last executing test programs: 1m4.54116717s ago: executing program 0 (id=114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x29, 0x0, &(0x7f0000000180)=""/41, 0x29}, &(0x7f0000000200)=0x40) 1m2.417989022s ago: executing program 0 (id=118): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x14, 0x0) r1 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x22020600) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010125bd7000fdd3df25011f"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x20008000) socket$inet(0x2, 0x2, 0xd8) socket$inet6(0xa, 0x0, 0x4) 1m0.959241234s ago: executing program 0 (id=119): syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20007b91597ffca42d8a82530b247dc000086dd608a35f200380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e000000090780000080a0000000000000000fe06e2d4c3d90502130f6960b35cc68b3b26b9761e4d89000000"], 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x3}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003600), 0x101000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d07, &(0x7f0000003640)=0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 58.513150375s ago: executing program 0 (id=123): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") open(0x0, 0x40, 0x81) creat(&(0x7f0000000300)='./bus\x00', 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) statfs(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000001280)=""/4096) 56.92912362s ago: executing program 0 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x50) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20b, &(0x7f0000000b00)="$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") open(0x0, 0x8000, 0x112) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)) 56.345205212s ago: executing program 0 (id=130): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 55.336738984s ago: executing program 32 (id=130): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.565422769s ago: executing program 4 (id=247): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.501194655s ago: executing program 4 (id=250): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x63, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0xc041) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x9) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) umount2(0x0, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc17c2d1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600300000300", [0xfffffffffffffffd]}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0xffffffffffffffff) 12.785372441s ago: executing program 1 (id=253): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64=r0, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 12.736799265s ago: executing program 3 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11.160585958s ago: executing program 3 (id=255): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x2) 10.91412969s ago: executing program 4 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 10.877768194s ago: executing program 2 (id=258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x180, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, 0x0) 10.561111892s ago: executing program 2 (id=259): r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x80000004) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004894) 8.611050299s ago: executing program 2 (id=260): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x6, 0x1, "8968d023e163ead25f870d4e70e553f521676179bcf3f099b1136e420e4c8cc25f779cd073d658dc7e9f2ebe42f6e6b139726f6af974af22c708285ad30245c5ec4b2ec7ae28d3da4b270371d4a9f005a8ea6d7607ec7c67dbca0dce47660c3ecd9abfb2d2fface1c416cdf6ddf4109825ea263470ddae3f2ecbb9c63a0479cbb9c65b713367be2523faa2ef957a05b1e91e5cc1b3d04e7ad4120a5fc86947dea4bfa1ce1063077ed4b47dc5201934caa2f00c213e0934fd37a4398cf7ee1469b8e387c980bd31d486f11fd9982c2101deaffc08c072ebf13df2d55a6a75c31890076b7c7cf6941afce2ccd9984f5152a25472f38edbff324c1a3b2ad36defa9"}) 8.391513449s ago: executing program 4 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x948, 0x82803) ioctl$BLKDISCARD(r1, 0x1277, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setfsuid(0xee01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002cc0)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ife={0x30, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, 'zW'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x200408d4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) 8.249085462s ago: executing program 1 (id=262): syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20007b91597ffca42d8a82530b247dc000086dd608a35f200380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e000000090780000080a0000000000000000fe06e2d4c3d90502130f6960b35cc68b3b26b9761e4d89000000"], 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102400, 0x19000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8004, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.200464977s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.610891021s ago: executing program 1 (id=264): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0xfa9, &(0x7f0000000100)) io_uring_setup(0x6ee9, &(0x7f0000000180)={0x0, 0x0, 0x2000}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009040000000202"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82802, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x20, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x18}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c040) 5.171036281s ago: executing program 4 (id=265): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x63, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0xc041) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x9) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc17c2d1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600300000300", [0xfffffffffffffffd]}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0xffffffffffffffff) 4.237211885s ago: executing program 3 (id=266): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001300)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "35d28b", 0x2}}}, 0xd) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x40005) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 3.880979788s ago: executing program 3 (id=267): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 3.670536307s ago: executing program 3 (id=268): openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x80000004) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) 3.617189452s ago: executing program 1 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.617067092s ago: executing program 2 (id=270): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="73686f776173736f632c73686f776173736f632c757466382c696f636861727365743d63703835352c73686f776173736f632c636865636b3d7374726963742c63727566742c636865636b3d7374726963742c002e7823c7c4b6a6c2d1b26eecec3cd9dec4d76afd93568b1cfc907e9dca658f2123cfa5cfb51041976dc86b1ced087f87e543b08a99c7b5cd021ae819ab959aca58828a5509e7f6ebe67ad1aff429142cf6cae13f268bb45744f6429b49c811f5e36ec919d9cb8a937843"], 0x1, 0x3ef, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) 1.950672493s ago: executing program 3 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x948, 0x82803) ioctl$BLKDISCARD(r1, 0x1277, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setfsuid(0xee01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002cc0)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ife={0x30, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, 'zW'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x200408d4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) 1.742142451s ago: executing program 1 (id=272): syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20007b91597ffca42d8a82530b247dc000086dd608a35f200380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e000000090780000080a0000000000000000fe06e2d4c3d90502130f6960b35cc68b3b26b9761e4d89000000"], 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8004, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.638045041s ago: executing program 2 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 40.991966ms ago: executing program 2 (id=274): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x20400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000003c0)={{0x4, 0x4, 0xffffffff, 0xffffff01, 'syz0\x00', 0x9}, 0x6, 0x400, 0x9, r0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000280)=[']\x00'], 0x2}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) userfaultfd(0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2102, 0xcc) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000040)=0x10040a4, 0x4) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet6(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 1 (id=275): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 68.151893][ T5756] cgroup: Unknown subsys name 'net' [ 68.285141][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.985249][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.665002][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.671664][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.293819][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.302918][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.310759][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.338236][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.349514][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.357767][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.366971][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.377569][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.387476][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.395024][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.420877][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.430770][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.438133][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.450181][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.466125][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.476325][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.484704][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.484804][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.500510][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.509041][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.516895][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.524997][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.545489][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.558920][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.803778][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 73.031477][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.041623][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.049611][ T5765] bridge_slave_0: entered allmulticast mode [ 73.057375][ T5765] bridge_slave_0: entered promiscuous mode [ 73.108828][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.116077][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.138401][ T5765] bridge_slave_1: entered allmulticast mode [ 73.146622][ T5765] bridge_slave_1: entered promiscuous mode [ 73.156299][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 73.234333][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.244133][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 73.264724][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.279264][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 73.368915][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.376168][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.384227][ T5776] bridge_slave_0: entered allmulticast mode [ 73.392223][ T5776] bridge_slave_0: entered promiscuous mode [ 73.402951][ T5765] team0: Port device team_slave_0 added [ 73.412637][ T5765] team0: Port device team_slave_1 added [ 73.438957][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.446118][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.453631][ T5776] bridge_slave_1: entered allmulticast mode [ 73.460525][ T5776] bridge_slave_1: entered promiscuous mode [ 73.530482][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.543651][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.554079][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.561325][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.587517][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.645517][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.653051][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.680255][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.691856][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.699084][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.706240][ T5770] bridge_slave_0: entered allmulticast mode [ 73.713371][ T5770] bridge_slave_0: entered promiscuous mode [ 73.750389][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.757609][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.765286][ T5770] bridge_slave_1: entered allmulticast mode [ 73.774225][ T5770] bridge_slave_1: entered promiscuous mode [ 73.784872][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.792249][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.799509][ T5769] bridge_slave_0: entered allmulticast mode [ 73.806305][ T5769] bridge_slave_0: entered promiscuous mode [ 73.816453][ T5776] team0: Port device team_slave_0 added [ 73.826253][ T5776] team0: Port device team_slave_1 added [ 73.865836][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.873471][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.880754][ T5769] bridge_slave_1: entered allmulticast mode [ 73.887589][ T5769] bridge_slave_1: entered promiscuous mode [ 73.923253][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.930364][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.957139][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.970041][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.977103][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.003283][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.052673][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.065830][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.095215][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.106606][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.132787][ T5765] hsr_slave_0: entered promiscuous mode [ 74.139816][ T5765] hsr_slave_1: entered promiscuous mode [ 74.174015][ T5770] team0: Port device team_slave_0 added [ 74.206469][ T5769] team0: Port device team_slave_0 added [ 74.215906][ T5769] team0: Port device team_slave_1 added [ 74.224357][ T5770] team0: Port device team_slave_1 added [ 74.259573][ T5776] hsr_slave_0: entered promiscuous mode [ 74.265921][ T5776] hsr_slave_1: entered promiscuous mode [ 74.272122][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.281009][ T5776] Cannot create hsr debugfs directory [ 74.332352][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.340215][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.366591][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.401458][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.408502][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.434460][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.446775][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.453869][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.480815][ T5780] Bluetooth: hci0: command tx timeout [ 74.482053][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.526251][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.533354][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.559717][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.563718][ T5780] Bluetooth: hci1: command tx timeout [ 74.621261][ T5780] Bluetooth: hci2: command tx timeout [ 74.627047][ T5780] Bluetooth: hci3: command tx timeout [ 74.646374][ T5770] hsr_slave_0: entered promiscuous mode [ 74.653682][ T5770] hsr_slave_1: entered promiscuous mode [ 74.660261][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.667897][ T5770] Cannot create hsr debugfs directory [ 74.695501][ T5769] hsr_slave_0: entered promiscuous mode [ 74.702049][ T5769] hsr_slave_1: entered promiscuous mode [ 74.709513][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.717125][ T5769] Cannot create hsr debugfs directory [ 75.046860][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.059039][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.071540][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.084718][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.150697][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.167595][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.179027][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.198333][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.287600][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.302277][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.333975][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.372957][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.440040][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.452272][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.464326][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.490067][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.526263][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.554975][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.576493][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.622654][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.651144][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.658612][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.669392][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.676616][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.734208][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.741444][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.773149][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.780475][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.851500][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.901352][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.946599][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.953945][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.970313][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.010682][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.017921][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.086081][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.141762][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.149013][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.188776][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.196090][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.334209][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.450322][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.542221][ T5765] veth0_vlan: entered promiscuous mode [ 76.545427][ T5780] Bluetooth: hci0: command tx timeout [ 76.603774][ T5765] veth1_vlan: entered promiscuous mode [ 76.619318][ T5780] Bluetooth: hci1: command tx timeout [ 76.673746][ T5776] veth0_vlan: entered promiscuous mode [ 76.698876][ T5780] Bluetooth: hci2: command tx timeout [ 76.698884][ T5773] Bluetooth: hci3: command tx timeout [ 76.737223][ T5776] veth1_vlan: entered promiscuous mode [ 76.753674][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.796955][ T5765] veth0_macvtap: entered promiscuous mode [ 76.816164][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.825476][ T5765] veth1_macvtap: entered promiscuous mode [ 76.865827][ T5776] veth0_macvtap: entered promiscuous mode [ 76.881752][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.892930][ T5776] veth1_macvtap: entered promiscuous mode [ 76.925435][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.954458][ T5770] veth0_vlan: entered promiscuous mode [ 76.973991][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.983442][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.992550][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.004566][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.032187][ T5770] veth1_vlan: entered promiscuous mode [ 77.039262][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.050705][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.062742][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.110475][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.121168][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.133723][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.145958][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154768][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.163625][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.173734][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.190819][ T5769] veth0_vlan: entered promiscuous mode [ 77.218981][ T5769] veth1_vlan: entered promiscuous mode [ 77.293608][ T5770] veth0_macvtap: entered promiscuous mode [ 77.342677][ T5770] veth1_macvtap: entered promiscuous mode [ 77.381684][ T5769] veth0_macvtap: entered promiscuous mode [ 77.393570][ T5769] veth1_macvtap: entered promiscuous mode [ 77.405203][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.414633][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.443561][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.454452][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.466933][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.477698][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.490444][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.536147][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.551116][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.561288][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.572374][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.583946][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.594674][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.605871][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.624517][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.635490][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.646113][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.659595][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.670687][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.682565][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.691442][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700647][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.709609][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.725767][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.749775][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.756305][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.769334][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.779480][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.790302][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.800628][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.811281][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.822511][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.846423][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.855207][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.882640][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893155][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.904270][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.913470][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.933006][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.944107][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.002507][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.026360][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.213768][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.250767][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.317147][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.334929][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.568709][ T5855] syz.3.4[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.599859][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.610848][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.678370][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'. [ 78.698163][ T5773] Bluetooth: hci0: command tx timeout [ 78.706154][ T5773] Bluetooth: hci1: command tx timeout [ 78.781600][ T5773] Bluetooth: hci3: command tx timeout [ 78.787264][ T5773] Bluetooth: hci2: command tx timeout [ 80.778987][ T5780] Bluetooth: hci1: command tx timeout [ 80.784988][ T5780] Bluetooth: hci0: command tx timeout [ 80.864519][ T5780] Bluetooth: hci2: command tx timeout [ 80.870669][ T5780] Bluetooth: hci3: command tx timeout [ 80.929085][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.738214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.748133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.929382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.943222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 83.957704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.558295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 84.696900][ T5903] loop2: detected capacity change from 0 to 128 [ 84.777037][ T5903] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.894507][ T5903] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.039738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.109277][ T27] audit: type=1800 audit(1765518459.427:2): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 85.370095][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.696295][ T5909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 86.468142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.098779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.101878][ T5912] kAFS: No cell specified [ 87.107073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.604770][ T23] cfg80211: failed to load regulatory.db [ 89.372412][ T5920] loop3: detected capacity change from 0 to 2048 [ 89.481666][ T5920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.842353][ T5833] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.989915][ T5937] loop3: detected capacity change from 0 to 512 [ 90.090988][ T5833] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.112754][ T5937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 90.122329][ T5937] System zones: [ 90.122441][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.128995][ T5937] 1-12 [ 90.135594][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.146982][ T5833] usb 2-1: SerialNumber: syz [ 90.175195][ T5937] [ 90.213993][ T5937] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.19: Directory hole found for htree index block 0 [ 90.250414][ T5937] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 90.267469][ T5937] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.19: Directory hole found for htree index block 0 [ 90.283104][ T5937] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 90.321265][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.520400][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 90.557735][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 90.726488][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.819163][ T5833] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 90.909656][ T5833] usb 2-1: USB disconnect, device number 2 [ 90.926991][ T5956] loop0: detected capacity change from 0 to 512 [ 90.990501][ T5956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 91.030009][ T5956] System zones: 1-12 [ 91.034480][ T5956] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.23: Directory hole found for htree index block 0 [ 91.077783][ T5956] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 91.086088][ T5956] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.23: Directory hole found for htree index block 0 [ 91.120064][ T5956] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 91.155523][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.726486][ T5960] loop3: detected capacity change from 0 to 32768 [ 91.757237][ T5960] ======================================================= [ 91.757237][ T5960] WARNING: The mand mount option has been deprecated and [ 91.757237][ T5960] and is ignored by this kernel. Remove the mand [ 91.757237][ T5960] option from the mount to silence this warning. [ 91.757237][ T5960] ======================================================= [ 91.995077][ T5960] JBD2: Ignoring recovery information on journal [ 92.007909][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.283759][ T23] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 92.292963][ T23] usb 3-1: config 0 has no interface number 0 [ 92.315393][ T23] usb 3-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 92.325165][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.333423][ T23] usb 3-1: Product: syz [ 92.355556][ T23] usb 3-1: Manufacturer: syz [ 92.377145][ T23] usb 3-1: SerialNumber: syz [ 92.469699][ T23] usb 3-1: config 0 descriptor?? [ 92.504343][ T23] usb-storage 3-1:0.133: USB Mass Storage device detected [ 92.522920][ T5960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.709153][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.712857][ T23] usb 3-1: USB disconnect, device number 2 [ 92.991437][ T5982] loop1: detected capacity change from 0 to 2048 [ 93.006424][ T5983] loop0: detected capacity change from 0 to 512 [ 93.035855][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 93.058429][ T5982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.067633][ T5983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 93.077224][ T5983] System zones: 1-12 [ 93.082332][ T5983] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.29: Directory hole found for htree index block 0 [ 93.095479][ T5983] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 93.103975][ T5983] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.29: Directory hole found for htree index block 0 [ 93.136942][ T5983] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 93.146718][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.330491][ T27] audit: type=1800 audit(1765518467.647:3): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="file1" dev="loop1" ino=1410 res=0 errno=0 [ 93.366658][ T27] audit: type=1800 audit(1765518467.677:4): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="file1" dev="loop1" ino=1410 res=0 errno=0 [ 93.421382][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.624527][ T5990] loop2: detected capacity change from 0 to 2048 [ 93.643609][ T5990] UDF-fs: bad mount option "utf8*noadinicb" or missing value [ 95.932456][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 97.620659][ T6020] loop0: detected capacity change from 0 to 16 [ 97.660723][ T6020] erofs: (device loop0): mounted with root inode @ nid 36. [ 99.454330][ T6030] loop0: detected capacity change from 0 to 512 [ 99.773580][ T6030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.883295][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.195315][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.236150][ T6046] loop2: detected capacity change from 0 to 2048 [ 101.697089][ T6046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.130507][ T6053] loop3: detected capacity change from 0 to 512 [ 102.278839][ T6053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 102.348679][ T6053] System zones: 1-12 [ 102.369588][ T6053] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.51: Directory hole found for htree index block 0 [ 102.641796][ T6053] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 102.745558][ T6053] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.51: Directory hole found for htree index block 0 [ 103.025397][ T6053] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 103.060586][ T6053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.219887][ T6059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 104.267193][ T6076] loop0: detected capacity change from 0 to 1024 [ 104.445930][ T27] audit: type=1326 audit(1765518478.757:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.0.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f8098f749 code=0x0 [ 104.612025][ T6086] loop1: detected capacity change from 0 to 512 [ 104.910666][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.266546][ T6093] loop3: detected capacity change from 0 to 764 [ 105.488605][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.570287][ T6086] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.284462][ T6098] Symlink component flag not implemented [ 106.330403][ T6098] Symlink component flag not implemented [ 106.362811][ T6098] Symlink component flag not implemented (128) [ 106.390088][ T6098] Symlink component flag not implemented (122) [ 106.487241][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 106.535739][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.692369][ T6106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.727787][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.736966][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.70'. [ 107.003778][ T27] audit: type=1326 audit(1765518481.317:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa578f749 code=0x7ffc0000 [ 107.029022][ T6117] loop1: detected capacity change from 0 to 1024 [ 107.038931][ T6117] ext4: Unknown parameter 'obj_type' [ 107.062872][ T27] audit: type=1326 audit(1765518481.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa578f749 code=0x7ffc0000 [ 107.086700][ T27] audit: type=1326 audit(1765518481.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5aa578f749 code=0x7ffc0000 [ 107.109246][ T27] audit: type=1326 audit(1765518481.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa578f749 code=0x7ffc0000 [ 107.137893][ T27] audit: type=1326 audit(1765518481.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa578f749 code=0x7ffc0000 [ 107.412393][ T5961] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.883894][ T6124] loop2: detected capacity change from 0 to 1024 [ 107.938607][ T6124] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 108.069286][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.205958][ T6124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.75: bg 0: block 72: padding at end of block bitmap is not set [ 108.280093][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 108.410537][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.746410][ T6148] loop1: detected capacity change from 0 to 1024 [ 109.548754][ T6148] hfsplus: b-tree write err: -5, ino 3 [ 111.137881][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.422417][ T1142] hfsplus: bad catalog file entry [ 111.617862][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 111.803735][ T9] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 111.831517][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.843641][ T9] usb 1-1: config 0 has no interface number 0 [ 111.849955][ T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 111.859975][ T9] usb 1-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.873473][ T9] usb 1-1: config 0 interface 98 has no altsetting 0 [ 111.927027][ T9] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 111.957690][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.979826][ T9] usb 1-1: Product: syz [ 111.984077][ T9] usb 1-1: Manufacturer: syz [ 112.013206][ T9] usb 1-1: SerialNumber: syz [ 112.033448][ T9] usb 1-1: config 0 descriptor?? [ 112.261035][ T6153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.272765][ T9] asix: probe of 1-1:0.98 failed with error -22 [ 113.031254][ T9] usb 1-1: USB disconnect, device number 2 [ 115.130402][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 115.438817][ T6190] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 115.585350][ T6193] capability: warning: `syz.2.98' uses 32-bit capabilities (legacy support in use) [ 115.721894][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.139751][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 116.352555][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.649373][ T9] usb 1-1: config 7 has an invalid interface number: 213 but max is 0 [ 116.678137][ T9] usb 1-1: config 7 has no interface number 0 [ 116.694598][ T9] usb 1-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 116.728821][ T6188] loop2: detected capacity change from 0 to 1024 [ 116.755342][ T9] usb 1-1: config 7 interface 213 has no altsetting 0 [ 116.851821][ T9] usb 1-1: string descriptor 0 read error: -22 [ 116.872913][ T9] usb 1-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 116.890386][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.898956][ T1142] hfsplus: b-tree write err: -5, ino 8 [ 116.959829][ T6189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.985320][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.1.100'. [ 117.012897][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.1.100'. [ 117.232646][ T9] pegasus: probe of 1-1:7.213 failed with error -71 [ 117.282953][ T9] usb 1-1: USB disconnect, device number 3 [ 118.945593][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.727815][ T28] usb 4-1: device not accepting address 2, error -71 [ 121.891208][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 121.922428][ T6228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.111'. [ 122.221700][ T6230] loop3: detected capacity change from 0 to 1024 [ 122.436852][ T6232] loop2: detected capacity change from 0 to 4096 [ 122.503549][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.698501][ T6232] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.103: bg 0: block 363: padding at end of block bitmap is not set [ 122.732167][ T6239] loop1: detected capacity change from 0 to 512 [ 122.775806][ T6239] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 122.818980][ T6239] warning: `syz.1.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.847808][ T28] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.962265][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.071881][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.092680][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.112473][ T28] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.738326][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.746412][ T28] usb 4-1: SerialNumber: syz [ 125.017607][ T28] usb 4-1: invalid UAC_HEADER (v1) [ 125.095127][ T6248] loop1: detected capacity change from 0 to 8192 [ 125.103837][ T28] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 125.265938][ T28] usb 4-1: USB disconnect, device number 4 [ 125.971306][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.079596][ T6268] loop7: detected capacity change from 0 to 7 [ 128.098033][ T6268] Dev loop7: unable to read RDB block 7 [ 128.103954][ T6268] loop7: unable to read partition table [ 128.110482][ T6268] loop7: partition table beyond EOD, truncated [ 128.116730][ T6268] loop_reread_partitions: partition scan of loop7 (Cj̖}X %`ր{֐ȵ4FLQk݊5) failed (rc=-5) [ 128.412341][ T6262] loop3: detected capacity change from 0 to 1024 [ 128.686604][ T6262] EXT4-fs: inline encryption not supported [ 128.734198][ T6262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.823707][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.957389][ T6262] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 129.008494][ T6262] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 129.089539][ T6273] loop0: detected capacity change from 0 to 2048 [ 129.122391][ T6273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.162640][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.463313][ T6280] netlink: 'syz.3.124': attribute type 7 has an invalid length. [ 129.471470][ T6280] netlink: 'syz.3.124': attribute type 8 has an invalid length. [ 130.422127][ T5765] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 130.468748][ T5765] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 130.616851][ T6285] loop2: detected capacity change from 0 to 1024 [ 130.689800][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.050955][ T159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.075177][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.215213][ T159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.703848][ T159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.017265][ T159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.378856][ T6308] netlink: 'syz.2.134': attribute type 7 has an invalid length. [ 132.386760][ T6308] netlink: 'syz.2.134': attribute type 8 has an invalid length. [ 133.104912][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.122982][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.281299][ T6314] loop2: detected capacity change from 0 to 1024 [ 133.302510][ T6316] capability: warning: `syz.1.139' uses deprecated v2 capabilities in a way that may be insecure [ 133.314504][ T6314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.370538][ T6314] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.429985][ T6314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 133.478079][ T6314] System zones: 0-1, 3-36 [ 133.547505][ T6314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.664978][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.676576][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.688371][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.697396][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.714492][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.722257][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.819362][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.908075][ T6344] loop2: detected capacity change from 0 to 512 [ 134.975623][ T6344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.004527][ T6344] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.051259][ T6344] EXT4-fs error (device loop2): ext4_xattr_block_get:600: inode #15: comm syz.2.144: corrupted xattr block 33: invalid ea_ino [ 135.161562][ T6344] EXT4-fs (loop2): Remounting filesystem read-only [ 135.199636][ T27] audit: type=1800 audit(1765518509.507:11): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.144" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 135.395301][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.525313][ T1142] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.766097][ T1142] Quota error (device loop2): write_blk: dquota write failed [ 135.868949][ T5773] Bluetooth: hci0: command tx timeout [ 135.934914][ T1142] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 136.026276][ T1142] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.648816][ T1142] Quota error (device loop2): write_blk: dquota write failed [ 136.656284][ T1142] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 136.688438][ T1142] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 136.703644][ T1142] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 138.327825][ T5773] Bluetooth: hci0: command tx timeout [ 138.398916][ T5812] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 139.678757][ T5812] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 139.687113][ T5812] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 139.700725][ T5812] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 139.711446][ T5812] usb 2-1: config 8 has no interface number 0 [ 139.719809][ T5812] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 139.732191][ T5812] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.779077][ T5812] usb 2-1: string descriptor 0 read error: -71 [ 139.785450][ T5812] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 139.845342][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.929432][ T5812] usb 2-1: can't set config #8, error -71 [ 139.949334][ T5812] usb 2-1: USB disconnect, device number 3 [ 140.129539][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 140.378286][ T5773] Bluetooth: hci0: command tx timeout [ 140.666304][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.714825][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.738299][ T6326] bridge_slave_0: entered allmulticast mode [ 140.779738][ T6326] bridge_slave_0: entered promiscuous mode [ 140.819351][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.826552][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.923109][ T6326] bridge_slave_1: entered allmulticast mode [ 140.940156][ T6401] loop1: detected capacity change from 0 to 1024 [ 140.944602][ T6326] bridge_slave_1: entered promiscuous mode [ 140.951151][ T6401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.150811][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.367848][ T159] hsr_slave_0: left promiscuous mode [ 141.402054][ T159] hsr_slave_1: left promiscuous mode [ 141.416783][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.426549][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.477136][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.508132][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.527462][ T159] bridge_slave_1: left allmulticast mode [ 141.533372][ T159] bridge_slave_1: left promiscuous mode [ 141.542540][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.596019][ T159] bridge_slave_0: left allmulticast mode [ 141.602247][ T159] bridge_slave_0: left promiscuous mode [ 141.608180][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.122650][ T159] veth1_macvtap: left promiscuous mode [ 142.324125][ T159] veth0_macvtap: left promiscuous mode [ 142.331456][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.331677][ T159] veth1_vlan: left promiscuous mode [ 142.366629][ T159] veth0_vlan: left promiscuous mode [ 142.458202][ T5773] Bluetooth: hci0: command tx timeout [ 142.686367][ T6416] loop2: detected capacity change from 0 to 1024 [ 142.766971][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.977786][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.981181][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.170152][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 143.179854][ T28] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.188425][ T28] usb 4-1: config 0 has no interface number 0 [ 143.194690][ T28] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.212710][ T28] usb 4-1: config 0 interface 85 has no altsetting 0 [ 143.231910][ T28] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.242830][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.251412][ T28] usb 4-1: Product: syz [ 143.255818][ T28] usb 4-1: Manufacturer: syz [ 143.261338][ T28] usb 4-1: SerialNumber: syz [ 143.277387][ T28] usb 4-1: config 0 descriptor?? [ 143.562515][ T159] team0 (unregistering): Port device team_slave_1 removed [ 143.633461][ T159] team0 (unregistering): Port device team_slave_0 removed [ 143.711289][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.784615][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.928738][ T28] appletouch 4-1:0.85: Geyser mode initialized. [ 143.946487][ T28] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5 [ 144.155561][ T5819] usb 4-1: USB disconnect, device number 5 [ 144.214074][ T5819] appletouch 4-1:0.85: input: appletouch disconnected [ 144.498429][ T159] bond0 (unregistering): Released all slaves [ 144.671568][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.703746][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.571878][ T6326] team0: Port device team_slave_0 added [ 147.030625][ T6326] team0: Port device team_slave_1 added [ 147.398371][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.427062][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.473683][ T6447] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 147.506541][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.535802][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.551919][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.605720][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.834229][ T6454] loop2: detected capacity change from 0 to 2048 [ 147.853022][ T6326] hsr_slave_0: entered promiscuous mode [ 147.861880][ T6458] loop3: detected capacity change from 0 to 512 [ 147.890084][ T6326] hsr_slave_1: entered promiscuous mode [ 147.914186][ T6458] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.970934][ T6458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.033520][ T6458] EXT4-fs (loop3): 1 truncate cleaned up [ 148.458656][ T6463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.539792][ T6458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.798566][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.058844][ T6474] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 150.216420][ T6326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.256947][ T6326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.313654][ T6326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.390000][ T6326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.874050][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.363044][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.432168][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.439420][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.460656][ T6496] loop3: detected capacity change from 0 to 2048 [ 151.475815][ T6496] EXT4-fs: Ignoring removed i_version option [ 151.506698][ T6498] loop1: detected capacity change from 0 to 1024 [ 151.514909][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.522151][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.546754][ T6498] hfsplus: request for non-existent node 3 in B*Tree [ 151.555037][ T6498] hfsplus: request for non-existent node 3 in B*Tree [ 151.586327][ T6498] hfsplus: request for non-existent node 4 in B*Tree [ 151.597902][ T6498] hfsplus: request for non-existent node 4 in B*Tree [ 151.601912][ T6496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.716664][ T6326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.775127][ T6496] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.177: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 151.866938][ T6496] EXT4-fs (loop3): Remounting filesystem read-only [ 152.134736][ T6511] loop1: detected capacity change from 0 to 512 [ 152.290692][ T6516] loop2: detected capacity change from 0 to 764 [ 152.343725][ T6516] rock: directory entry would overflow storage [ 152.350996][ T6516] rock: sig=0x5245, size=8, remaining=5 [ 152.789117][ T6511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 152.834140][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.850494][ T6511] System zones: 1-12 [ 152.898416][ T6511] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.178: Directory hole found for htree index block 0 [ 153.013880][ T6511] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 153.067878][ T6511] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.178: Directory hole found for htree index block 0 [ 153.126185][ T6511] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 153.169765][ T6511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.295306][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.467725][ T5771] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 153.680056][ T5771] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.717353][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.718797][ T5771] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.818933][ T5771] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.849552][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.896086][ T5771] usb 4-1: SerialNumber: syz [ 154.043441][ T5771] usb 4-1: bad CDC descriptors [ 154.440785][ T6541] netlink: 124 bytes leftover after parsing attributes in process `syz.2.185'. [ 154.522459][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 154.567779][ T9] usb 4-1: USB disconnect, device number 6 [ 154.808040][ T6326] veth0_vlan: entered promiscuous mode [ 154.852533][ T6326] veth1_vlan: entered promiscuous mode [ 154.958480][ T6326] veth0_macvtap: entered promiscuous mode [ 154.981682][ T6326] veth1_macvtap: entered promiscuous mode [ 155.120439][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.242821][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.252865][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.263976][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.286661][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.333950][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.418993][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.730866][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.808061][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.877734][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.916502][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.942188][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.955026][ T6575] loop1: detected capacity change from 0 to 16 [ 155.985383][ T6574] loop3: detected capacity change from 0 to 1024 [ 155.988275][ T6575] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.992007][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.095852][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.142628][ T6326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.151707][ T6326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.152625][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.280669][ T6326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.289622][ T6326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.932764][ T6586] loop2: detected capacity change from 0 to 1024 [ 156.965305][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.971327][ T6586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.179232][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.187129][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.196619][ T6586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.404662][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.414632][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.517169][ T6604] loop1: detected capacity change from 0 to 512 [ 158.548762][ T6604] EXT4-fs (loop1): orphan cleanup on readonly fs [ 158.559345][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.563996][ T6604] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.198: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 158.696991][ T6604] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.198: Bad quota inode: 4, type: 1 [ 158.801179][ T6604] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.880213][ T6604] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 158.962580][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.043044][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.544609][ T6626] loop3: detected capacity change from 0 to 1024 [ 160.637284][ T6629] loop4: detected capacity change from 0 to 1024 [ 160.775145][ T6629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.983836][ T6326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.016365][ T6642] loop1: detected capacity change from 0 to 512 [ 161.086212][ T6642] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 161.249232][ T6647] netlink: 'syz.2.210': attribute type 7 has an invalid length. [ 161.330364][ T6647] netlink: 'syz.2.210': attribute type 8 has an invalid length. [ 161.508543][ T6653] process 'syz.1.207' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 162.881994][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.087827][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 163.149112][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.176186][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 163.217704][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 163.237926][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.257416][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 163.298439][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 163.329687][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 163.355225][ T23] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 163.371218][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.386121][ T23] usb 5-1: Product: syz [ 163.393406][ T6673] loop3: detected capacity change from 0 to 1024 [ 163.594740][ T6673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.601387][ T23] usb 5-1: Manufacturer: syz [ 163.612963][ T23] usb 5-1: SerialNumber: syz [ 163.644492][ T23] usb 5-1: config 0 descriptor?? [ 163.696815][ T23] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 163.841930][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.913418][ T23] usb 5-1: USB disconnect, device number 2 [ 163.940945][ T5766] udevd[5766]: setting mode of /dev/bus/usb/005/002 to 020664 failed: No such file or directory [ 163.991579][ T5766] udevd[5766]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory [ 164.111630][ T6691] netlink: 'syz.3.220': attribute type 7 has an invalid length. [ 164.119639][ T6691] netlink: 'syz.3.220': attribute type 8 has an invalid length. [ 164.967967][ T6693] udevd[6693]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.201084][ T6717] loop1: detected capacity change from 0 to 1024 [ 166.284443][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.697349][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.165303][ T6732] netlink: 'syz.1.231': attribute type 7 has an invalid length. [ 167.173297][ T6732] netlink: 'syz.1.231': attribute type 8 has an invalid length. [ 168.094002][ T6734] loop1: detected capacity change from 0 to 256 [ 168.190781][ T6734] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.218063][ T6734] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 168.285645][ T6734] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 168.534009][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 169.058070][ T6755] loop4: detected capacity change from 0 to 1024 [ 169.319669][ T6755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.814321][ T6769] loop3: detected capacity change from 0 to 1024 [ 169.869657][ T6771] netlink: 'syz.1.240': attribute type 7 has an invalid length. [ 169.877558][ T6771] netlink: 'syz.1.240': attribute type 8 has an invalid length. [ 169.935228][ T6326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.013600][ T6769] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.253802][ T6769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.628962][ T6769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.777869][ T6769] EXT4-fs error (device loop3): ext4_xattr_ibody_list:801: inode #2: comm syz.3.241: corrupted in-inode xattr: bad e_name length [ 170.953817][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.830467][ T6789] loop1: detected capacity change from 0 to 512 [ 171.868329][ T6789] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.359462][ T6806] loop2: detected capacity change from 0 to 512 [ 173.607243][ T6806] ext4: Unknown parameter 'subj_role' [ 173.722909][ T6814] netlink: 'syz.1.252': attribute type 7 has an invalid length. [ 173.730961][ T6814] netlink: 'syz.1.252': attribute type 8 has an invalid length. [ 174.616219][ T6811] loop4: detected capacity change from 0 to 1024 [ 174.774161][ T6811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.245834][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.461081][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 176.485567][ T6326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.494758][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 176.550001][ T8] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 176.593129][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.629627][ T8] usb 2-1: Product: syz [ 176.633878][ T8] usb 2-1: Manufacturer: syz [ 176.650167][ T8] usb 2-1: SerialNumber: syz [ 176.696900][ T8] usb 2-1: config 0 descriptor?? [ 176.733620][ T6818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.748139][ T6818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.948386][ T8] dm9601: probe of 2-1:0.0 failed with error -71 [ 179.087966][ T8] usb 2-1: USB disconnect, device number 4 [ 179.338566][ T6857] netlink: 'syz.4.261': attribute type 7 has an invalid length. [ 179.346460][ T6857] netlink: 'syz.4.261': attribute type 8 has an invalid length. [ 182.587749][ T5771] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.605169][ T6871] loop3: detected capacity change from 0 to 512 [ 182.763926][ T6871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.778005][ T5771] usb 2-1: Using ep0 maxpacket: 16 [ 182.796290][ T5771] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 182.818466][ T5771] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 182.827876][ T5771] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 182.837096][ T5771] usb 2-1: Product: syz [ 182.842020][ T5771] usb 2-1: Manufacturer: syz [ 182.856702][ T5771] r8152-cfgselector 2-1: config 0 descriptor?? [ 182.875288][ T5771] cdc_acm 2-1:0.0: Zero length descriptor references [ 182.882497][ T5771] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 182.942930][ T6871] EXT4-fs error (device loop3): ext4_get_first_dir_block:3584: inode #12: comm syz.3.255: Directory block failed checksum [ 183.120269][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.687775][ T5771] r8152-cfgselector 2-1: Unknown version 0x0000 [ 183.721507][ T5771] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 185.411138][ T6891] loop2: detected capacity change from 0 to 136 [ 185.432119][ T5773] Bluetooth: hci3: command tx timeout [ 292.667564][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 292.674625][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6326/2:b..l [ 292.682866][ C0] rcu: (detected by 0, t=10502 jiffies, g=18313, q=544 ncpus=2) [ 292.690575][ C0] task:syz-executor state:R running task stack:21512 pid:6326 ppid:6298 flags:0x00004002 [ 292.701987][ C0] Call Trace: [ 292.705264][ C0] [ 292.708197][ C0] __schedule+0x14d2/0x44d0 [ 292.712728][ C0] ? __bfs+0x5b0/0x5c0 [ 292.716793][ C0] ? asan.module_dtor+0x20/0x20 [ 292.721647][ C0] ? mark_lock+0x94/0x320 [ 292.725974][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 292.732041][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 292.737332][ C0] preempt_schedule_irq+0xb5/0x140 [ 292.742447][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 292.748169][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 292.753991][ C0] irqentry_exit+0x67/0x70 [ 292.758408][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.764384][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 292.769664][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 292.789263][ C0] RSP: 0018:ffffc900046df220 EFLAGS: 00000206 [ 292.795345][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e57385df1dc1cc00 [ 292.803349][ C0] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f80 [ 292.811319][ C0] RBP: ffffc900046df330 R08: dffffc0000000000 R09: 1ffffffff21b28a0 [ 292.819288][ C0] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: 1ffff920008dbe50 [ 292.827253][ C0] R13: ffffffff8cd2ff20 R14: 0000000000000246 R15: dffffc0000000000 [ 292.835301][ C0] ? read_lock_is_recursive+0x20/0x20 [ 292.840694][ C0] ? deref_stack_reg+0x1bd/0x240 [ 292.845645][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.851714][ C0] is_bpf_text_address+0x47/0x2a0 [ 292.856748][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 292.861955][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 292.867149][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.873213][ C0] kernel_text_address+0xa0/0xd0 [ 292.878158][ C0] __kernel_text_address+0xd/0x30 [ 292.883193][ C0] unwind_get_return_address+0x5d/0xc0 [ 292.888829][ C0] ? stack_trace_save+0xe0/0xe0 [ 292.893695][ C0] arch_stack_walk+0x11d/0x190 [ 292.898490][ C0] stack_trace_save+0x9c/0xe0 [ 292.903173][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 292.908287][ C0] save_stack+0xf7/0x1f0 [ 292.912527][ C0] ? __reset_page_owner+0x190/0x190 [ 292.917810][ C0] ? free_unref_page_prepare+0x7ce/0x8e0 [ 292.923524][ C0] ? free_unref_page_list+0xbe/0x860 [ 292.928799][ C0] ? release_pages+0x1fa0/0x2220 [ 292.933742][ C0] ? __folio_batch_release+0x71/0xe0 [ 292.939018][ C0] ? shmem_undo_range+0x5d0/0x1a40 [ 292.944136][ C0] ? shmem_evict_inode+0x273/0xa70 [ 292.949239][ C0] ? evict+0x486/0x870 [ 292.953298][ C0] ? do_unlinkat+0x37b/0x570 [ 292.957878][ C0] ? __x64_sys_unlink+0x49/0x50 [ 292.962715][ C0] ? do_syscall_64+0x55/0xb0 [ 292.967290][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.973353][ C0] ? page_ext_get+0x22/0x2b0 [ 292.977938][ C0] ? page_ext_get+0x1e2/0x2b0 [ 292.982691][ C0] __reset_page_owner+0x4e/0x190 [ 292.987668][ C0] ? rcu_is_watching+0x15/0xb0 [ 292.992451][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 292.997924][ C0] free_unref_page_list+0xbe/0x860 [ 293.003037][ C0] ? __folio_memcg+0x63/0x160 [ 293.007709][ C0] ? folio_memcg+0x127/0x480 [ 293.012291][ C0] release_pages+0x1fa0/0x2220 [ 293.017052][ C0] ? lru_cache_disable+0x30/0x30 [ 293.021986][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 293.027187][ C0] __folio_batch_release+0x71/0xe0 [ 293.032302][ C0] shmem_undo_range+0x5d0/0x1a40 [ 293.037236][ C0] ? __lock_acquire+0x1334/0x7c80 [ 293.042264][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 293.047471][ C0] ? inode_wait_for_writeback+0x1b4/0x200 [ 293.053189][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 293.058206][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 293.063227][ C0] shmem_evict_inode+0x273/0xa70 [ 293.068190][ C0] ? inode_wait_for_writeback+0x1b4/0x200 [ 293.073989][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 293.079543][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 293.085252][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 293.090270][ C0] ? bit_waitqueue+0x30/0x30 [ 293.094856][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 293.100050][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 293.105611][ C0] evict+0x486/0x870 [ 293.109501][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 293.114621][ C0] ? proc_nr_inodes+0x230/0x230 [ 293.119678][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 293.124906][ C0] ? _raw_spin_unlock+0x28/0x40 [ 293.129771][ C0] ? iput+0x70a/0x920 [ 293.133763][ C0] do_unlinkat+0x37b/0x570 [ 293.138194][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 293.143304][ C0] ? getname_flags+0x20a/0x500 [ 293.148101][ C0] __x64_sys_unlink+0x49/0x50 [ 293.152774][ C0] do_syscall_64+0x55/0xb0 [ 293.157210][ C0] ? clear_bhb_loop+0x40/0x90 [ 293.161912][ C0] ? clear_bhb_loop+0x40/0x90 [ 293.166600][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.172513][ C0] RIP: 0033:0x7fe3c258ecf7 [ 293.176929][ C0] RSP: 002b:00007ffc381b0858 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 293.185340][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe3c258ecf7 [ 293.193310][ C0] RDX: 00007ffc381b0880 RSI: 00007ffc381b0910 RDI: 00007ffc381b0910 [ 293.201276][ C0] RBP: 00007ffc381b0910 R08: 0000000000000000 R09: 0000000000000000 [ 293.209239][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc381b19a0 [ 293.217233][ C0] R13: 00007fe3c2613d7d R14: 000000000002c1dc R15: 00007ffc381b19e0 [ 293.225207][ C0] [ 293.228223][ C0] rcu: rcu_preempt kthread starved for 9981 jiffies! g18313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 293.239427][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 293.249390][ C0] rcu: RCU grace-period kthread stack dump: [ 293.255276][ C0] task:rcu_preempt state:R running task stack:27432 pid:17 ppid:2 flags:0x00004000 [ 293.266325][ C0] Call Trace: [ 293.269688][ C0] [ 293.272619][ C0] __schedule+0x14d2/0x44d0 [ 293.277147][ C0] ? asan.module_dtor+0x20/0x20 [ 293.281996][ C0] ? enqueue_timer+0x225/0x530 [ 293.286791][ C0] ? __mod_timer+0x984/0xdb0 [ 293.291582][ C0] schedule+0xbd/0x170 [ 293.295658][ C0] schedule_timeout+0x160/0x280 [ 293.300510][ C0] ? console_conditional_schedule+0x40/0x40 [ 293.306398][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 293.312303][ C0] ? update_process_times+0x1b0/0x1b0 [ 293.317730][ C0] ? prepare_to_swait_event+0x339/0x360 [ 293.323279][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 293.328129][ C0] ? rcu_gp_init+0x110e/0x1510 [ 293.332894][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 293.339046][ C0] ? rcu_gp_init+0x1510/0x1510 [ 293.343818][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 293.348686][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.353898][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 293.359443][ C0] rcu_gp_kthread+0x99/0x380 [ 293.364030][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 293.369144][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 293.374084][ C0] ? __kthread_parkme+0x162/0x1c0 [ 293.379105][ C0] kthread+0x2fa/0x390 [ 293.383161][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 293.388269][ C0] ? kthread_blkcg+0xd0/0xd0 [ 293.392874][ C0] ret_from_fork+0x48/0x80 [ 293.397297][ C0] ? kthread_blkcg+0xd0/0xd0 [ 293.401877][ C0] ret_from_fork_asm+0x11/0x20 [ 293.406642][ C0] [ 293.409654][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 293.415981][ C0] Sending NMI from CPU 0 to CPUs 1: [ 293.421203][ C1] NMI backtrace for cpu 1 [ 293.421212][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 293.421225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.421232][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 293.421252][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 bb 40 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 293.421263][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 293.421277][ C1] RAX: e1f39e3620f87700 RBX: ffffffff8161881b RCX: e1f39e3620f87700 [ 293.421287][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 293.421297][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 293.421307][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a2128 [ 293.421332][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364d780 [ 293.421341][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 293.421353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.421362][ C1] CR2: 00007f0f6911d1e3 CR3: 000000002137a000 CR4: 00000000003506e0 [ 293.421377][ C1] Call Trace: [ 293.421383][ C1] [ 293.421388][ C1] default_idle+0x13/0x20 [ 293.421404][ C1] default_idle_call+0x6c/0xa0 [ 293.421421][ C1] do_idle+0x1eb/0x510 [ 293.421440][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 293.421455][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 293.421479][ C1] cpu_startup_entry+0x43/0x60 [ 293.421494][ C1] start_secondary+0xee/0xf0 [ 293.421508][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 293.421533][ C1]