5449] bridge0: port 3(syz_tun) entered disabled state [ 35.736080][ T5449] syz_tun: entered allmulticast mode [ 35.736915][ T5449] syz_tun: entered promiscuous mode [ 35.737240][ T5449] bridge0: port 3(syz_tun) entered blocking state [ 35.737279][ T5449] bridge0: port 3(syz_tun) entered forwarding state [ 35.852845][ T5471] __nla_validate_parse: 6 callbacks suppressed [ 35.854030][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 35.900921][ T5468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.907105][ T5477] netlink: 'syz.0.248': attribute type 39 has an invalid length. [ 35.911909][ T5482] ip_tables: iptables: counters copy to user failed while replacing table [ 35.982497][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.160569][ T4810] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 36.163500][ T4810] hid-generic 0000:FFFFFFFE:0800.0001: unknown main item tag 0x0 [ 36.168138][ T4810] hid-generic 0000:FFFFFFFE:0800.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.226207][ T5517] fido_id[5517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.338998][ T5534] set_capacity_and_notify: 6 callbacks suppressed [ 36.339038][ T5534] loop2: detected capacity change from 0 to 512 [ 36.370764][ T5534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.378082][ T5534] EXT4-fs (loop2): shut down requested (1) [ 36.395631][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.445900][ T5552] netlink: 'syz.0.270': attribute type 2 has an invalid length. [ 36.579311][ T5578] Injecting memory failure for pfn 0x120b0a at process virtual address 0x2050a000 [ 36.596564][ T5578] Memory failure: 0x120b0a: recovery action for clean LRU page: Recovered [ 36.739567][ T5592] loop0: detected capacity change from 0 to 512 [ 36.746332][ T5592] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: comm syz.0.281: inode #2147418112: comm syz.0.281: iget: illegal inode # [ 36.746408][ T5592] loop0: lost filesystem error report for type 5 error -117 [ 36.748046][ T5592] EXT4-fs (loop0): no journal found [ 36.748067][ T5592] EXT4-fs (loop0): can't get journal size [ 36.750370][ T5592] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.750561][ T5592] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 36.751028][ T5592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.766241][ T5592] EXT4-fs (loop0): shut down requested (2) [ 36.776332][ T5595] netlink: 'syz.4.282': attribute type 12 has an invalid length. [ 36.776360][ T5595] netlink: 'syz.4.282': attribute type 29 has an invalid length. [ 36.776384][ T5595] netlink: 148 bytes leftover after parsing attributes in process `syz.4.282'. [ 36.776400][ T5595] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 36.776411][ T5595] netlink: 'syz.4.282': attribute type 2 has an invalid length. [ 36.783252][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.045460][ T5624] loop9: detected capacity change from 0 to 524287998 [ 37.086221][ T5631] Injecting memory failure for pfn 0x135dda at process virtual address 0x20000000 [ 37.091759][ T5631] Memory failure: 0x135dda: Sending SIGBUS to syz.4.291:5631 due to hardware memory corruption [ 37.091854][ T5631] Memory failure: 0x135dda: recovery action for dirty LRU page: Recovered [ 37.091880][ T5631] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 37.095010][ T5631] Memory failure: 0x219250: unhandlable page. [ 37.095025][ T5631] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 37.105661][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 37.127462][ T5635] loop3: detected capacity change from 0 to 512 [ 37.137173][ T5635] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.139776][ T5635] EXT4-fs (loop3): 1 truncate cleaned up [ 37.140260][ T5635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.213966][ T5644] netlink: 'syz.4.304': attribute type 8 has an invalid length. [ 37.296913][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.376902][ T5665] loop0: detected capacity change from 0 to 4096 [ 37.379603][ T5665] EXT4-fs: inline encryption not supported [ 37.382621][ T5669] loop2: detected capacity change from 0 to 512 [ 37.384732][ T5665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.389292][ T5665] EXT4-fs (loop0): Test dummy encryption mode enabled [ 37.421084][ T5673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 37.422909][ T5673] veth0: entered promiscuous mode [ 37.426109][ T5665] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 37.428754][ T5665] System zones: 0-5 [ 37.429732][ T5673] veth0: left promiscuous mode [ 37.430364][ T5665] [ 37.433891][ T5665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.443607][ T5669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.464896][ T4718] Bluetooth: hci3: command tx timeout [ 37.473238][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.476745][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.522562][ T5684] WARNING! power/level is deprecated; use power/control instead [ 37.546034][ T4718] Bluetooth: hci4: command tx timeout [ 37.546935][ T5690] loop1: detected capacity change from 0 to 128 [ 37.555503][ T4719] Bluetooth: hci0: command tx timeout [ 37.555538][ T4719] Bluetooth: hci1: command tx timeout [ 37.555578][ T4718] Bluetooth: hci2: command tx timeout [ 37.568034][ T5690] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.586056][ T5697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.328'. [ 37.588092][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 37.602268][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.729503][ T30] audit: type=1400 audit(37.690:2): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lowerdir" requested=r pid=5716 comm="syz.2.339" path="/74/file1" dev="tmpfs" ino=402 [ 37.823104][ T5734] Bluetooth: MGMT ver 1.23 [ 37.823157][ T5734] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 37.951640][ T5752] loop1: detected capacity change from 0 to 512 [ 37.965967][ T5752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.985399][ T5752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.005430][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 38.038806][ T5768] loop4: detected capacity change from 0 to 512 [ 38.062501][ T5768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.072553][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.140543][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.160115][ T5786] loop2: detected capacity change from 0 to 256 [ 38.280974][ T5800] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.285617][ T5800] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.311663][ T5800] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 38.316312][ T5802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.369388][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 38.380274][ T4722] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.392009][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.419404][ T5815] sctp: [Deprecated]: syz.1.382 (pid 5815) Use of int in maxseg socket option. [ 38.419404][ T5815] Use struct sctp_assoc_value instead [ 38.497652][ T5826] batadv_slave_1: entered promiscuous mode [ 38.499413][ T5826] macvlan2: entered allmulticast mode [ 38.499451][ T5826] batadv_slave_1: entered allmulticast mode [ 38.504229][ T5826] batman_adv: batadv0: Adding interface: macvlan2 [ 38.504261][ T5826] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.504283][ T5826] batman_adv: batadv0: Interface activated: macvlan2 [ 38.515373][ T5830] EXT4-fs: Ignoring removed bh option [ 38.521787][ T5830] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.548252][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.586956][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.744365][ T5856] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 38.744398][ T5856] FAT-fs (loop1): Filesystem has been set read-only [ 38.932057][ T4718] Bluetooth: Fragment is too long (len 46, expected 2) [ 38.983831][ T5899] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.062043][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.175838][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.2.419'. [ 39.177576][ T5927] netlink: 48 bytes leftover after parsing attributes in process `syz.2.419'. [ 39.212319][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.212538][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.215205][ T4718] Bluetooth: hci3: Malformed LE Event: 0x0d [ 39.259491][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.259862][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.262337][ T5940] bridge0: entered allmulticast mode [ 39.311903][ T5947] input: syz1 as /devices/virtual/input/input2 [ 39.349834][ T5954] usb usb8: usbfs: process 5954 (syz.4.430) did not claim interface 0 before use [ 39.670480][ T5992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.679110][ T5992] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.448: corrupted xattr block 33: invalid header [ 39.681337][ T5992] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.448: corrupted xattr block 33: invalid header [ 39.682247][ T5992] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.448: corrupted xattr block 33: invalid header [ 39.726663][ T5992] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.448: corrupted xattr block 33: invalid header [ 39.733533][ T5992] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 39.734044][ T5992] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 39.734059][ T5992] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.734059][ T5992] [ 39.734067][ T5992] EXT4-fs (loop1): Total free blocks count 0 [ 39.734074][ T5992] EXT4-fs (loop1): Free/Dirty block details [ 39.734085][ T5992] EXT4-fs (loop1): free_blocks=65280 [ 39.734096][ T5992] EXT4-fs (loop1): dirty_blocks=31 [ 39.734110][ T5992] EXT4-fs (loop1): Block reservation details [ 39.734117][ T5992] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 39.790998][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.807260][ T6003] Alternate GPT is invalid, using primary GPT. [ 39.807315][ T6003] loop4: p1 p2 p3 [ 39.850291][ T4342] Alternate GPT is invalid, using primary GPT. [ 39.850346][ T4342] loop4: p1 p2 p3 [ 39.903058][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 39.919333][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 39.928834][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.022983][ T6020] udevd[6020]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.028597][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.031153][ T6025] misc userio: Begin command sent, but we're already running [ 40.041105][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.065910][ T6031] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96 [ 40.140606][ T6045] tipc: Started in network mode [ 40.140649][ T6045] tipc: Node identity ac14140f, cluster identity 4711 [ 40.140971][ T6045] tipc: New replicast peer: 255.255.255.255 [ 40.141273][ T6045] tipc: Enabled bearer , priority 10 [ 40.202341][ T6055] Injecting memory failure for pfn 0x136a07 at process virtual address 0x20036000 [ 40.210357][ T6055] Memory failure: 0x136a07: recovery action for clean LRU page: Recovered [ 40.210394][ T6055] Injecting memory failure for pfn 0x13687f at process virtual address 0x20037000 [ 40.215330][ T6055] Memory failure: 0x13687f: recovery action for clean LRU page: Recovered [ 40.215362][ T6055] Injecting memory failure for pfn 0x137202 at process virtual address 0x20038000 [ 40.215548][ T6055] Memory failure: 0x137202: recovery action for clean LRU page: Recovered [ 40.215558][ T6055] Injecting memory failure for pfn 0x134995 at process virtual address 0x20039000 [ 40.215595][ T6055] Memory failure: 0x134995: recovery action for clean LRU page: Recovered [ 40.359030][ T6062] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 40.359030][ T6062] The task syz.1.478 (6062) triggered the difference, watch for misbehavior. [ 40.433783][ T6071] Bluetooth: MGMT ver 1.23 [ 40.532820][ T6081] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.534456][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.556488][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.843772][ T6113] dummy_hcd dummy_hcd.0: remove, state 4 [ 40.846459][ T6113] usb usb1: USB disconnect, device number 1 [ 40.858192][ T6113] dummy_hcd dummy_hcd.0: stopped [ 40.859210][ T6113] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 40.997998][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.072467][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.238521][ T6152] process 'syz.1.520' launched './file2' with NULL argv: empty string added [ 41.255652][ T4803] tipc: Node number set to 2886997007 [ 41.397179][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.473734][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.578271][ T6184] set_capacity_and_notify: 16 callbacks suppressed [ 41.578312][ T6184] loop0: detected capacity change from 0 to 256 [ 41.728184][ T6198] loop2: detected capacity change from 0 to 256 [ ** replaying previous printk message ** [ 42.023579][ T6222] Unable to handle kernel paging request at virtual address dfff800000000000 [ 42.023612][ T6222] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 42.023621][ T6222] Mem abort info: [ 42.023625][ T6222] ESR = 0x0000000096000005 [ 42.023632][ T6222] EC = 0x25: DABT (current EL), IL = 32 bits [ 42.023639][ T6222] SET = 0, FnV = 0 [ 42.023644][ T6222] EA = 0, S1PTW = 0 [ 42.023648][ T6222] FSC = 0x05: level 1 translation fault [ 42.023653][ T6222] Data abort info: [ 42.023656][ T6222] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 42.023661][ T6222] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 42.023667][ T6222] GCS = 0, Overlay = 0, DirtyBit = 0 [ 42.023672][ T6222] [dfff800000000000] address between user and kernel address ranges [ 42.023697][ T6222] Internal error: Oops: 0000000096000005 [#1] SMP [ 42.037750][ T6222] Modules linked in: [ 42.038432][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.0.548 Tainted: G L syzkaller #0 PREEMPT [ 42.040130][ T6222] Tainted: [L]=SOFTLOCKUP [ 42.040841][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.042533][ T6222] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.043875][ T6222] pc : dummy_udc_start+0xdc/0x1d8 [ 42.044769][ T6222] lr : dummy_udc_start+0xd8/0x1d8 [ 42.045656][ T6222] sp : ffff800095cf76c0 [ 42.046311][ T6222] x29: ffff800095cf76c0 x28: 1fffe000195a3601 x27: 1fffe0001bebd027 [ 42.047764][ T6222] x26: dfff800000000000 x25: 1fffe000195a3600 x24: ffff8000835b7d98 [ 42.049177][ T6222] x23: ffff0000c9058c00 x22: dfff800000000000 x21: 0000000000000003 [ 42.050562][ T6222] x20: 0000000000000000 x19: ffff0000df5e8050 x18: 00000000ffffffff [ 42.051908][ T6222] x17: ffff80008a791000 x16: 0000000000000002 x15: ffff80008a31ada0 [ 42.053341][ T6222] x14: ffff80008a590e28 x13: 0000000000000001 x12: 0000000000000000 [ 42.054793][ T6222] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000067e8 [ 42.056187][ T6222] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 42.057581][ T6222] x5 : 0000000000000030 x4 : 0000000000000008 x3 : ffff8000835b7e2c [ 42.058944][ T6222] x2 : 0000000000000003 x1 : ffff0000c475d7c0 x0 : 0000000000000001 [ 42.060289][ T6222] Call trace: [ 42.060814][ T6222] dummy_udc_start+0xdc/0x1d8 (P) [ 42.061667][ T6222] gadget_bind_driver+0x328/0x834 [ 42.062505][ T6222] really_probe+0x29c/0x800 [ 42.063279][ T6222] __driver_probe_device+0x1e0/0x350 [ 42.064208][ T6222] driver_probe_device+0x6c/0x19c [ 42.065081][ T6222] __driver_attach+0x168/0x384 [ 42.065877][ T6222] bus_for_each_dev+0x128/0x1b4 [ 42.066706][ T6222] driver_attach+0x50/0x60 [ 42.067456][ T6222] bus_add_driver+0x208/0x500 [ 42.068268][ T6222] driver_register+0x220/0x310 [ 42.069102][ T6222] usb_gadget_register_driver_owner+0xf0/0x25c [ 42.070130][ T6222] raw_ioctl+0x10f8/0x356c [ 42.070889][ T6222] __arm64_sys_ioctl+0x154/0x1cc [ 42.071811][ T6222] invoke_syscall+0x98/0x244 [ 42.072605][ T6222] el0_svc_common+0xec/0x23c [ 42.073441][ T6222] do_el0_svc+0x4c/0x5c [ 42.074184][ T6222] el0_svc+0x64/0x260 [ 42.074905][ T6222] el0t_64_sync_handler+0x48/0x148 [ 42.075758][ T6222] el0t_64_sync+0x198/0x19c [ 42.076529][ T6222] Code: 97427b72 14000002 97427b70 d343fe88 (38766908) [ 42.077723][ T6222] ---[ end trace 0000000000000000 ]--- [ 42.275086][ T6222] Kernel panic - not syncing: Oops: Fatal exception [ 42.276223][ T6222] SMP: stopping secondary CPUs [ 42.277049][ T6222] Kernel Offset: disabled [ 42.277778][ T6222] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 42.278922][ T6222] Memory Limit: none [ 42.474991][ T6222] Rebooting in 86400 seconds..