last executing test programs: 14.749388303s ago: executing program 0 (id=1036): syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfffffffffffffffe, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) pwritev(r0, 0x0, 0x0, 0xfffffffc, 0x0) process_mrelease(0xffffffffffffffff, 0x1000000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x17, 0x3, 0x0, 0xb, 0x1000a, 0x4, 0x5, 0x82}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.459138277s ago: executing program 0 (id=1038): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0xa4a, &(0x7f00000007c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8840) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3772, &(0x7f0000000380)={0x0, 0xf7a6, 0x2000, 0x3, 0x107ff}, &(0x7f0000000040), &(0x7f0000000400)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 12.744762758s ago: executing program 1 (id=1053): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) umount2(0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 12.216577715s ago: executing program 1 (id=1045): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1e, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa050835f7519d5f73b4f5d80ebb881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 11.742432831s ago: executing program 1 (id=1050): syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x10, 0x42000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000200)={r5, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "ae3151b9dd0fe9ca443e8ae600", [0x2]}}) 9.961940973s ago: executing program 4 (id=1051): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1a, 0x6, 0x4) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x1100100) keyctl$chown(0x6, r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 9.883986314s ago: executing program 2 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 9.879417704s ago: executing program 0 (id=1054): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x200001, 0x25) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x9, 0xfffffffffffffffd, 0x6}, 0x0, &(0x7f00000002c0)={0x3fc, 0x100000000000, 0x0, 0x7ff, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0) 9.831984055s ago: executing program 3 (id=1055): syz_open_dev$media(0x0, 0x4007, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) add_key(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000002090101002000000000000002001f020900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0xc800) syz_open_pts(0xffffffffffffffff, 0x22000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a000000000000000100000d000000000600000001"], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 8.922362786s ago: executing program 3 (id=1056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) 8.63282069s ago: executing program 4 (id=1057): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x237, &(0x7f00000009c0)="$eJzs3EGLG2UYB/DHbW23W9rsQQQF8UUvehm68RMEaUEMKGsj6kGYuhMNGZMlE1YiYnvz6ucoHr0J6hfYizfv3vYieOlBjDTJtkmNiOA62vx+EN4nvPnDM2QSnglkTt758uN+t8q6+Ti2tlNsRdyJexG796uFJxbr1qy+EMvuxMuXf/nxubfefe/1Vrt9fT+lG62brzRTSlef//aTz7564fvx5be/vvrNxTjeff/k5+ZPx08fP3Py282PelXqVWkwHKc83RoOx/mtskgHvaqfpfRmWeRVkXqDqhit7HfL4eHhJOWDgys7h6OiqlI+mKR+MUnjYRqPJin/MO8NUpZl6cpO8Fc6d/f381bdXXC2RqNWfi4iLv1hp3O3loYAgFqZ/zeZ+X8T3J//dxaf31XmfwAAAAAAAAAAAAAA+D+4N502ptNp43Q9fVyMiO2IOH1ed5+cDe//Zlv64952RPnFUeeoM1/n+61u9KKMIq5FI36dnQ8L8/rGa+3r19LMbnxX3l7kbx91zq3m96IRu+vze/N8Ws0/GTvL+WY04qn1+eba/IV46cWlfBaN+OGDGEYZB7Pz+mH+872UXn2j/Uj+0ux1AAAA8DjI0gNrr9+z7M/25/m/8fvAI9fX5+PZ8/UeOwAAAGyKavJpPy/LYqRQKBQPirq/mQAAgH/aw6G/7k4AAAAAAAAAAAAAAAAAAABgc/0btxOr+xgBAAAAAAAAAAAAAAAAAAAAAADgv+L3AAAA///u3zAA") openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") open(0x0, 0x64842, 0x86) chdir(&(0x7f0000000540)='./file0\x00') rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)='./file1\x00') rmdir(&(0x7f0000000480)='./file0\x00') 7.893223469s ago: executing program 2 (id=1058): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000440)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@uid}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") r0 = syz_io_uring_setup(0xd, &(0x7f0000000200), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r0, 0x19bc, 0x0, 0x0, 0x0, 0x0) 4.69264648s ago: executing program 4 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x71, 0x6000, @fd_index=0x5, 0x2, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x1c, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20008090) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(r4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@nodelalloc}, {@norecovery}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") 4.450525503s ago: executing program 2 (id=1060): syz_open_dev$vim2m(0x0, 0x7f, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0) 4.446390613s ago: executing program 0 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000005cc0)={[{@utf8no}, {@shortname_win95}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_lower}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0xb7d4, 0x1001f0) 4.396771414s ago: executing program 1 (id=1062): socket$can_j1939(0x1d, 0x2, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) socket$kcm(0x29, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x200000000000000, 0x802) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4.254400706s ago: executing program 3 (id=1063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x225c17d03, &(0x7f0000000080)={0x0, 0x989680}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0}, &(0x7f0000000180)=0x40) 3.325196137s ago: executing program 2 (id=1064): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2, 0x0, r3}, 0x10) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xa5}], 0x2, 0x2060, 0x0) 3.320963677s ago: executing program 4 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000004000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.018272492s ago: executing program 4 (id=1066): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000440), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, 0x0, 0x48804) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6fef, 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) 2.3065568s ago: executing program 1 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x7fc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x18, r3, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 2.306336431s ago: executing program 2 (id=1068): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f3"], 0x280) 2.218474581s ago: executing program 3 (id=1069): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 2.003383074s ago: executing program 3 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x8, 0xd}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) fchmod(0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.967812285s ago: executing program 0 (id=1071): ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000140)={0x1, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) 301.602426ms ago: executing program 0 (id=1072): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x237, &(0x7f00000009c0)="$eJzs3EGLG2UYB/DHbW23W9rsQQQF8UUvehm68RMEaUEMKGsj6kGYuhMNGZMlE1YiYnvz6ucoHr0J6hfYizfv3vYieOlBjDTJtkmNiOA62vx+EN4nvPnDM2QSnglkTt758uN+t8q6+Ti2tlNsRdyJexG796uFJxbr1qy+EMvuxMuXf/nxubfefe/1Vrt9fT+lG62brzRTSlef//aTz7564fvx5be/vvrNxTjeff/k5+ZPx08fP3Py282PelXqVWkwHKc83RoOx/mtskgHvaqfpfRmWeRVkXqDqhit7HfL4eHhJOWDgys7h6OiqlI+mKR+MUnjYRqPJin/MO8NUpZl6cpO8Fc6d/f381bdXXC2RqNWfi4iLv1hp3O3loYAgFqZ/zeZ+X8T3J//dxaf31XmfwAAAAAAAAAAAAAA+D+4N502ptNp43Q9fVyMiO2IOH1ed5+cDe//Zlv64952RPnFUeeoM1/n+61u9KKMIq5FI36dnQ8L8/rGa+3r19LMbnxX3l7kbx91zq3m96IRu+vze/N8Ws0/GTvL+WY04qn1+eba/IV46cWlfBaN+OGDGEYZB7Pz+mH+872UXn2j/Uj+0ux1AAAA8DjI0gNrr9+z7M/25/m/8fvAI9fX5+PZ8/UeOwAAAGyKavJpPy/LYqRQKBQPirq/mQAAgH/aw6G/7k4AAAAAAAAAAAAAAAAAAABgc/0btxOr+xgBAAAAAAAAAAAAAAAAAAAAAADgv+L3AAAA///u3zAA") openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) 282.173486ms ago: executing program 1 (id=1073): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x237, &(0x7f00000009c0)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") 281.866336ms ago: executing program 2 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x0, r4, 0x0, 0x8, 0x0) waitid(0x1, r4, 0x0, 0x4, 0x0) 279.433526ms ago: executing program 3 (id=1075): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x76, 0x101301) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 0s ago: executing program 4 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getsig(0x4202, r0, 0x7, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) kernel console output (not intermixed with test programs): 8] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.041835][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.061212][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.075772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.086047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.120425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.131092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.140135][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.147212][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.155945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.165288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.173868][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.180969][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.190551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.199446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.207822][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.214914][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.224611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.233713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.242692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.249864][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.258109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.267196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.276047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.284516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.335332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.343288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.351228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.360514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.371103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.380252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.389297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.397777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.407012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.416761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.428204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.437233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.446370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.454651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.467607][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.486650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.495743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.516281][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.527088][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.559836][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.566780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.575901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.587205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.596129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.604786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.614244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.628641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.641350][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.650932][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.685153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.695177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.712335][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.728882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.745741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.771631][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.800615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.810799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.823636][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.830796][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.840220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.848001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.858940][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 66.865297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.873251][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 66.880305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.888973][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 66.890145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.895343][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 66.910925][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.918112][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.925740][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 66.926356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.959154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.968860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.977366][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.984467][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.995169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.004906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.013596][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.020692][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.030803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.038263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.046250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.063678][ T4166] device veth0_vlan entered promiscuous mode [ 67.076937][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.086575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.097220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.107611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.117858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.127429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.137430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.146066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.174924][ T4166] device veth1_vlan entered promiscuous mode [ 67.183848][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.194277][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.203271][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.212567][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.221616][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.230133][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.267703][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.277123][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.286228][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.297002][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.306439][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.314236][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.322062][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.331016][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.340670][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.350626][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.360402][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.369007][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.377316][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.386688][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.399868][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.411853][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.431811][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.447486][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.471354][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.494762][ T4168] device veth0_vlan entered promiscuous mode [ 67.530676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.543079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.553116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.561963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.585680][ T4166] device veth0_macvtap entered promiscuous mode [ 67.596183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.609733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.637255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.664617][ T4168] device veth1_vlan entered promiscuous mode [ 67.684125][ T4166] device veth1_macvtap entered promiscuous mode [ 67.747955][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.780535][ T4168] device veth0_macvtap entered promiscuous mode [ 67.798118][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.814385][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.825791][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.840614][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.851044][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.860324][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.869234][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.877796][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.892663][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.911490][ T4168] device veth1_macvtap entered promiscuous mode [ 67.924723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.933755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.941772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.950086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.960491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.970310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.977768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.990436][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.999495][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008200][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.017314][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.040864][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.069211][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.078310][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.093564][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.125387][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.136957][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.149632][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.176485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.186905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.210545][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.222459][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.234416][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.249976][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.259969][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.269554][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.278239][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.289742][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.299591][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.308277][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.317321][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.326298][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.335355][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.344389][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.354085][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.363080][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.372051][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.425935][ T4176] device veth0_vlan entered promiscuous mode [ 68.455809][ T4174] device veth0_vlan entered promiscuous mode [ 68.474844][ T4176] device veth1_vlan entered promiscuous mode [ 68.484396][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.492791][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.503862][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.512777][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.522329][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.553347][ T4174] device veth1_vlan entered promiscuous mode [ 68.565175][ T4167] device veth0_vlan entered promiscuous mode [ 68.578990][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.587287][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.595727][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.604909][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.613270][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.622182][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.652995][ T4167] device veth1_vlan entered promiscuous mode [ 68.660300][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.674133][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.685127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.697642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.706626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.715847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.724896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.745986][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.768026][ T4176] device veth0_macvtap entered promiscuous mode [ 68.775262][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.810368][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.821466][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.830407][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.838253][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.847549][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.859479][ T4176] device veth1_macvtap entered promiscuous mode [ 68.877017][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.886665][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.888340][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.896558][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.908970][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.923959][ T4167] device veth0_macvtap entered promiscuous mode [ 68.937842][ T4167] device veth1_macvtap entered promiscuous mode [ 68.939310][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 68.952133][ T4174] device veth0_macvtap entered promiscuous mode [ 68.965988][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 68.967748][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.972801][ T4216] Bluetooth: hci4: command 0x040f tx timeout [ 68.982961][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.992919][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 68.995590][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.999975][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 69.008736][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.040810][ T4174] device veth1_macvtap entered promiscuous mode [ 69.063485][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.074854][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.087515][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.105059][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.118112][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.127921][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.138969][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.152271][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.162935][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.172908][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.184594][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.195913][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.204964][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.219459][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.225650][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.235383][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.245066][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.254191][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.263684][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.275625][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.286962][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.298739][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.310782][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.321292][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.333288][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.351232][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.367035][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.379218][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.397344][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.404714][ T4248] loop0: detected capacity change from 0 to 512 [ 69.409188][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.428035][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.437968][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.449069][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.461306][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.471259][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.481855][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.492179][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.506592][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.516785][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.531998][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.542024][ T4248] EXT4-fs error (device loop0): ext4_fill_super:4841: inode #2: comm syz.0.1: iget: bad i_size value: -1 [ 69.544274][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.564803][ T4248] EXT4-fs (loop0): get root inode failed [ 69.567604][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.570613][ T4248] EXT4-fs (loop0): mount failed [ 69.581796][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.604651][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.613604][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.624925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.635834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.645172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.654395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.665182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.674433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.685314][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.696696][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.706662][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.717210][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.738001][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.750267][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.761873][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.772841][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.786540][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.807859][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.818017][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.827884][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.838130][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.991347][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.000607][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.014860][ T4174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.024084][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.033272][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.042729][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314620][ T4251] loop0: detected capacity change from 0 to 128 [ 70.394481][ T4251] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. [ 71.029242][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 71.055248][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 71.617251][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 71.700232][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 71.709922][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.717781][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.744580][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 71.839355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.132534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.234920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.309240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.337393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.539695][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.599515][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.917419][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.952184][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.996543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.050586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.176332][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.226709][ T4270] loop4: detected capacity change from 0 to 256 [ 73.234758][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.269941][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.286738][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.288178][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.317131][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.325200][ T4272] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 73.333740][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.384824][ T4272] device ip6erspan0 entered promiscuous mode [ 73.489007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.497054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.508113][ T4273] 8021q: VLANs not supported on ip6gre0 [ 73.518978][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.540616][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 73.553525][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.832174][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.867025][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.023101][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 75.368761][ T4301] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 75.368761][ T4301] The task syz.1.15 (4301) triggered the difference, watch for misbehavior. [ 76.533249][ T4314] loop3: detected capacity change from 0 to 1024 [ 76.617768][ T4314] ======================================================= [ 76.617768][ T4314] WARNING: The mand mount option has been deprecated and [ 76.617768][ T4314] and is ignored by this kernel. Remove the mand [ 76.617768][ T4314] option from the mount to silence this warning. [ 76.617768][ T4314] ======================================================= [ 76.684555][ T4314] EXT4-fs (loop3): Ignoring removed nobh option [ 76.740621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.757053][ T4314] EXT4-fs (loop3): Ignoring removed bh option [ 76.836330][ T4314] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.858866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.018487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #210!!! [ 77.252673][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.326998][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 77.877295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.775070][ T4330] loop0: detected capacity change from 0 to 256 [ 81.582204][ T1107] cfg80211: failed to load regulatory.db [ 82.975085][ T4358] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.134716][ T4360] netlink: zone id is out of range [ 83.184218][ T4360] netlink: zone id is out of range [ 83.210146][ T4360] netlink: zone id is out of range [ 83.252976][ T4360] netlink: zone id is out of range [ 83.284876][ T4360] netlink: zone id is out of range [ 83.298805][ T4360] netlink: zone id is out of range [ 83.305346][ T4360] netlink: zone id is out of range [ 83.346052][ T4360] netlink: zone id is out of range [ 84.058491][ T4360] netlink: zone id is out of range [ 84.064293][ T4360] netlink: zone id is out of range [ 84.414331][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 84.550825][ T4369] loop2: detected capacity change from 0 to 512 [ 84.657324][ T4369] EXT4-fs (loop2): Unrecognized mount option "resgid=0x0000000000000000.subj_type=Pè_+±á[à¥" or missing value [ 86.521110][ T4404] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 86.584535][ T4404] loop0: detected capacity change from 0 to 1024 [ 88.007913][ T4426] loop0: detected capacity change from 0 to 64 [ 89.005258][ T26] audit: type=1326 audit(1745491965.306:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7fc00000 [ 90.122059][ T4434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.460506][ T4228] attempt to access beyond end of device [ 91.460506][ T4228] loop0: rw=1, want=162, limit=64 [ 91.514034][ T4228] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 91.525474][ T4228] attempt to access beyond end of device [ 91.525474][ T4228] loop0: rw=1, want=163, limit=64 [ 91.536745][ T4228] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 91.554386][ T4228] attempt to access beyond end of device [ 91.554386][ T4228] loop0: rw=1, want=164, limit=64 [ 91.585676][ T4228] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 91.603717][ T4228] attempt to access beyond end of device [ 91.603717][ T4228] loop0: rw=1, want=168, limit=64 [ 91.615098][ T4446] netlink: 'syz.4.60': attribute type 11 has an invalid length. [ 91.626722][ T4228] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 91.643523][ T4228] attempt to access beyond end of device [ 91.643523][ T4228] loop0: rw=1, want=170, limit=64 [ 91.654717][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.670510][ T4228] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 91.683831][ T4446] loop4: detected capacity change from 0 to 1024 [ 91.693164][ T4228] attempt to access beyond end of device [ 91.693164][ T4228] loop0: rw=1, want=172, limit=64 [ 91.705122][ T4228] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 91.716990][ T4228] attempt to access beyond end of device [ 91.716990][ T4228] loop0: rw=1, want=173, limit=64 [ 91.730815][ T4228] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 91.740282][ T4228] attempt to access beyond end of device [ 91.740282][ T4228] loop0: rw=1, want=174, limit=64 [ 91.754385][ T4228] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 91.764133][ T4228] attempt to access beyond end of device [ 91.764133][ T4228] loop0: rw=1, want=175, limit=64 [ 91.785370][ T4228] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 91.799163][ T4228] attempt to access beyond end of device [ 91.799163][ T4228] loop0: rw=1, want=176, limit=64 [ 91.821548][ T4228] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 91.908673][ T4262] usb 4-1: Using ep0 maxpacket: 16 [ 92.045722][ T4453] lo speed is unknown, defaulting to 1000 [ 92.052149][ T4453] lo speed is unknown, defaulting to 1000 [ 92.068848][ T4453] lo speed is unknown, defaulting to 1000 [ 92.095841][ T4453] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.137526][ T4453] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.355894][ T4453] lo speed is unknown, defaulting to 1000 [ 92.370533][ T4453] lo speed is unknown, defaulting to 1000 [ 92.382839][ T4453] lo speed is unknown, defaulting to 1000 [ 92.395569][ T4453] lo speed is unknown, defaulting to 1000 [ 92.407146][ T4453] lo speed is unknown, defaulting to 1000 [ 92.991195][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 93.028501][ T4262] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 93.036607][ T4262] usb 4-1: can't read configurations, error -71 [ 93.060487][ T4457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.61'. [ 93.470882][ T4474] loop1: detected capacity change from 0 to 256 [ 93.768939][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 93.786205][ T4481] device bridge_slave_1 left promiscuous mode [ 93.794762][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.894348][ T4481] device bridge_slave_0 left promiscuous mode [ 93.934256][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.421372][ T26] audit: type=1326 audit(1745491972.726:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7fc00000 [ 96.614341][ T26] audit: type=1326 audit(1745491972.866:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f572f892b39 code=0x7fc00000 [ 97.027881][ T4521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.588108][ T4532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.833587][ T4212] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 98.514420][ T4539] netlink: 41518 bytes leftover after parsing attributes in process `syz.0.85'. [ 98.596080][ T4185] block nbd2: Receive control failed (result -32) [ 98.605792][ T4185] block nbd2: Receive control failed (result -32) [ 98.616208][ T4536] block nbd2: shutting down sockets [ 98.848421][ T4553] Zero length message leads to an empty skb [ 98.857007][ T4553] lo speed is unknown, defaulting to 1000 [ 98.889035][ T4553] lo speed is unknown, defaulting to 1000 [ 99.653987][ T4504] block nbd3: shutting down sockets [ 99.660457][ T4555] loop2: detected capacity change from 0 to 64 [ 99.723132][ T4553] lo speed is unknown, defaulting to 1000 [ 100.265042][ T4553] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.290959][ T26] audit: type=1326 audit(1745491976.596:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 100.315323][ T4553] lo speed is unknown, defaulting to 1000 [ 100.324846][ T4553] lo speed is unknown, defaulting to 1000 [ 100.347384][ T4553] lo speed is unknown, defaulting to 1000 [ 100.360601][ T4553] lo speed is unknown, defaulting to 1000 [ 100.374866][ T4553] lo speed is unknown, defaulting to 1000 [ 101.175931][ T144] handle_bad_sector: 7 callbacks suppressed [ 101.175949][ T144] attempt to access beyond end of device [ 101.175949][ T144] loop2: rw=1, want=162, limit=64 [ 101.193442][ T26] audit: type=1326 audit(1745491976.626:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 101.236953][ T144] buffer_io_error: 6 callbacks suppressed [ 101.236966][ T144] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 101.253078][ T4576] loop0: detected capacity change from 0 to 1024 [ 101.281686][ T144] attempt to access beyond end of device [ 101.281686][ T144] loop2: rw=1, want=163, limit=64 [ 101.308583][ T26] audit: type=1326 audit(1745491976.626:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 101.345602][ T144] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 101.355490][ T144] attempt to access beyond end of device [ 101.355490][ T144] loop2: rw=1, want=164, limit=64 [ 101.372816][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 101.384263][ T26] audit: type=1326 audit(1745491976.626:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 101.395251][ T4576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.407104][ T144] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 101.427402][ T144] attempt to access beyond end of device [ 101.427402][ T144] loop2: rw=1, want=168, limit=64 [ 101.438263][ T144] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 101.447437][ T144] attempt to access beyond end of device [ 101.447437][ T144] loop2: rw=1, want=170, limit=64 [ 101.457469][ T26] audit: type=1326 audit(1745491977.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 101.460525][ T144] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 101.488482][ T144] attempt to access beyond end of device [ 101.488482][ T144] loop2: rw=1, want=172, limit=64 [ 101.499130][ T144] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 101.507701][ T144] attempt to access beyond end of device [ 101.507701][ T144] loop2: rw=1, want=173, limit=64 [ 101.552674][ T4575] device bridge_slave_1 left promiscuous mode [ 101.561532][ T144] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 101.574700][ T26] audit: type=1326 audit(1745491977.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 101.576269][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.606360][ T144] attempt to access beyond end of device [ 101.606360][ T144] loop2: rw=1, want=174, limit=64 [ 101.618570][ T144] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 101.629414][ T144] attempt to access beyond end of device [ 101.629414][ T144] loop2: rw=1, want=175, limit=64 [ 101.643935][ T144] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 101.656024][ T144] attempt to access beyond end of device [ 101.656024][ T144] loop2: rw=1, want=176, limit=64 [ 101.672622][ T26] audit: type=1326 audit(1745491977.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 101.676326][ T144] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 101.821993][ T4575] device bridge_slave_0 left promiscuous mode [ 101.974290][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.180367][ T26] audit: type=1326 audit(1745491977.316:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 102.256353][ T26] audit: type=1326 audit(1745491977.316:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 102.318212][ T26] audit: type=1326 audit(1745491977.376:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 102.425298][ T26] audit: type=1326 audit(1745491977.376:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 102.477263][ T26] audit: type=1326 audit(1745491977.376:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 102.516175][ T26] audit: type=1326 audit(1745491977.376:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 102.546534][ T26] audit: type=1326 audit(1745491977.396:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 105.358363][ C0] sched: RT throttling activated [ 105.614167][ T4602] block nbd4: shutting down sockets [ 105.648748][ T4212] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 107.042881][ T4630] loop1: detected capacity change from 0 to 256 [ 107.199177][ T4633] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure [ 107.227708][ T4637] loop4: detected capacity change from 0 to 512 [ 108.416139][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 108.416689][ T4637] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.837486][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 110.191532][ T4657] loop2: detected capacity change from 0 to 512 [ 110.272820][ T4657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.326356][ T4657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.409378][ T4657] EXT4-fs (loop2): 1 truncate cleaned up [ 110.415197][ T4657] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,noload,auto_da_alloc,,errors=continue. Quota mode: none. [ 110.599341][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 110.599362][ T26] audit: type=1800 audit(1745491986.876:33): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.115" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 112.012697][ T4674] loop3: detected capacity change from 0 to 4096 [ 112.037992][ T4677] loop2: detected capacity change from 0 to 1024 [ 112.052939][ T4674] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 112.077707][ T4677] EXT4-fs (loop2): Ignoring removed nobh option [ 112.100404][ T4677] EXT4-fs (loop2): Ignoring removed bh option [ 112.111027][ T4677] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.137876][ T4674] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 112.166949][ T4674] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 112.188848][ T4674] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 112.192045][ T4677] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 112.215933][ T4674] ntfs: volume version 3.1. [ 113.309407][ T4689] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 113.328002][ T4689] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 114.492208][ T4174] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 114.557710][ T4695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 115.804352][ T4212] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 115.820193][ T4212] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.631336][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 119.702222][ T4746] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.911299][ T26] audit: type=1326 audit(1745491996.216:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 119.934285][ T26] audit: type=1326 audit(1745491996.216:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 122.358150][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.948825][ T7] usb 2-1: device descriptor read/all, error -71 [ 123.685847][ T4762] loop1: detected capacity change from 0 to 256 [ 123.771063][ T4769] mmap: syz.3.145 (4769) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 124.809337][ T4783] netlink: 76 bytes leftover after parsing attributes in process `syz.4.153'. [ 124.937497][ T4783] syz.4.153 uses obsolete (PF_INET,SOCK_PACKET) [ 126.444935][ T4798] netlink: 'syz.3.156': attribute type 3 has an invalid length. [ 126.485064][ T4800] ubi31: attaching mtd0 [ 126.527204][ T4800] ubi31: scanning is finished [ 126.560574][ T4800] ubi31: empty MTD device detected [ 126.848906][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 127.603873][ T4800] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 127.627690][ T4800] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3753 bytes [ 127.646543][ T4800] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 127.656284][ T4800] ubi31: VID header offset: 279 (aligned 279), data offset: 343 [ 127.687387][ T4800] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 127.701594][ T4800] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 127.720617][ T4800] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1272178276 [ 127.737135][ T4800] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 127.754873][ T4817] ubi31: background thread "ubi_bgt31d" started, PID 4817 [ 130.723396][ T4842] netlink: 116 bytes leftover after parsing attributes in process `syz.1.166'. [ 130.755684][ T4841] netlink: 564 bytes leftover after parsing attributes in process `syz.3.168'. [ 131.864646][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 131.965303][ T4856] loop0: detected capacity change from 0 to 512 [ 132.201922][ T4856] EXT4-fs (loop0): 1 orphan inode deleted [ 132.208216][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.223272][ T4856] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.082772][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089216][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.406093][ T4886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 134.514945][ T4895] loop3: detected capacity change from 0 to 64 [ 135.909976][ T4889] lo speed is unknown, defaulting to 1000 [ 135.926089][ T4889] lo speed is unknown, defaulting to 1000 [ 136.072560][ T9] handle_bad_sector: 7 callbacks suppressed [ 136.072597][ T9] attempt to access beyond end of device [ 136.072597][ T9] loop3: rw=1, want=162, limit=64 [ 136.089600][ T9] buffer_io_error: 6 callbacks suppressed [ 136.089614][ T9] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 136.105038][ T9] attempt to access beyond end of device [ 136.105038][ T9] loop3: rw=1, want=163, limit=64 [ 136.186328][ T9] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 136.222980][ T9] attempt to access beyond end of device [ 136.222980][ T9] loop3: rw=1, want=164, limit=64 [ 136.260767][ T9] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 136.300932][ T9] attempt to access beyond end of device [ 136.300932][ T9] loop3: rw=1, want=168, limit=64 [ 136.330993][ T9] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 136.351085][ T9] attempt to access beyond end of device [ 136.351085][ T9] loop3: rw=1, want=170, limit=64 [ 136.393516][ T9] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 136.418799][ T9] attempt to access beyond end of device [ 136.418799][ T9] loop3: rw=1, want=172, limit=64 [ 136.454438][ T9] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 136.526186][ T9] attempt to access beyond end of device [ 136.526186][ T9] loop3: rw=1, want=173, limit=64 [ 136.548480][ T9] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 136.557116][ T9] attempt to access beyond end of device [ 136.557116][ T9] loop3: rw=1, want=174, limit=64 [ 136.586683][ T9] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 136.623187][ T9] attempt to access beyond end of device [ 136.623187][ T9] loop3: rw=1, want=175, limit=64 [ 136.802382][ T9] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 137.101805][ T9] attempt to access beyond end of device [ 137.101805][ T9] loop3: rw=1, want=176, limit=64 [ 137.397404][ T9] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 138.397765][ T4942] loop2: detected capacity change from 0 to 1024 [ 138.516612][ T4942] process 'syz.2.195' launched './file1' with NULL argv: empty string added [ 138.813224][ T4948] loop4: detected capacity change from 0 to 64 [ 139.791412][ T4228] hfsplus: b-tree write err: -5, ino 4 [ 141.728228][ T4967] lo speed is unknown, defaulting to 1000 [ 143.375623][ T4967] lo speed is unknown, defaulting to 1000 [ 148.821555][ T5009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.212'. [ 149.832030][ T5021] net_ratelimit: 24 callbacks suppressed [ 149.832047][ T5021] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.405981][ T5037] loop1: detected capacity change from 0 to 8192 [ 154.729015][ T5044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.222'. [ 155.311148][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 158.119730][ T5062] loop4: detected capacity change from 0 to 16 [ 158.899400][ T5062] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 158.990257][ T5062] cramfs: wrong endianness [ 161.623864][ T5074] loop4: detected capacity change from 0 to 512 [ 161.736458][ T5074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.003684][ T5074] EXT4-fs (loop4): 1 truncate cleaned up [ 162.021046][ T5074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.206875][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'. [ 163.233201][ T5088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 165.096307][ T5115] loop3: detected capacity change from 0 to 16 [ 166.609356][ T5115] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 166.688001][ T5115] cramfs: wrong endianness [ 166.706079][ T5123] netlink: 72 bytes leftover after parsing attributes in process `syz.1.241'. [ 167.435012][ T5131] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 167.449408][ T5131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.243'. [ 167.658486][ T5131] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 167.666300][ T5131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.243'. [ 169.300499][ T5147] netlink: 76 bytes leftover after parsing attributes in process `syz.2.249'. [ 170.420925][ T5152] loop4: detected capacity change from 0 to 256 [ 171.205101][ T5165] lo speed is unknown, defaulting to 1000 [ 171.213285][ T5165] lo speed is unknown, defaulting to 1000 [ 172.656119][ T5170] syz.1.256 sent an empty control message without MSG_MORE. [ 172.800820][ T5179] loop0: detected capacity change from 0 to 512 [ 173.012288][ T5179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.068875][ T5179] EXT4-fs (loop0): 1 truncate cleaned up [ 173.109391][ T5179] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.112210][ T2301] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 174.188257][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 174.211713][ T5177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'. [ 174.430400][ T5201] netlink: 72 bytes leftover after parsing attributes in process `syz.4.263'. [ 177.128827][ T5219] orangefs_mount: mount request failed with -4 [ 186.324781][ T2301] Bluetooth: hci4: command 0x0406 tx timeout [ 186.344370][ T2301] Bluetooth: hci3: command 0x0406 tx timeout [ 187.125987][ T2301] Bluetooth: hci0: command 0x0406 tx timeout [ 187.176742][ T2301] Bluetooth: hci1: command 0x0406 tx timeout [ 187.255671][ T2301] Bluetooth: hci2: command 0x0406 tx timeout [ 188.069308][ T5297] ipt_ECN: cannot use operation on non-tcp rule [ 188.141938][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'. [ 188.765374][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'. [ 188.812671][ T5297] loop0: detected capacity change from 0 to 512 [ 188.991930][ T5297] EXT4-fs (loop0): Unrecognized mount option "dont_hash" or missing value [ 190.552759][ T5315] loop1: detected capacity change from 0 to 16 [ 191.459111][ T5315] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 191.469501][ T5315] cramfs: wrong endianness [ 192.901521][ T5326] loop0: detected capacity change from 0 to 512 [ 192.982613][ T5326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.992767][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 193.104898][ T5326] EXT4-fs (loop0): 1 truncate cleaned up [ 193.122262][ T5326] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 193.189244][ T5329] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.225555][ T5339] netlink: 'syz.3.302': attribute type 16 has an invalid length. [ 193.267468][ T5329] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.272612][ T5341] loop4: detected capacity change from 0 to 1024 [ 193.279335][ T5339] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.302'. [ 193.384621][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.408623][ T5326] syz.0.298 (pid 5326) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 194.227172][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235264][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.835948][ T5351] loop3: detected capacity change from 0 to 64 [ 195.270033][ T26] audit: type=1800 audit(1745492071.576:36): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.305" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 195.769008][ T26] audit: type=1326 audit(1745492072.076:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.0.308" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc03e537969 code=0x0 [ 200.058632][ T5394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 200.901180][ T5408] loop2: detected capacity change from 0 to 16 [ 202.435087][ T5408] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 202.454734][ T5406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 202.540022][ T5414] loop1: detected capacity change from 0 to 64 [ 203.062532][ T5408] cramfs: wrong endianness [ 203.500468][ T5410] netlink: 'syz.4.318': attribute type 10 has an invalid length. [ 203.540351][ T26] audit: type=1800 audit(1745492079.846:38): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.321" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 203.699866][ T5423] netlink: 'syz.3.322': attribute type 4 has an invalid length. [ 206.796325][ T5423] syz.3.322 (5423) used greatest stack depth: 19736 bytes left [ 206.861810][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 206.898400][ T26] audit: type=1326 audit(1745492083.196:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 206.907615][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 206.976179][ T26] audit: type=1326 audit(1745492083.196:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 207.055505][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 207.071799][ T26] audit: type=1326 audit(1745492083.226:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 207.135758][ T26] audit: type=1326 audit(1745492083.226:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 207.378393][ T26] audit: type=1326 audit(1745492083.226:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 207.507740][ T26] audit: type=1326 audit(1745492083.246:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 207.568913][ T26] audit: type=1326 audit(1745492083.246:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 208.617686][ T26] audit: type=1326 audit(1745492083.246:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 208.828403][ T26] audit: type=1326 audit(1745492083.246:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 209.028385][ T26] audit: type=1326 audit(1745492083.246:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 209.190804][ T26] audit: type=1326 audit(1745492083.246:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 209.213227][ T26] audit: type=1326 audit(1745492083.246:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 209.246444][ T26] audit: type=1326 audit(1745492083.246:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 209.277347][ T5475] loop3: detected capacity change from 0 to 2048 [ 209.309515][ T26] audit: type=1326 audit(1745492083.246:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 209.349519][ T26] audit: type=1326 audit(1745492083.246:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 210.133611][ T5475] loop3: p1 < > p3 [ 210.145558][ T5475] loop3: p3 size 134217728 extends beyond EOD, truncated [ 210.182065][ T5487] nftables ruleset with unbound chain [ 210.238284][ T5490] siw: device registration error -23 [ 211.137996][ T3546] loop3: p1 < > p3 [ 211.144766][ T3546] loop3: p3 size 134217728 extends beyond EOD, truncated [ 211.264558][ T26] audit: type=1804 audit(1745492087.566:54): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.344" name="/newroot/66/file1" dev="fuse" ino=1 res=1 errno=0 [ 211.334639][ T5372] udevd[5372]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 211.408603][ T26] audit: type=1800 audit(1745492087.606:55): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="/" dev="fuse" ino=1 res=0 errno=0 [ 211.436160][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 211.448951][ T5469] kvm: emulating exchange as write [ 211.621669][ T5372] udevd[5372]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 211.692898][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 216.712748][ T5548] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 217.929181][ T5570] ubi: mtd0 is already attached to ubi31 [ 218.901773][ T5354] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 220.257062][ T5605] loop2: detected capacity change from 0 to 256 [ 221.200035][ T5354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.948714][ T4171] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 222.003313][ T5354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.102846][ T5354] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.211865][ T5354] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.351386][ T5354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.399341][ T4171] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 222.446624][ T4171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.534522][ T5354] usb 5-1: config 0 descriptor?? [ 222.552418][ T4171] usb 2-1: config 0 descriptor?? [ 222.594928][ T5354] usb 5-1: can't set config #0, error -71 [ 222.624030][ T5614] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 222.650318][ T5354] usb 5-1: USB disconnect, device number 2 [ 222.686812][ T5618] loop4: detected capacity change from 0 to 256 [ 223.065312][ T4171] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 223.086071][ T4171] hid-led 0003:04D8:F372.0003: unknown main item tag 0x0 [ 224.173910][ T5626] xt_hashlimit: invalid rate [ 224.190999][ T5625] ubi: mtd0 is already attached to ubi31 [ 224.214050][ T4171] hid-led 0003:04D8:F372.0003: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 224.265227][ T4171] hid-led 0003:04D8:F372.0003: Greynut Luxafor initialized [ 224.272341][ T5626] netlink: 136 bytes leftover after parsing attributes in process `syz.2.381'. [ 224.310325][ T4171] usb 2-1: USB disconnect, device number 4 [ 224.383189][ T2301] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 225.166699][ T5354] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 225.176413][ T5354] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 225.185504][ T5354] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 225.196507][ T5354] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 225.205683][ T5354] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 225.214703][ T5354] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 225.308170][ T2301] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 225.387712][ T2301] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 225.426672][ T2301] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 225.445846][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.455886][ T2301] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 225.485943][ T5354] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 225.567044][ T2301] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 225.588268][ T5354] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 225.607649][ T5354] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 225.627263][ T5354] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 225.684439][ T5354] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 225.800064][ T5354] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 226.035287][ T5658] loop4: detected capacity change from 0 to 2048 [ 226.362405][ T5658] loop4: p1 < > p3 [ 226.768575][ T5658] loop4: p3 size 134217728 extends beyond EOD, truncated [ 227.794378][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 227.808069][ T5634] udevd[5634]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 228.288511][ T5354] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 228.578570][ T5354] usb 1-1: Using ep0 maxpacket: 8 [ 228.597597][ T5682] loop4: detected capacity change from 0 to 512 [ 228.658699][ T5682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 228.752630][ T5682] EXT4-fs (loop4): 1 truncate cleaned up [ 228.756771][ T5664] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 228.761878][ T5682] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,noload,auto_da_alloc,,errors=continue. Quota mode: none. [ 228.879263][ T5685] lo speed is unknown, defaulting to 1000 [ 228.886004][ T5685] lo speed is unknown, defaulting to 1000 [ 228.909923][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 228.909940][ T26] audit: type=1800 audit(1745492105.216:58): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 228.939014][ T5354] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 228.978414][ T5354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.010187][ T5354] usb 1-1: Product: syz [ 229.014406][ T5354] usb 1-1: Manufacturer: syz [ 229.039717][ T5354] usb 1-1: SerialNumber: syz [ 229.091270][ T5354] usb 1-1: config 0 descriptor?? [ 229.486606][ T26] audit: type=1326 audit(1745492105.786:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.524053][ T5701] netlink: 'syz.2.401': attribute type 4 has an invalid length. [ 229.574048][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 229.596560][ T26] audit: type=1326 audit(1745492105.826:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.618752][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.681872][ T5354] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.692376][ T26] audit: type=1326 audit(1745492105.826:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.714638][ T26] audit: type=1326 audit(1745492105.826:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.741794][ T26] audit: type=1326 audit(1745492105.826:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.764639][ T26] audit: type=1326 audit(1745492105.826:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.795343][ T26] audit: type=1326 audit(1745492105.826:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.817667][ T26] audit: type=1326 audit(1745492105.826:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.842364][ T26] audit: type=1326 audit(1745492105.826:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 229.940956][ T5715] loop2: detected capacity change from 0 to 512 [ 229.979016][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 230.115948][ T5715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.127407][ T5708] cgroup: Unknown subsys name 'obj_role' [ 230.162620][ T5715] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 230.180579][ T5715] EXT4-fs (loop2): 1 truncate cleaned up [ 230.186525][ T5715] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 230.469390][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 230.506258][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.529685][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.556087][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.572702][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.189582][ T5354] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 231.347416][ T5354] usb 1-1: USB disconnect, device number 2 [ 231.893767][ T5747] loop0: detected capacity change from 0 to 512 [ 231.923617][ T5745] loop4: detected capacity change from 0 to 4096 [ 232.137387][ T5745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.332652][ T5747] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 232.648148][ T5747] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.094630][ T5745] syz.4.407 (5745) used greatest stack depth: 19648 bytes left [ 235.408405][ T1325] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 236.821008][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 236.821024][ T26] audit: type=1326 audit(1745492113.126:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 236.938087][ T26] audit: type=1326 audit(1745492113.196:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 236.960922][ T5807] loop2: detected capacity change from 0 to 512 [ 236.967934][ T5802] netlink: 256 bytes leftover after parsing attributes in process `syz.3.422'. [ 237.124631][ T5807] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 237.138651][ T5807] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 237.139598][ T26] audit: type=1326 audit(1745492113.196:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.173874][ T26] audit: type=1326 audit(1745492113.196:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.196159][ T26] audit: type=1326 audit(1745492113.196:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.219240][ T26] audit: type=1326 audit(1745492113.196:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.248420][ T26] audit: type=1326 audit(1745492113.196:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.288579][ T5807] System zones: 0-1, 15-15, 18-18, 34-34 [ 237.299818][ T5807] EXT4-fs (loop2): orphan cleanup on readonly fs [ 237.313453][ T26] audit: type=1326 audit(1745492113.196:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.373553][ T5807] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 237.424740][ T26] audit: type=1326 audit(1745492113.196:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 237.465170][ T5807] EXT4-fs warning (device loop2): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 237.514579][ T5807] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 237.630856][ T5807] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.423: bad orphan inode 16 [ 237.659119][ T5807] ext4_test_bit(bit=15, block=18) = 1 [ 237.664547][ T5807] is_bad_inode(inode)=0 [ 237.668975][ T5807] NEXT_ORPHAN(inode)=0 [ 237.673271][ T5807] max_ino=32 [ 237.676484][ T5807] i_nlink=2 [ 237.682844][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 238.470625][ T5807] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 239.445803][ T5841] lo speed is unknown, defaulting to 1000 [ 239.453629][ T5841] lo speed is unknown, defaulting to 1000 [ 239.554921][ T5840] netlink: 120 bytes leftover after parsing attributes in process `syz.1.441'. [ 239.634273][ T5840] Invalid option length (1047411) for dns_resolver key [ 239.920513][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 240.208750][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880629cb400: rx timeout, send abort [ 241.494576][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880629c8400: rx timeout, send abort [ 241.502866][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880629cb400: abort rx timeout. Force session deactivation [ 242.002877][ C0] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff8880629c8400: abort rx timeout. Force session deactivation [ 243.373120][ T5876] loop1: detected capacity change from 0 to 512 [ 244.082116][ T5883] --map-set only usable from mangle table [ 244.580414][ T5876] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.030184][ T5876] EXT4-fs (loop1): 1 truncate cleaned up [ 245.035991][ T5876] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,noload,auto_da_alloc,,errors=continue. Quota mode: none. [ 245.072649][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 245.072665][ T26] audit: type=1800 audit(1745492121.376:154): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.439" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 246.707292][ T5900] loop0: detected capacity change from 0 to 2048 [ 246.840924][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 248.038928][ T5920] loop2: detected capacity change from 0 to 2048 [ 248.526367][ T4307] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.598115][ T4307] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.722766][ T5920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.117659][ T4267] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 250.165756][ T5938] loop0: detected capacity change from 0 to 128 [ 250.245954][ T5938] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 250.379012][ T4185] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 250.651266][ T5938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.938704][ T4215] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.303407][ T4267] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 251.312602][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.318692][ T4215] usb 2-1: config 0 has no interfaces? [ 251.332005][ T4267] usb 5-1: config 0 descriptor?? [ 251.337148][ T4215] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.337181][ T4215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.373955][ T4215] usb 2-1: config 0 descriptor?? [ 251.387915][ T5946] device netdevsim0 entered promiscuous mode [ 251.404260][ T5946] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.657604][ T5941] loop1: detected capacity change from 0 to 512 [ 251.812604][ T5941] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 251.838751][ T5941] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.862486][ T4267] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 251.877812][ T4267] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 251.881993][ T23] usb 2-1: USB disconnect, device number 6 [ 251.894433][ T4267] hid-led 0003:04D8:F372.0004: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 251.925138][ T4267] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 252.109003][ T4267] usb 5-1: USB disconnect, device number 3 [ 252.126357][ T4221] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 252.139835][ T4221] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 252.153877][ T4221] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 252.164963][ T4221] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 252.176710][ T4221] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 252.197632][ T4221] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 252.215405][ T4221] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 252.250675][ T4221] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 252.263645][ T5354] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 252.274958][ T5354] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 252.286093][ T5354] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 252.308118][ T5354] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 252.317386][ T26] audit: type=1326 audit(1745492128.616:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 252.350937][ T5957] loop2: detected capacity change from 0 to 128 [ 252.361439][ T5354] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 252.413905][ T5354] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 252.422729][ T26] audit: type=1326 audit(1745492128.646:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 252.497803][ T5957] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 252.509808][ T4221] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 252.519504][ T4171] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 252.646342][ T5960] Cannot find add_set index 0 as target [ 252.957324][ T26] audit: type=1326 audit(1745492128.646:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.404117][ T2301] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 253.503189][ T26] audit: type=1326 audit(1745492128.646:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.525836][ T26] audit: type=1326 audit(1745492128.646:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.535073][ T5961] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 253.548585][ T26] audit: type=1326 audit(1745492128.646:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.582730][ T26] audit: type=1326 audit(1745492128.646:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.611707][ T26] audit: type=1326 audit(1745492128.646:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.634262][ T26] audit: type=1326 audit(1745492128.646:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.657350][ T26] audit: type=1326 audit(1745492128.646:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e584d969 code=0x7ffc0000 [ 253.662998][ T4171] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 253.685394][ T5961] FAT-fs (loop2): Filesystem has been set read-only [ 255.081678][ T5973] lo speed is unknown, defaulting to 1000 [ 255.088768][ T5973] lo speed is unknown, defaulting to 1000 [ 255.514743][ T5977] loop4: detected capacity change from 0 to 256 [ 255.552661][ T4168] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 255.674768][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.689737][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.908346][ T5977] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.018396][ T5977] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 256.098545][ T5977] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 256.248647][ T5977] "syz.4.467" (5977) uses obsolete ecb(arc4) skcipher [ 256.525166][ T5983] loop3: detected capacity change from 0 to 128 [ 256.609704][ T5983] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿA" or missing value [ 257.784729][ T6012] --map-set only usable from mangle table [ 259.047639][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 259.047662][ T26] audit: type=1326 audit(1745492135.346:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 259.167074][ T26] audit: type=1326 audit(1745492135.356:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 259.233288][ T26] audit: type=1326 audit(1745492135.386:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 259.602389][ T26] audit: type=1326 audit(1745492135.386:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 259.928676][ T6019] loop1: detected capacity change from 0 to 1024 [ 259.948471][ T26] audit: type=1326 audit(1745492135.386:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 260.049641][ T26] audit: type=1326 audit(1745492135.396:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 260.120557][ T26] audit: type=1326 audit(1745492135.426:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 260.162415][ T26] audit: type=1326 audit(1745492135.426:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 260.186793][ T6029] tipc: Enabling of bearer rejected, failed to enable media [ 260.314289][ T6019] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 260.353374][ T26] audit: type=1326 audit(1745492135.426:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 260.355000][ T6035] loop3: detected capacity change from 0 to 512 [ 260.382131][ T26] audit: type=1326 audit(1745492135.426:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f572f8f6969 code=0x7ffc0000 [ 261.035421][ T6035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.143063][ T6035] EXT4-fs (loop3): 1 truncate cleaned up [ 261.148248][ T6049] loop0: detected capacity change from 0 to 2048 [ 261.192084][ T6035] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 261.253875][ T6049] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.272851][ T6063] loop3: detected capacity change from 0 to 8 [ 262.379814][ T6061] loop1: detected capacity change from 0 to 128 [ 262.454297][ T6061] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 263.369240][ T6076] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 263.393491][ T6076] FAT-fs (loop1): Filesystem has been set read-only [ 263.506825][ T4167] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 263.949390][ T6087] lo speed is unknown, defaulting to 1000 [ 263.963337][ T6087] lo speed is unknown, defaulting to 1000 [ 265.770407][ T6107] ptrace attach of "./syz-executor exec"[4167] was attempted by "./syz-executor exec"[6107] [ 266.607734][ T6114] loop1: detected capacity change from 0 to 128 [ 268.599408][ T6132] loop4: detected capacity change from 0 to 512 [ 269.022178][ T6135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.031766][ T6135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.040588][ T6135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.049726][ T6135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.095790][ T6135] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 269.374775][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 269.390432][ T6139] loop2: detected capacity change from 0 to 2048 [ 269.401694][ T6132] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.559928][ T6149] lo speed is unknown, defaulting to 1000 [ 269.571804][ T6149] lo speed is unknown, defaulting to 1000 [ 270.115272][ T6139] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 270.148032][ T6139] UDF-fs: Scanning with blocksize 512 failed [ 270.204739][ T6139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.384604][ T6167] device ipip0 entered promiscuous mode [ 273.998175][ T6187] loop4: detected capacity change from 0 to 1024 [ 274.139421][ T6187] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.022229][ T6206] lo speed is unknown, defaulting to 1000 [ 277.029086][ T6206] lo speed is unknown, defaulting to 1000 [ 277.338125][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 277.338143][ T26] audit: type=1804 audit(1745492153.636:298): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.534" name="file1" dev="ramfs" ino=39296 res=1 errno=0 [ 278.325788][ T6243] loop2: detected capacity change from 0 to 1024 [ 278.356384][ T6248] loop4: detected capacity change from 0 to 512 [ 278.371848][ T6245] device sit1 entered promiscuous mode [ 278.686576][ T6250] ipt_REJECT: TCP_RESET invalid for non-tcp [ 279.375853][ T6245] device netdevsim0 entered promiscuous mode [ 279.433791][ T6243] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.464291][ T6245] device netdevsim0 left promiscuous mode [ 279.495248][ T6248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.559864][ T6248] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.063848][ T6256] loop0: detected capacity change from 0 to 2048 [ 280.181706][ T6256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.703048][ T6284] loop1: detected capacity change from 0 to 256 [ 282.173631][ T6288] loop2: detected capacity change from 0 to 512 [ 282.294163][ T6284] loop1: detected capacity change from 0 to 16 [ 282.310165][ T26] audit: type=1326 audit(1745492158.616:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.421289][ T26] audit: type=1326 audit(1745492158.646:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.433692][ T6288] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.443727][ T26] audit: type=1326 audit(1745492158.646:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.482782][ T26] audit: type=1326 audit(1745492158.646:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.505614][ T26] audit: type=1326 audit(1745492158.646:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.534446][ T6284] erofs: (device loop1): mounted with root inode @ nid 36. [ 282.561960][ T26] audit: type=1326 audit(1745492158.656:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.595095][ T6288] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.556: iget: bad extended attribute block 512 [ 282.618769][ T26] audit: type=1326 audit(1745492158.656:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.653673][ T6288] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.556: couldn't read orphan inode 15 (err -117) [ 282.681850][ T26] audit: type=1326 audit(1745492158.656:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.733784][ T6279] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 282.772848][ T6288] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.922099][ T26] audit: type=1326 audit(1745492158.656:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 282.956706][ T6279] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 283.310591][ T26] audit: type=1326 audit(1745492158.656:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 283.627133][ T26] audit: type=1326 audit(1745492158.656:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c29c969 code=0x7ffc0000 [ 284.906037][ T6312] netlink: 256 bytes leftover after parsing attributes in process `syz.4.561'. [ 285.503470][ T6310] loop3: detected capacity change from 0 to 1024 [ 285.782302][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'. [ 285.809828][ T6317] loop2: detected capacity change from 0 to 256 [ 285.817098][ T6310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.016681][ T6334] ODEBUG: Out of memory. ODEBUG disabled [ 288.044361][ T6344] block nbd0: Device being setup by another task [ 288.871749][ T6341] loop0: detected capacity change from 0 to 1024 [ 289.857599][ T6353] loop4: detected capacity change from 0 to 512 [ 289.869924][ T6335] block nbd0: shutting down sockets [ 289.917330][ T6360] tipc: Started in network mode [ 290.002707][ T6360] tipc: Node identity 7f000001, cluster identity 4711 [ 290.054550][ T6360] tipc: Enabled bearer , priority 10 [ 290.116247][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 290.139034][ T6364] tipc: Enabled bearer , priority 0 [ 290.221612][ T6353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.233652][ T6334] syz.1.566 (6334): drop_caches: 2 [ 290.304403][ T6353] EXT4-fs (loop4): 1 truncate cleaned up [ 290.320532][ T6353] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 290.418393][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.430145][ T6373] loop1: detected capacity change from 0 to 1024 [ 291.568416][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.598831][ T4267] tipc: Node number set to 2130706433 [ 291.914927][ T6383] device syzkaller0 entered promiscuous mode [ 292.068385][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.071106][ T6373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.088319][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 292.101082][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.111879][ T23] usb 4-1: config 0 descriptor?? [ 292.153716][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 292.417075][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 292.868735][ T3531] bcm5974 4-1:0.0: could not read from device [ 292.978510][ T3531] bcm5974 4-1:0.0: could not read from device [ 293.053001][ T23] usb 4-1: USB disconnect, device number 5 [ 293.261217][ T3531] bcm5974 4-1:0.0: could not read from device [ 293.385545][ T6389] loop4: detected capacity change from 0 to 40427 [ 293.512341][ T6389] F2FS-fs (loop4): invalid crc value [ 293.517600][ T6394] loop2: detected capacity change from 0 to 2048 [ 293.595522][ T6389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 293.762371][ T6389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 293.798777][ T6394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.052385][ T6390] loop0: detected capacity change from 0 to 4096 [ 295.026727][ T6405] loop3: detected capacity change from 0 to 40427 [ 295.121692][ T6403] F2FS-fs (loop4) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2bf/0x5b0 [ 295.162041][ T6405] F2FS-fs (loop3): invalid crc value [ 295.254455][ T6405] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.295374][ T6405] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 295.332130][ T6405] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.720553][ T6412] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 295.851609][ T6415] input: syz0 as /devices/virtual/input/input6 [ 295.886044][ T6416] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 295.943648][ T4176] handle_bad_sector: 24 callbacks suppressed [ 295.943666][ T4176] attempt to access beyond end of device [ 295.943666][ T4176] loop4: rw=2049, want=45104, limit=40427 [ 295.965984][ T5354] lo speed is unknown, defaulting to 1000 [ 295.976028][ T6405] attempt to access beyond end of device [ 295.976028][ T6405] loop3: rw=2049, want=45104, limit=40427 [ 296.003004][ T6415] team0: Device gtp0 is of different type [ 296.065298][ T1325] lo speed is unknown, defaulting to 1000 [ 296.180010][ T6420] loop2: detected capacity change from 0 to 1024 [ 296.583883][ T6428] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.839954][ T6420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.408201][ T6427] loop1: detected capacity change from 0 to 1024 [ 297.642414][ T6427] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.826695][ T6446] loop2: detected capacity change from 0 to 1024 [ 299.844567][ T6446] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 299.894190][ T6454] tipc: Started in network mode [ 299.899562][ T6454] tipc: Node identity 7f000001, cluster identity 4711 [ 299.921241][ T6454] tipc: Enabled bearer , priority 10 [ 299.952951][ T6446] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #32: comm syz.2.597: iget: special inode unallocated [ 299.993353][ T6454] tipc: Enabled bearer , priority 0 [ 300.019339][ T6446] EXT4-fs (loop2): no journal found [ 300.024629][ T6446] EXT4-fs (loop2): can't get journal size [ 300.154271][ T6446] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.597: iget: special inode unallocated [ 300.196076][ T6446] EXT4-fs (loop2): failed to initialize system zone (-117) [ 300.237500][ T6446] EXT4-fs (loop2): mount failed [ 300.980928][ T6466] loop4: detected capacity change from 0 to 16 [ 301.019931][ T6466] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 301.040300][ T23] tipc: Node number set to 2130706433 [ 301.103154][ T6473] loop0: detected capacity change from 0 to 256 [ 302.274939][ T6488] loop2: detected capacity change from 0 to 512 [ 302.464148][ T6488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.453296][ T6488] EXT4-fs (loop2): 1 truncate cleaned up [ 304.499247][ T6488] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 306.459222][ T6530] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 306.528364][ T6533] loop4: detected capacity change from 0 to 256 [ 309.063623][ T6517] syz.0.620 (6517): drop_caches: 2 [ 310.204806][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 310.618378][ T4267] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 310.702863][ T6569] loop2: detected capacity change from 0 to 1024 [ 310.869763][ T6569] EXT4-fs (loop2): Unrecognized mount option "defcontext=system_u" or missing value [ 311.808496][ T4267] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.851562][ T4267] usb 5-1: config 0 has no interface number 0 [ 311.876604][ T4267] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 311.896273][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.924294][ T4267] usb 5-1: config 0 descriptor?? [ 311.982524][ T4267] cp210x 5-1:0.1: cp210x converter detected [ 312.428739][ T4267] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 312.915851][ T4267] usb 5-1: cp210x converter now attached to ttyUSB0 [ 313.095375][ T4267] usb 5-1: USB disconnect, device number 4 [ 313.208826][ T5634] udevd[5634]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 313.229325][ T4267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 314.164538][ T4267] cp210x 5-1:0.1: device disconnected [ 316.337018][ T6614] loop4: detected capacity change from 0 to 512 [ 316.405821][ T6619] netlink: 'syz.2.649': attribute type 4 has an invalid length. [ 316.434223][ T6614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.472290][ T6621] loop0: detected capacity change from 0 to 1024 [ 316.499579][ T4212] lo speed is unknown, defaulting to 1000 [ 316.512511][ T6614] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.648: iget: bad extended attribute block 512 [ 316.529302][ T6614] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.648: couldn't read orphan inode 15 (err -117) [ 316.602591][ T6614] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.622955][ T6621] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.486144][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.571091][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.584122][ T6632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.654'. [ 317.676835][ T6635] device bond_slave_0 entered promiscuous mode [ 317.683750][ T6635] device bond_slave_1 entered promiscuous mode [ 317.690056][ T6635] device vxlan0 entered promiscuous mode [ 317.737587][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.654'. [ 317.762076][ T6635] device vlan2 entered promiscuous mode [ 317.767786][ T6635] device bond0 entered promiscuous mode [ 318.813213][ T6635] device bond0 left promiscuous mode [ 318.860888][ T6635] device bond_slave_0 left promiscuous mode [ 318.866865][ T6635] device bond_slave_1 left promiscuous mode [ 318.872860][ T6635] device vxlan0 left promiscuous mode [ 322.057452][ T6661] loop0: detected capacity change from 0 to 1024 [ 324.536197][ T6683] loop1: detected capacity change from 0 to 512 [ 324.664027][ T6683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 324.804003][ T6692] loop0: detected capacity change from 0 to 1024 [ 324.922872][ T6683] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.668: iget: bad extended attribute block 512 [ 324.938987][ T6683] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.668: couldn't read orphan inode 15 (err -117) [ 325.486821][ T6692] EXT4-fs (loop0): Unrecognized mount option "defcontext=system_u" or missing value [ 325.955339][ T6683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 329.838694][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 330.213453][ T6720] loop0: detected capacity change from 0 to 256 [ 330.986837][ T6720] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 331.623135][ T6753] loop1: detected capacity change from 0 to 1024 [ 331.803199][ T6753] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 334.182345][ T6778] loop2: detected capacity change from 0 to 256 [ 334.299013][ T6778] exfat: Deprecated parameter 'utf8' [ 334.304428][ T6778] exfat: Deprecated parameter 'namecase' [ 334.310210][ T6778] exfat: Deprecated parameter 'utf8' [ 334.390726][ T6778] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 334.410338][ T6778] attempt to access beyond end of device [ 334.410338][ T6778] loop2: rw=524288, want=34359738496, limit=256 [ 334.422801][ T6778] attempt to access beyond end of device [ 334.422801][ T6778] loop2: rw=0, want=34359738496, limit=256 [ 334.434374][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 334.434391][ T26] audit: type=1800 audit(1745492210.736:320): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.698" name="file1" dev="loop2" ino=1048655 res=0 errno=0 [ 334.463399][ T6784] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 335.018950][ T4214] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 336.004417][ T6803] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 337.354791][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'. [ 337.511581][ T6811] loop4: detected capacity change from 0 to 2048 [ 337.695998][ T6811] loop4: p1 < > p3 [ 337.741161][ T6811] loop4: p3 size 134217728 extends beyond EOD, truncated [ 337.819863][ T6824] netlink: 277 bytes leftover after parsing attributes in process `syz.3.711'. [ 338.509908][ T4214] usb 2-1: unable to read config index 0 descriptor/all [ 338.517264][ T4214] usb 2-1: can't read configurations, error -71 [ 338.693020][ T6834] loop1: detected capacity change from 0 to 512 [ 339.370504][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 339.393379][ T6834] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.548495][ T6834] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.591079][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 341.021660][ T6862] loop4: detected capacity change from 0 to 1024 [ 341.077050][ T6864] device pim6reg1 entered promiscuous mode [ 343.822400][ T6886] loop4: detected capacity change from 0 to 512 [ 344.060338][ T6892] bridge: RTM_NEWNEIGH with invalid ether address [ 344.066333][ T6886] EXT4-fs (loop4): Ignoring removed nobh option [ 344.088386][ T6886] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 344.285526][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 344.320282][ T6886] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.726: invalid indirect mapped block 256 (level 2) [ 346.029369][ T6886] EXT4-fs (loop4): 2 truncates cleaned up [ 346.035151][ T6886] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,delalloc,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 347.284743][ T6898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 350.751433][ T6941] autofs4:pid:6941:autofs_fill_super: called with bogus options [ 352.178349][ T6947] loop0: detected capacity change from 0 to 2048 [ 353.373295][ T6968] netlink: 'syz.4.755': attribute type 4 has an invalid length. [ 353.697723][ T6950] 9pnet: Insufficient options for proto=fd [ 353.749256][ T6971] xt_TCPMSS: Only works on TCP SYN packets [ 355.364747][ T6946] loop0: p1 < > p3 [ 355.370336][ T6946] loop0: p3 size 134217728 extends beyond EOD, truncated [ 355.416188][ T6947] loop0: p1 < > p3 [ 355.553149][ T6947] loop0: p3 size 134217728 extends beyond EOD, truncated [ 356.112858][ T6985] loop4: detected capacity change from 0 to 16 [ 356.821374][ T3546] loop0: p1 < > p3 [ 356.850727][ T3546] loop0: p3 size 134217728 extends beyond EOD, truncated [ 356.889935][ T26] audit: type=1326 audit(1745492233.186:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f572f8f6969 code=0x0 [ 357.107650][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 357.196728][ T5634] udevd[5634]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 357.206862][ T6995] device vlan1 entered promiscuous mode [ 358.341516][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 358.373107][ T7012] loop2: detected capacity change from 0 to 64 [ 360.785744][ T7038] nfs: Unknown parameter 'ntext' [ 361.133927][ T5634] udevd[5634]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 361.262492][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 361.468710][ T5633] udevd[5633]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 361.511224][ T7036] ªªªªªª: renamed from vlan0 [ 361.538669][ T5195] udevd[5195]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 361.600507][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 369.115280][ T7086] netlink: 64 bytes leftover after parsing attributes in process `syz.4.788'. [ 369.287348][ T7086] netlink: 'syz.4.788': attribute type 11 has an invalid length. [ 369.442895][ T7086] netlink: 428 bytes leftover after parsing attributes in process `syz.4.788'. [ 369.622149][ T7099] loop0: detected capacity change from 0 to 512 [ 370.040065][ T7101] loop4: detected capacity change from 0 to 128 [ 370.589164][ T7099] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 370.622866][ T7099] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 370.633937][ T7099] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.790: Corrupt directory, running e2fsck is recommended [ 370.863020][ T7099] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 370.878516][ T7099] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.790: corrupted in-inode xattr [ 372.152089][ T7101] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 372.166432][ T7099] EXT4-fs (loop0): Remounting filesystem read-only [ 372.173640][ T7099] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.790: couldn't read orphan inode 15 (err -117) [ 372.187122][ T7099] EXT4-fs (loop0): Remounting filesystem read-only [ 372.193965][ T7099] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 372.201731][ T7101] sysv_free_block: trying to free block not in datazone [ 372.333391][ T7111] lo speed is unknown, defaulting to 1000 [ 372.351841][ T7101] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 372.489198][ T7111] lo speed is unknown, defaulting to 1000 [ 372.761521][ T7117] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 372.773722][ T7117] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 372.783856][ T7117] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.790: Corrupt directory, running e2fsck is recommended [ 374.259598][ T7126] delete_channel: no stack [ 379.778850][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.785168][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.291849][ T7170] loop0: detected capacity change from 0 to 512 [ 381.209563][ T7182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.217662][ T7182] IPv6: NLM_F_CREATE should be set when creating new route [ 382.386152][ T7170] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 383.868553][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.875809][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.168664][ T7205] netlink: 'syz.0.832': attribute type 32 has an invalid length. [ 385.796724][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.874454][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.364491][ T7182] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.373992][ T7182] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.390711][ T7182] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.404913][ T7182] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.767506][ T7182] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.776596][ T7182] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.785629][ T7182] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.794557][ T7182] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.826251][ T7182] device ipip0 left promiscuous mode [ 390.097979][ T7246] lo speed is unknown, defaulting to 1000 [ 390.139795][ T7246] lo speed is unknown, defaulting to 1000 [ 397.756365][ T7292] delete_channel: no stack [ 399.996020][ T7326] loop0: detected capacity change from 0 to 256 [ 406.468821][ T7401] loop0: detected capacity change from 0 to 128 [ 409.036278][ T7401] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 409.051269][ T7401] sysv_free_block: trying to free block not in datazone [ 409.156146][ T7401] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 409.996058][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 410.020479][ T7420] device bond_slave_0 entered promiscuous mode [ 410.026836][ T7420] device bond_slave_1 entered promiscuous mode [ 410.928902][ T7420] device macvtap1 entered promiscuous mode [ 410.943021][ T7420] device bond0 entered promiscuous mode [ 410.964863][ T7420] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 412.435859][ T7446] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 412.892323][ T7459] usb usb8: usbfs: process 7459 (syz.0.890) did not claim interface 0 before use [ 413.827675][ T7467] loop0: detected capacity change from 0 to 4096 [ 415.776531][ T7467] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 416.839878][ T4166] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 417.155831][ T7507] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 420.686971][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 421.078277][ T7543] syz.2.918 (7543) used greatest stack depth: 18840 bytes left [ 432.136419][ T7636] overlayfs: failed to clone upperpath [ 434.479028][ T7656] syz.0.951 (7656): drop_caches: 2 [ 434.540169][ T7656] syz.0.951 (7656): drop_caches: 2 [ 435.759634][ T7666] delete_channel: no stack [ 438.317913][ T26] audit: type=1326 audit(1745492314.616:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 439.092002][ T26] audit: type=1326 audit(1745492314.616:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 439.120686][ T26] audit: type=1326 audit(1745492315.156:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 439.375674][ T7701] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 439.942604][ T26] audit: type=1326 audit(1745492315.156:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 440.097013][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103830][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.297634][ T26] audit: type=1326 audit(1745492315.156:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 440.348316][ T26] audit: type=1326 audit(1745492315.156:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 440.388651][ T26] audit: type=1326 audit(1745492315.156:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 440.504456][ T26] audit: type=1326 audit(1745492315.156:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 440.643332][ T26] audit: type=1326 audit(1745492315.156:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 440.860424][ T26] audit: type=1326 audit(1745492315.156:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03e537969 code=0x7ffc0000 [ 441.392655][ T7723] bridge0: port 1(syz_tun) entered blocking state [ 441.535786][ T7723] bridge0: port 1(syz_tun) entered disabled state [ 441.830495][ T7723] device syz_tun entered promiscuous mode [ 441.964800][ T7723] bridge0: port 1(syz_tun) entered blocking state [ 441.971701][ T7723] bridge0: port 1(syz_tun) entered forwarding state [ 442.471173][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.136110][ T7768] dns_resolver: Unsupported server list version (0) [ 451.983990][ T7804] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 454.208166][ T13] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.290775][ T7827] loop0: detected capacity change from 0 to 1024 [ 455.572549][ T13] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.684712][ T7827] EXT4-fs (loop0): Mount option "nodioread_nolock" incompatible with ext2 [ 456.613520][ T7846] x_tables: duplicate underflow at hook 1 [ 460.691245][ T7864] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 467.311125][ T7916] loop0: detected capacity change from 0 to 8192 [ 467.329694][ T7932] overlayfs: failed to clone upperpath [ 468.105204][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 468.790976][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.261806][ T7964] loop0: detected capacity change from 0 to 1764 [ 480.471835][ T8040] device wg2 entered promiscuous mode [ 480.648579][ T8051] loop0: detected capacity change from 0 to 256 [ 481.387601][ T8051] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 482.228656][ T8066] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.1070'. [ 483.360769][ T8072] loop0: detected capacity change from 0 to 128 [ 589.838160][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 589.844819][ C0] rcu: 0-...!: (10500 ticks this GP) idle=e33/1/0x4000000000000000 softirq=20458/20458 fqs=0 [ 589.857175][ C0] (t=10500 jiffies g=23941 q=200) [ 589.862315][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g23941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 589.874656][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=17440 [ 589.882552][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g23941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 589.893943][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 589.903923][ C0] rcu: RCU grace-period kthread stack dump: [ 589.909819][ C0] task:rcu_preempt state:I stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 589.919050][ C0] Call Trace: [ 589.922345][ C0] [ 589.925294][ C0] __schedule+0x12c4/0x45b0 [ 589.929825][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 589.935742][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 589.941676][ C0] ? __mod_timer+0xa8e/0xeb0 [ 589.946288][ C0] ? release_firmware_map_entry+0x190/0x190 [ 589.952206][ C0] ? mod_timer_pending+0x20/0x20 [ 589.957161][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 589.962566][ C0] schedule+0x11b/0x1f0 [ 589.966743][ C0] schedule_timeout+0x1b9/0x300 [ 589.971622][ C0] ? console_conditional_schedule+0x40/0x40 [ 589.977538][ C0] ? update_process_times+0x200/0x200 [ 589.982936][ C0] ? prepare_to_swait_event+0x321/0x340 [ 589.988511][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 589.993387][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 589.998614][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 590.003836][ C0] ? rcu_gp_init+0xdae/0x1140 [ 590.008534][ C0] ? rcu_gp_init+0x1140/0x1140 [ 590.013332][ C0] rcu_gp_kthread+0xa4/0x360 [ 590.017944][ C0] ? _raw_spin_unlock+0x40/0x40 [ 590.022826][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 590.027953][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 590.033868][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 590.038917][ C0] kthread+0x3f6/0x4f0 [ 590.043002][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 590.048128][ C0] ? kthread_blkcg+0xd0/0xd0 [ 590.052742][ C0] ret_from_fork+0x1f/0x30 [ 590.057201][ C0] [ 590.060229][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 590.066573][ C0] NMI backtrace for cpu 0 [ 590.070913][ C0] CPU: 0 PID: 8078 Comm: syz.1.1073 Not tainted 5.15.180-syzkaller #0 [ 590.079077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 590.089151][ C0] Call Trace: [ 590.092445][ C0] [ 590.095297][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 590.100000][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 590.105655][ C0] ? panic+0x860/0x860 [ 590.109795][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 590.114758][ C0] ? __wake_up_klogd+0xd5/0x100 [ 590.119631][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 590.126321][ C0] ? _printk+0xd1/0x120 [ 590.130497][ C0] ? cpu_online+0x1f/0x40 [ 590.134842][ C0] ? panic+0x860/0x860 [ 590.138924][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 590.145008][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 590.151010][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 590.157185][ C0] print_cpu_stall+0x31b/0x600 [ 590.161965][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 590.167183][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 590.172047][ C0] ? hrtimer_run_queues+0x163/0x450 [ 590.177263][ C0] ? account_process_tick+0x232/0x3a0 [ 590.182655][ C0] update_process_times+0x196/0x200 [ 590.187961][ C0] tick_sched_timer+0x386/0x550 [ 590.192832][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 590.198397][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 590.203634][ C0] ? hrtimer_interrupt+0x980/0x980 [ 590.208767][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 590.214881][ C0] hrtimer_interrupt+0x392/0x980 [ 590.219879][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 590.225878][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 590.231545][ C0] [ 590.234507][ C0] [ 590.237462][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 590.243458][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 590.249284][ C0] Code: 31 60 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae ec 19 f7 48 89 df e8 06 41 1b f7 e8 b1 f0 3d f7 fb bf 01 00 00 00 d6 83 0e f7 65 8b 05 b7 a0 b9 75 85 c0 74 02 5b c3 e8 64 bc b7 [ 590.268930][ C0] RSP: 0018:ffffc9000343fbc0 EFLAGS: 00000282 [ 590.275104][ C0] RAX: eee7c5bcec9db200 RBX: ffff888076e5ae40 RCX: ffffffff96a92f03 [ 590.283089][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab18e0 RDI: 0000000000000001 [ 590.291072][ C0] RBP: 0000000000000000 R08: ffffffff8186bfe0 R09: ffffed100edcb5c9 [ 590.299058][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 590.307042][ C0] R13: dffffc0000000000 R14: ffff888076e5b2d8 R15: ffff888076e5ae40 [ 590.315047][ C0] ? trace_hardirqs_on+0x30/0x80 [ 590.320015][ C0] get_signal+0x13ee/0x14e0 [ 590.324552][ C0] arch_do_signal_or_restart+0xbd/0x12b0 [ 590.330211][ C0] ? __do_sys_rt_sigreturn+0x92a/0xa70 [ 590.335696][ C0] ? KSTK_ESP+0x60/0x60 [ 590.339881][ C0] ? get_sigframe_size+0x10/0x10 [ 590.344858][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 590.350335][ C0] exit_to_user_mode_loop+0x97/0x130 [ 590.355637][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 590.361196][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 590.366776][ C0] do_syscall_64+0x47/0x80 [ 590.371212][ C0] ? clear_bhb_loop+0x15/0x70 [ 590.375917][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.381846][ C0] RIP: 0033:0x7f572f8f6967 [ 590.386287][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 590.405913][ C0] RSP: 002b:00007f572d75e0e8 EFLAGS: 00000246 [ 590.411998][ C0] RAX: 00000000000000ca RBX: 00007f572fb1dfa8 RCX: 00007f572f8f6969 [ 590.419987][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f572fb1dfa8 [ 590.427972][ C0] RBP: 00007f572fb1dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 590.435980][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f572fb1dfac [ 590.443980][ C0] R13: 0000000000000000 R14: 00007ffdab0dd6d0 R15: 00007ffdab0dd7b8 [ 590.451983][ C0] [ 590.455048][ C0] NMI backtrace for cpu 0 [ 590.459381][ C0] CPU: 0 PID: 8078 Comm: syz.1.1073 Not tainted 5.15.180-syzkaller #0 [ 590.467563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 590.477629][ C0] Call Trace: [ 590.480919][ C0] [ 590.483857][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 590.488588][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 590.494244][ C0] ? panic+0x860/0x860 [ 590.498338][ C0] ? read_lock_is_recursive+0x10/0x10 [ 590.503737][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 590.508712][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 590.514886][ C0] ? try_to_wake_up+0x844/0x12c0 [ 590.519855][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 590.525328][ C0] ? _raw_spin_lock+0x40/0x40 [ 590.530023][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 590.536107][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 590.542108][ C0] rcu_dump_cpu_stacks+0x223/0x390 [ 590.547252][ C0] print_cpu_stall+0x320/0x600 [ 590.552037][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 590.557255][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 590.562127][ C0] ? hrtimer_run_queues+0x163/0x450 [ 590.567354][ C0] ? account_process_tick+0x232/0x3a0 [ 590.572791][ C0] update_process_times+0x196/0x200 [ 590.578024][ C0] tick_sched_timer+0x386/0x550 [ 590.582904][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 590.588467][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 590.593702][ C0] ? hrtimer_interrupt+0x980/0x980 [ 590.598835][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 590.604930][ C0] hrtimer_interrupt+0x392/0x980 [ 590.609914][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 590.615916][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 590.621567][ C0] [ 590.624506][ C0] [ 590.627441][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 590.633443][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 590.639269][ C0] Code: 31 60 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae ec 19 f7 48 89 df e8 06 41 1b f7 e8 b1 f0 3d f7 fb bf 01 00 00 00 d6 83 0e f7 65 8b 05 b7 a0 b9 75 85 c0 74 02 5b c3 e8 64 bc b7 [ 590.658887][ C0] RSP: 0018:ffffc9000343fbc0 EFLAGS: 00000282 [ 590.664974][ C0] RAX: eee7c5bcec9db200 RBX: ffff888076e5ae40 RCX: ffffffff96a92f03 [ 590.672959][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab18e0 RDI: 0000000000000001 [ 590.680946][ C0] RBP: 0000000000000000 R08: ffffffff8186bfe0 R09: ffffed100edcb5c9 [ 590.688930][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 590.696915][ C0] R13: dffffc0000000000 R14: ffff888076e5b2d8 R15: ffff888076e5ae40 [ 590.704908][ C0] ? trace_hardirqs_on+0x30/0x80 [ 590.709876][ C0] get_signal+0x13ee/0x14e0 [ 590.714412][ C0] arch_do_signal_or_restart+0xbd/0x12b0 [ 590.720069][ C0] ? __do_sys_rt_sigreturn+0x92a/0xa70 [ 590.725558][ C0] ? KSTK_ESP+0x60/0x60 [ 590.729740][ C0] ? get_sigframe_size+0x10/0x10 [ 590.734724][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 590.740205][ C0] exit_to_user_mode_loop+0x97/0x130 [ 590.745520][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 590.751093][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 590.756664][ C0] do_syscall_64+0x47/0x80 [ 590.761102][ C0] ? clear_bhb_loop+0x15/0x70 [ 590.765798][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.771709][ C0] RIP: 0033:0x7f572f8f6967 [ 590.776149][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 590.795808][ C0] RSP: 002b:00007f572d75e0e8 EFLAGS: 00000246 [ 590.801894][ C0] RAX: 00000000000000ca RBX: 00007f572fb1dfa8 RCX: 00007f572f8f6969 [ 590.809898][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f572fb1dfa8 [ 590.817881][ C0] RBP: 00007f572fb1dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 590.825868][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f572fb1dfac [ 590.833857][ C0] R13: 0000000000000000 R14: 00007ffdab0dd6d0 R15: 00007ffdab0dd7b8 [ 590.841859][ C0]