last executing test programs: 7m38.60348481s ago: executing program 3 (id=4): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 7m34.709349241s ago: executing program 3 (id=6): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) 7m19.276388665s ago: executing program 32 (id=6): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) 5m7.669734367s ago: executing program 0 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9}, 0x20) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff"], 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 5m6.354115712s ago: executing program 0 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYBLOB='p'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) 5m6.144313454s ago: executing program 0 (id=200): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r4, &(0x7f0000000180)='/dev/comedi3\x00', 0xa0, &(0x7f00000001c0)={@align=0x4, {0x2, 0x8000, 0x0, 0xf2f9}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x81}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000000)={0x48}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x3, 0x3, 0x8, 0xe, 0x5, 0x79, 0x3, 0x8000a, 0x2, 0x5, 0x1, 0x7, 0x1, 0x2, 0xfc, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x8b, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x1, 0xffffffff]}) 5m4.61676275s ago: executing program 0 (id=202): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r6 = io_uring_setup(0x138a, &(0x7f00000006c0)={0x0, 0x40cf, 0x1, 0x40000007, 0x15f}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0), 0x5f) getuid() statx(r2, &(0x7f0000000180)='./file1/../file0\x00', 0x4000, 0x100, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000040)={0x25, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r7 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r7, 0xc, 0x0, 0x0) 5m3.920322747s ago: executing program 0 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfb7, 0x840) ioctl$MON_IOCX_GETX(r3, 0x4018920a, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 5m2.976216648s ago: executing program 0 (id=207): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5m1.472795333s ago: executing program 33 (id=207): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m35.935293636s ago: executing program 1 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m34.192818675s ago: executing program 1 (id=451): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pread64(r4, &(0x7f0000000480)=""/209, 0xd1, 0x2) pread64(r4, &(0x7f0000000100)=""/1, 0x1, 0x7) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r6, &(0x7f0000000340), 0x8) creat(&(0x7f0000000100)='./file0\x00', 0x0) llistxattr(0x0, 0x0, 0x0) 2m32.405902494s ago: executing program 1 (id=455): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xc4}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) 2m29.514596025s ago: executing program 1 (id=461): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7ffffff7ffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7fff, 0x9b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) r6 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x5}) syslog(0x4, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2m26.876808693s ago: executing program 1 (id=466): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000480)={[{@stripe={'stripe', 0x3d, 0x5}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2401800, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="a5", 0x1}], 0x1, 0x7800, 0x0, 0x3) fanotify_init(0x0, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='lazytime\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)) 2m24.888907354s ago: executing program 1 (id=472): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000003600)={0x3, 0xfffffffffffffff9, 0x1000, &(0x7f0000002600)=""/4096}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r4, &(0x7f0000000180)='/dev/comedi3\x00', 0xa0, &(0x7f00000001c0)={@align=0x4, {0x2, 0x8000, 0x0, 0xf2f9}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x81}) writev(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000000)={0x48}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x3, 0x3, 0x8, 0xe, 0x5, 0x79, 0x3, 0x8000a, 0x2, 0x5, 0x1, 0x7, 0x1, 0x2, 0xfc, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x8b, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x1, 0xffffffff]}) 2m23.557665458s ago: executing program 34 (id=472): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000003600)={0x3, 0xfffffffffffffff9, 0x1000, &(0x7f0000002600)=""/4096}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r4, &(0x7f0000000180)='/dev/comedi3\x00', 0xa0, &(0x7f00000001c0)={@align=0x4, {0x2, 0x8000, 0x0, 0xf2f9}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x81}) writev(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000000)={0x48}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x3, 0x3, 0x8, 0xe, 0x5, 0x79, 0x3, 0x8000a, 0x2, 0x5, 0x1, 0x7, 0x1, 0x2, 0xfc, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x8b, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x1, 0xffffffff]}) 12.250094099s ago: executing program 4 (id=721): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x20842, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) socket$inet6(0xa, 0x80002, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 10.480230098s ago: executing program 4 (id=725): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xc4}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) 9.972569683s ago: executing program 6 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES8=r5], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 9.959869983s ago: executing program 5 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x3}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 8.37816141s ago: executing program 2 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES8=r5], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 8.37764457s ago: executing program 4 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES8=r5], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 8.190127242s ago: executing program 5 (id=730): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x24, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 8.185727042s ago: executing program 6 (id=731): socket(0x2a, 0x800, 0xb09a) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8.173559502s ago: executing program 4 (id=732): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x1, 0x40024b}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 6.186110663s ago: executing program 4 (id=733): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$inet(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x330, 0x0, 0x98, 0x0, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa20000000000000702", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}], 0x1, 0x86, 0x451) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 5.911056097s ago: executing program 5 (id=734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044084) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 5.728257429s ago: executing program 2 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, &(0x7f0000001540)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, &(0x7f0000000380)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f00002d5000/0x1000)=nil) 5.000798127s ago: executing program 6 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r4 = syz_open_dev$usbmon(0x0, 0xfb7, 0x840) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 3.939040968s ago: executing program 2 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfb7, 0x840) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 3.392217503s ago: executing program 6 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x3}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 2.867518199s ago: executing program 5 (id=739): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES8=r5], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.80563846s ago: executing program 2 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x3}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 2.346587175s ago: executing program 5 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0xa, {0x80, 0x2003, 0x1, 0x401}, {0x0, 0x400002, 0x4, 0x1000}, {0x9, 0x5}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/61}, 0x20) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x4, 0x0, 0x7ffd]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) 1.276727816s ago: executing program 6 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0xa, {0x80, 0x2003, 0x1, 0x401}, {0x0, 0x400002, 0x4, 0x1000}, {0x9, 0x5}}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/61}, 0x20) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x4, 0x0, 0x7ffd]}) 1.276361856s ago: executing program 2 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0xa, {0x80, 0x2003, 0x1, 0x401}, {0x0, 0x400002, 0x4, 0x1000}, {0x9, 0x5}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/61}, 0x20) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x4, 0x0, 0x7ffd]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 940.22697ms ago: executing program 5 (id=744): r0 = syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x5) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x483}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa5) 105.092808ms ago: executing program 2 (id=745): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac01, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 40.503799ms ago: executing program 6 (id=746): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r4 = syz_open_dev$usbmon(0x0, 0xfb7, 0x840) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 0s ago: executing program 4 (id=747): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f00000001c0)='1', 0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000100)) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf) r6 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) write$uinput_user_dev(r7, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) write$6lowpan_control(r3, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setuid(0xee01) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .909651][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.700590][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 112.465493][ T5779] Bluetooth: hci4: command tx timeout [ 113.020474][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.301416][ T5973] loop1: detected capacity change from 0 to 512 [ 113.401280][ T5973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.443150][ T5973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 113.451662][ T5973] System zones: 1-12 [ 113.465454][ T5973] EXT4-fs (loop1): 1 truncate cleaned up [ 113.476486][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.031780][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.052785][ T5974] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 114.061512][ T5974] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 114.070211][ T5974] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 114.241199][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.573769][ T5779] Bluetooth: hci4: command tx timeout [ 114.645443][ T5986] loop1: detected capacity change from 0 to 512 [ 117.369897][ T5779] Bluetooth: hci4: command tx timeout [ 117.417761][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.428700][ T5986] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.463296][ T5986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 117.471602][ T5986] System zones: 1-12 [ 117.485223][ T5986] EXT4-fs (loop1): 1 truncate cleaned up [ 117.492651][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.692079][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.804194][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.171099][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 118.562674][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.576220][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.584134][ T5949] bridge_slave_0: entered allmulticast mode [ 118.612149][ T5949] bridge_slave_0: entered promiscuous mode [ 118.654794][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.675632][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.700823][ T5949] bridge_slave_1: entered allmulticast mode [ 118.729515][ T5949] bridge_slave_1: entered promiscuous mode [ 118.858449][ T6012] loop2: detected capacity change from 0 to 32768 [ 118.870073][ T6012] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.30 (6012) [ 118.904341][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.913827][ T6012] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 118.924486][ T6012] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 118.934482][ T6012] BTRFS info (device loop2): enabling disk space caching [ 118.941605][ T6012] BTRFS info (device loop2): force clearing of disk cache [ 118.949100][ T6012] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.958877][ T6012] BTRFS info (device loop2): use zstd compression, level 3 [ 118.966185][ T6012] BTRFS info (device loop2): disk space caching is enabled [ 119.064556][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.073944][ T6012] BTRFS info (device loop2): enabling ssd optimizations [ 119.081203][ T6012] BTRFS info (device loop2): auto enabling async discard [ 119.102650][ T6012] BTRFS info (device loop2): rebuilding free space tree [ 119.170089][ T6012] BTRFS info (device loop2): disabling free space tree [ 119.178339][ T6012] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.188374][ T6012] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.289484][ T5949] team0: Port device team_slave_0 added [ 119.349558][ T5949] team0: Port device team_slave_1 added [ 119.411083][ T5779] Bluetooth: hci4: command tx timeout [ 119.513885][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.540471][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.604947][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.640003][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.649504][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.716651][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.290604][ T5949] hsr_slave_0: entered promiscuous mode [ 120.297619][ T5949] hsr_slave_1: entered promiscuous mode [ 120.303908][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.316426][ T5949] Cannot create hsr debugfs directory [ 120.652342][ T5777] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 121.926615][ T6062] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 121.935163][ T6062] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 121.943845][ T6062] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 123.336071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 127.401691][ T37] hsr_slave_0: left promiscuous mode [ 127.413837][ T37] hsr_slave_1: left promiscuous mode [ 127.437879][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.591094][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.638033][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.686047][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.704436][ T37] bridge_slave_1: left allmulticast mode [ 127.716075][ T37] bridge_slave_1: left promiscuous mode [ 127.723198][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.787707][ T37] bridge_slave_0: left allmulticast mode [ 127.793576][ T37] bridge_slave_0: left promiscuous mode [ 127.804318][ T6089] hugetlbfs: syz.1.38 (6089): Using mlock ulimits for SHM_HUGETLB is obsolete [ 127.846130][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.009191][ T37] veth1_macvtap: left promiscuous mode [ 128.068366][ T37] veth0_macvtap: left promiscuous mode [ 128.162157][ T37] veth1_vlan: left promiscuous mode [ 128.361353][ T37] veth0_vlan: left promiscuous mode [ 129.763120][ T37] team0 (unregistering): Port device team_slave_1 removed [ 129.829456][ T37] team0 (unregistering): Port device team_slave_0 removed [ 129.879281][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.944641][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.633772][ T37] bond0 (unregistering): Released all slaves [ 130.651904][ T6102] loop1: detected capacity change from 0 to 32768 [ 130.663929][ T6102] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.41 (6102) [ 130.720476][ T6102] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 130.732290][ T6102] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 130.743016][ T6102] BTRFS info (device loop1): enabling disk space caching [ 130.750274][ T6102] BTRFS info (device loop1): force clearing of disk cache [ 130.758942][ T6102] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 130.768560][ T6102] BTRFS info (device loop1): use zstd compression, level 3 [ 130.775821][ T6102] BTRFS info (device loop1): disk space caching is enabled [ 130.830186][ T6102] BTRFS info (device loop1): enabling ssd optimizations [ 130.837770][ T6102] BTRFS info (device loop1): auto enabling async discard [ 130.851595][ T6102] BTRFS info (device loop1): rebuilding free space tree [ 130.876186][ T6102] BTRFS info (device loop1): disabling free space tree [ 130.879249][ T6081] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 130.883152][ T6102] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.891663][ T6081] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 130.901332][ T6102] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.921277][ T6081] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 132.531824][ T5949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.693548][ T6123] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 132.698269][ T5949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.703415][ T6123] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 132.720018][ T6123] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 132.753006][ T5949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.862623][ T5771] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.879004][ T5949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.354782][ T6141] loop2: detected capacity change from 0 to 512 [ 133.365071][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.388968][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.401596][ T6141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.489001][ T6141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 133.497766][ T6141] System zones: 1-12 [ 133.523744][ T6141] EXT4-fs (loop2): 1 truncate cleaned up [ 133.535707][ T6141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.033803][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.634059][ T5761] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (5761) [ 135.064799][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.259046][ T6160] 9pnet_fd: Insufficient options for proto=fd [ 136.656579][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 136.656598][ T28] audit: type=1800 audit(1777942139.767:4): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file0" dev="overlay" ino=112 res=0 errno=0 [ 136.832138][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.096218][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.103473][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.291379][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.298587][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.311654][ T6169] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 137.320504][ T6169] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 137.329135][ T6169] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 138.420121][ T6186] loop2: detected capacity change from 0 to 40427 [ 138.440880][ T6186] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.449222][ T6186] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.462811][ T6186] F2FS-fs (loop2): invalid crc value [ 138.493679][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.520962][ T6186] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.596851][ T6186] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.604270][ T6186] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.243357][ T28] audit: type=1800 audit(1777942142.867:5): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 140.652831][ T37] kworker/u4:2: attempt to access beyond end of device [ 140.652831][ T37] loop2: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 140.795088][ T37] kworker/u4:2: attempt to access beyond end of device [ 140.795088][ T37] loop2: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 140.983443][ T5949] veth0_vlan: entered promiscuous mode [ 141.044238][ T6210] loop0: detected capacity change from 0 to 32768 [ 141.067469][ T37] kworker/u4:2: attempt to access beyond end of device [ 141.067469][ T37] loop2: rw=1, sector=57344, nr_sectors = 3704 limit=40427 [ 141.082929][ T5949] veth1_vlan: entered promiscuous mode [ 141.088879][ T6210] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 141.289280][ T5949] veth0_macvtap: entered promiscuous mode [ 141.411751][ T5761] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 141.420171][ T5949] veth1_macvtap: entered promiscuous mode [ 141.759885][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.820581][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.876265][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.941003][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.981621][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.013912][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.028611][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.039603][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.050147][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.060017][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.070633][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.081323][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.091928][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.104195][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.193867][ T5949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.236754][ T5949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.256288][ T5949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.265414][ T5949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.486286][ T6221] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 143.028421][ T6226] loop1: detected capacity change from 0 to 512 [ 143.116754][ T6226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.357195][ T6226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 144.365469][ T6226] System zones: 1-12 [ 144.382635][ T6226] EXT4-fs (loop1): 1 truncate cleaned up [ 144.394387][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.668870][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.944583][ T5842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.003751][ T5842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.096418][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.111793][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.242831][ T6237] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 145.253851][ T6237] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 145.262620][ T6237] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 146.177961][ T5827] IPVS: starting estimator thread 0... [ 146.407670][ T6247] IPVS: using max 15 ests per chain, 36000 per kthread [ 147.109906][ T6257] loop4: detected capacity change from 0 to 512 [ 147.169025][ T6257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.988623][ T6261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.922720][ T6257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 148.931541][ T6257] System zones: 1-12 [ 149.101504][ T6257] EXT4-fs (loop4): 1 truncate cleaned up [ 149.109486][ T6257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.494789][ T6272] 9pnet_fd: Insufficient options for proto=fd [ 149.666503][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.956236][ T6291] loop4: detected capacity change from 0 to 512 [ 152.004943][ T6291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.177412][ T6291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 152.186134][ T6291] System zones: 1-12 [ 152.193588][ T6291] EXT4-fs (loop4): 1 truncate cleaned up [ 152.204957][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.779490][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.558593][ T6304] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 158.366414][ T6337] loop4: detected capacity change from 0 to 32768 [ 158.375584][ T6337] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 159.125943][ T5761] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 159.945822][ T6351] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 159.955470][ T6351] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 159.964034][ T6351] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 160.581709][ T6359] loop0: detected capacity change from 0 to 1024 [ 160.604916][ T6359] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 160.604916][ T6359] [ 160.980986][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 161.233013][ T6371] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 161.241414][ T6371] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 161.250063][ T6371] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 164.007926][ T6395] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 164.783159][ T6394] qrtr: Invalid version 0 [ 170.515705][ T6411] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 170.524277][ T6411] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 170.533013][ T6411] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 172.217469][ T6428] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 172.227018][ T6428] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 172.235663][ T6428] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 174.679785][ T6456] loop4: detected capacity change from 0 to 512 [ 174.690030][ T6456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.816521][ T6459] qrtr: Invalid version 0 [ 175.621665][ T6456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 175.630162][ T6456] System zones: 1-12 [ 175.758488][ T6456] EXT4-fs (loop4): 1 truncate cleaned up [ 175.766410][ T6456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.040258][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.454956][ T6472] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 178.363661][ T5773] IPVS: starting estimator thread 0... [ 178.474723][ T6494] loop4: detected capacity change from 0 to 512 [ 178.495761][ T6494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.553625][ T6477] loop2: detected capacity change from 0 to 8192 [ 178.560566][ T6494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 178.570187][ T6494] System zones: 1-12 [ 178.590086][ T6490] IPVS: using max 19 ests per chain, 45600 per kthread [ 178.614679][ T6494] EXT4-fs (loop4): 1 truncate cleaned up [ 178.621163][ T6494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.702317][ T6503] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 178.711470][ T6503] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 178.720097][ T6503] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 178.830200][ T6477] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.974429][ T6477] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 179.003748][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.023134][ T6477] REISERFS (device loop2): using ordered data mode [ 179.029879][ T6477] reiserfs: using flush barriers [ 179.086298][ T6477] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.156723][ T6507] 9pnet_fd: Insufficient options for proto=fd [ 179.274886][ T6507] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 179.280096][ T6477] REISERFS (device loop2): checking transaction log (loop2) [ 179.393017][ T6507] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 179.924834][ T6477] REISERFS (device loop2): Using r5 hash to sort names [ 179.955716][ T6507] team0: Port device netdevsim0 added [ 179.960108][ T6477] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 180.111325][ T6515] loop0: detected capacity change from 0 to 512 [ 180.124942][ T6515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.151298][ T6515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 180.159556][ T6515] System zones: 1-12 [ 180.165701][ T6515] EXT4-fs (loop0): 1 truncate cleaned up [ 180.172325][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.997253][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.651256][ T6543] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 181.659971][ T6543] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 181.669496][ T6543] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 182.024912][ T6546] qrtr: Invalid version 0 [ 184.582281][ T6547] comedi comedi0: Minor 2 could not be opened [ 185.012217][ T6550] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.013030][ T6577] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 187.148370][ T6574] loop2: detected capacity change from 0 to 4096 [ 187.293550][ T6592] loop1: detected capacity change from 0 to 512 [ 187.303650][ T6592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.318668][ T6592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 187.326842][ T6592] System zones: 1-12 [ 187.373344][ T6592] EXT4-fs (loop1): 1 truncate cleaned up [ 187.379493][ T6585] bond1: (slave bridge1): making interface the new active one [ 187.380388][ T6592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.439626][ T6585] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 187.572107][ T6577] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 187.764077][ T6577] macvlan2: entered promiscuous mode [ 187.772595][ T6577] macvlan2: entered allmulticast mode [ 187.779037][ T6577] bond1: entered promiscuous mode [ 187.785372][ T6577] bridge1: entered promiscuous mode [ 187.793000][ T6577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.801603][ T6577] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 187.820624][ T6577] bond1: left promiscuous mode [ 187.826273][ T6577] bridge1: left promiscuous mode [ 188.033730][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.066072][ T6613] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 190.135503][ T6635] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 190.144126][ T6635] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 190.152994][ T6635] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 190.548764][ T6636] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 190.557085][ T6636] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 190.668558][ T6636] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 191.652842][ T6641] comedi comedi0: Minor 2 could not be opened [ 193.438158][ T6661] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 193.491542][ T6661] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 193.529647][ T6661] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 193.727989][ T6673] loop2: detected capacity change from 0 to 512 [ 193.736295][ T6673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.770925][ T6673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 193.779091][ T6673] System zones: 1-12 [ 193.790830][ T6673] EXT4-fs (loop2): 1 truncate cleaned up [ 193.797926][ T6673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.517178][ T6687] autofs4:pid:6687:autofs_fill_super: called with bogus options [ 195.006554][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.878472][ T6705] PKCS7: Unknown OID: [4] 0.0 [ 195.883658][ T6705] PKCS7: Only support pkcs7_signedData type [ 195.953663][ T6705] netlink: 452 bytes leftover after parsing attributes in process `syz.4.133'. [ 197.546518][ T6713] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 197.554859][ T6713] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 197.564427][ T6713] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 197.864335][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.878415][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.831674][ T6740] loop1: detected capacity change from 0 to 512 [ 202.389236][ T6740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.452743][ T6740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 202.464063][ T6740] System zones: 1-12 [ 202.470784][ T6740] EXT4-fs (loop1): 1 truncate cleaned up [ 202.478115][ T6740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.830250][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.072431][ T6766] loop0: detected capacity change from 0 to 32768 [ 204.381608][ T6778] PKCS7: Unknown OID: [4] 0.0 [ 204.386636][ T6778] PKCS7: Only support pkcs7_signedData type [ 204.446794][ T6778] netlink: 452 bytes leftover after parsing attributes in process `syz.1.143'. [ 204.986334][ T6766] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.524845][ T6766] XFS (loop0): Ending clean mount [ 205.563791][ T6766] XFS (loop0): Quotacheck needed: Please wait. [ 205.642383][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 205.642401][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 205.648548][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 205.733904][ T6766] XFS (loop0): Quotacheck: Done. [ 206.209311][ T28] audit: type=1800 audit(1777942206.078:6): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.145" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 206.655914][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.366123][ T6811] loop0: detected capacity change from 0 to 512 [ 208.379996][ T6811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.236963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 209.921168][ T6811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 209.929260][ T6811] System zones: 1-12 [ 209.982260][ T6811] EXT4-fs (loop0): 1 truncate cleaned up [ 209.989661][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.085388][ T6819] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 210.093920][ T6819] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 210.102957][ T6819] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 211.127936][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.704240][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 212.713520][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 213.648523][ T6904] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.666859][ T6904] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.675884][ T6904] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.684838][ T6904] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.740791][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 213.751285][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 214.425565][ T6925] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 214.519620][ T6925] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 214.585748][ T6931] dns_resolver: Unsupported server list version (6) [ 214.592736][ T6925] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 216.281638][ T6954] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 217.356003][ T6965] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 217.364549][ T6965] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 217.373338][ T6965] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 218.740718][ T6973] netlink: 220 bytes leftover after parsing attributes in process `syz.0.168'. [ 218.750639][ T6973] tc_dump_action: action bad kind [ 220.020053][ T6979] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 220.028308][ T6979] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 220.036929][ T6979] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 220.737307][ T6986] dns_resolver: Unsupported server list version (6) [ 221.065785][ T6988] PKCS7: Unknown OID: [4] 0.0 [ 221.070789][ T6988] PKCS7: Only support pkcs7_signedData type [ 221.136300][ T6988] netlink: 452 bytes leftover after parsing attributes in process `syz.0.170'. [ 222.108121][ T6995] loop4: detected capacity change from 0 to 2048 [ 222.312912][ T6995] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 222.695087][ T6995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.925725][ T28] audit: type=1800 audit(1777942221.818:7): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 223.611076][ T7008] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 225.624815][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.216601][ T7036] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 228.267149][ T7036] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 228.352196][ T7036] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 228.645754][ T7042] loop2: detected capacity change from 0 to 512 [ 228.748305][ T7042] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.799903][ T7042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 228.808803][ T7042] System zones: 1-12 [ 228.944645][ T7042] EXT4-fs (loop2): 1 truncate cleaned up [ 228.957388][ T7042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.500202][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.557465][ T7047] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 229.672682][ T28] audit: type=1326 audit(1777942228.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 229.756122][ T28] audit: type=1326 audit(1777942228.172:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 229.885042][ T7054] loop2: detected capacity change from 0 to 512 [ 229.893975][ T7054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.946566][ T28] audit: type=1326 audit(1777942228.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.009913][ T7054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 230.018160][ T7054] System zones: 1-12 [ 230.023386][ T7054] EXT4-fs (loop2): 1 truncate cleaned up [ 230.031277][ T7054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.181502][ T28] audit: type=1326 audit(1777942228.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.286374][ T28] audit: type=1326 audit(1777942228.172:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.310457][ T28] audit: type=1326 audit(1777942228.172:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.334498][ T28] audit: type=1326 audit(1777942228.182:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.364233][ T28] audit: type=1326 audit(1777942228.182:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.395639][ T28] audit: type=1326 audit(1777942228.182:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.448708][ T28] audit: type=1326 audit(1777942228.182:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.0.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f4499b9cdd9 code=0x7ffc0000 [ 230.817758][ T7060] loop0: detected capacity change from 0 to 512 [ 230.935094][ T7060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.041335][ T7060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 231.049993][ T7060] System zones: 1-12 [ 231.056179][ T7060] EXT4-fs (loop0): 1 truncate cleaned up [ 231.067476][ T7060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.554891][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.568621][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.947027][ T7068] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 235.164185][ T7088] loop0: detected capacity change from 0 to 512 [ 235.331256][ T7088] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 235.440825][ T7088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 235.448934][ T7088] System zones: 1-12 [ 235.512379][ T7088] EXT4-fs (loop0): 1 truncate cleaned up [ 235.519739][ T7088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.932317][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.984644][ T5773] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 237.159314][ T5773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.168928][ T5773] usb 3-1: not running at top speed; connect to a high speed hub [ 237.213779][ T5773] usb 3-1: config 12 has an invalid interface number: 231 but max is 0 [ 237.222121][ T5773] usb 3-1: config 12 has no interface number 0 [ 237.261483][ T5773] usb 3-1: config 12 interface 231 has no altsetting 0 [ 237.309931][ T5773] usb 3-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 237.334469][ T7106] syz.0.199 uses obsolete (PF_INET,SOCK_PACKET) [ 237.340873][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.362567][ T5773] usb 3-1: Product: syz [ 237.366973][ T5773] usb 3-1: Manufacturer: syz [ 237.371623][ T5773] usb 3-1: SerialNumber: syz [ 237.667089][ T7096] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 237.788637][ T7110] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 238.003509][ T7096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.196'. [ 238.377905][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 238.485674][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.523351][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.663528][ T7118] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 238.672798][ T7118] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 238.681484][ T7118] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 238.858530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 238.890886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 239.130609][ T5773] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 239.167457][ T7121] loop0: detected capacity change from 0 to 1024 [ 239.183384][ T5773] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 239.201028][ T7121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.226278][ T5773] dib0700: firmware download failed at 7 with -71 [ 239.230714][ T7121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.294271][ T5773] usb 3-1: USB disconnect, device number 2 [ 239.362580][ T7121] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 239.436448][ T7121] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 239.609785][ T5772] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 239.641646][ T7129] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 239.659198][ T7129] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 239.684829][ T5772] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 239.692167][ T7129] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 240.893036][ T6855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.870589][ T6855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.112280][ T6855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.252056][ T6855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.783374][ T7152] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 245.760532][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.770679][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.872134][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.890656][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.903788][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.918061][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.565212][ T7183] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 247.155296][ T7183] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 247.292892][ T6855] bond1: (slave gretap1): Releasing active interface [ 247.333110][ T7183] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 248.167068][ T5082] Bluetooth: hci0: command tx timeout [ 248.872483][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 250.018200][ T7208] tipc: Started in network mode [ 250.023392][ T7208] tipc: Node identity ac14140f, cluster identity 4711 [ 250.031183][ T7208] tipc: New replicast peer: 255.255.255.255 [ 250.039333][ T7208] tipc: Enabled bearer , priority 10 [ 250.046489][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 250.156820][ T6855] hsr_slave_0: left promiscuous mode [ 250.239292][ T6855] hsr_slave_1: left promiscuous mode [ 250.265867][ T6855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.275616][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.299205][ T6855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.324862][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.346119][ T5082] Bluetooth: hci0: command tx timeout [ 250.352607][ T6855] bridge_slave_1: left allmulticast mode [ 250.369401][ T6855] bridge_slave_1: left promiscuous mode [ 250.375299][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.427610][ T6855] bridge_slave_0: left allmulticast mode [ 250.442287][ T6855] bridge_slave_0: left promiscuous mode [ 250.448156][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.783564][ T6855] veth1_macvtap: left promiscuous mode [ 250.869659][ T6855] veth0_macvtap: left promiscuous mode [ 250.933437][ T7226] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 250.970852][ T6855] veth1_vlan: left promiscuous mode [ 251.062663][ T6855] veth0_vlan: left promiscuous mode [ 252.013354][ T6855] bond1 (unregistering): (slave bridge1): Releasing active interface [ 252.146998][ T7235] netlink: 56 bytes leftover after parsing attributes in process `syz.2.221'. [ 252.168776][ T7235] netlink: 92 bytes leftover after parsing attributes in process `syz.2.221'. [ 252.178541][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 252.280630][ T6855] bond1 (unregistering): Released all slaves [ 252.580439][ T5082] Bluetooth: hci0: command tx timeout [ 254.791544][ T5082] Bluetooth: hci0: command tx timeout [ 255.235865][ T6855] team0 (unregistering): Port device team_slave_1 removed [ 255.299135][ T6855] team0 (unregistering): Port device team_slave_0 removed [ 255.360506][ T6855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.452511][ T6855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.538482][ T6855] bond0 (unregistering): Released all slaves [ 256.696025][ T2127] tipc: Node number set to 2886997007 [ 256.796521][ T7233] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 256.805383][ T7233] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 256.814071][ T7233] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 258.023163][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.058400][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.075728][ T7172] bridge_slave_0: entered allmulticast mode [ 258.115524][ T7172] bridge_slave_0: entered promiscuous mode [ 258.155647][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.166838][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.200549][ T7172] bridge_slave_1: entered allmulticast mode [ 258.241003][ T7172] bridge_slave_1: entered promiscuous mode [ 258.276317][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 258.437775][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 258.662349][ T7267] nbd: socks must be embedded in a SOCK_ITEM attr [ 259.255869][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.314506][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.443348][ T6403] udevd[6403]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 259.458725][ T7275] loop1: detected capacity change from 0 to 2048 [ 259.462656][ T7172] team0: Port device team_slave_0 added [ 259.479997][ T6403] udevd[6403]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 259.490701][ T7172] team0: Port device team_slave_1 added [ 259.533643][ T7275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.808454][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.825766][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.885254][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.913031][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.925116][ T6855] IPVS: stop unused estimator thread 0... [ 259.925694][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.020829][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.056595][ T7285] loop2: detected capacity change from 0 to 2048 [ 260.163463][ T7285] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 261.092789][ T7285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.544602][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 261.544618][ T28] audit: type=1800 audit(1777942257.949:20): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 261.595602][ T7172] hsr_slave_0: entered promiscuous mode [ 261.775573][ T7172] hsr_slave_1: entered promiscuous mode [ 261.892768][ T7172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.900930][ T7172] Cannot create hsr debugfs directory [ 262.456124][ T7275] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.596615][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.068966][ T7310] dns_resolver: Unsupported server list version (6) [ 263.157130][ T7315] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 263.165764][ T7315] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 263.177230][ T7315] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 263.331834][ T7172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.348174][ T7172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.369274][ T7172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.391091][ T7172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.518318][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.525281][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.635701][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.667988][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.713686][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.721111][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.834869][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.842203][ T6855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.360000][ T7328] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 264.554438][ T7325] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 264.562901][ T7325] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 264.571709][ T7325] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 266.552038][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.534917][ T7356] loop2: detected capacity change from 0 to 256 [ 267.542533][ T7356] exfat: Deprecated parameter 'utf8' [ 267.768864][ T7356] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 269.035072][ T7374] loop1: detected capacity change from 0 to 2048 [ 269.486986][ T7368] loop2: detected capacity change from 0 to 512 [ 269.992462][ T7374] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 270.124766][ T7368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 270.154845][ T7368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 270.164729][ T7368] System zones: 1-12 [ 270.169763][ T7374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.182743][ T7368] EXT4-fs (loop2): 1 truncate cleaned up [ 270.201368][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.233093][ T7172] veth0_vlan: entered promiscuous mode [ 270.293799][ T7172] veth1_vlan: entered promiscuous mode [ 270.342335][ T28] audit: type=1800 audit(1777942266.203:21): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.240" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 271.115887][ T7172] veth0_macvtap: entered promiscuous mode [ 271.167823][ T7172] veth1_macvtap: entered promiscuous mode [ 271.243145][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.287124][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.319660][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.338647][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.365498][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.394834][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.425936][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.437020][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.444021][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.493807][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.534808][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.556435][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.578534][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.600659][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.658602][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.747566][ T7399] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 271.756564][ T7399] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 271.765257][ T7399] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 271.828712][ T7172] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.893963][ T7172] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.940092][ T7172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.981133][ T7172] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.207949][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.243'. [ 273.068888][ T7405] loop4: detected capacity change from 0 to 40427 [ 273.163097][ T7405] F2FS-fs (loop4): invalid crc value [ 273.172671][ T7405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 273.222177][ T7405] F2FS-fs (loop4): Start checkpoint disabled! [ 273.235587][ T7405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 273.287645][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.359797][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.368513][ T6884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.396301][ T6884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.442918][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.860667][ T7417] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 275.174105][ T6884] kworker/u4:22: attempt to access beyond end of device [ 275.174105][ T6884] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 275.264312][ T6884] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 275.352838][ T6884] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 275.369105][ T6884] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 275.465657][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.208'. [ 276.377521][ T7431] syz.5.208 (7431) used greatest stack depth: 16752 bytes left [ 276.958798][ T7435] loop1: detected capacity change from 0 to 512 [ 277.120723][ T7435] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.303808][ T7435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 277.328403][ T7435] System zones: 1-12 [ 277.353289][ T7435] EXT4-fs (loop1): 1 truncate cleaned up [ 277.393724][ T7435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.564471][ T7440] comedi comedi0: Minor 2 could not be opened [ 277.774392][ T7450] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 277.798587][ T7450] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 278.112404][ T7450] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 278.859432][ T7460] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 278.868210][ T7460] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 278.876768][ T7460] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 280.157510][ T7465] can: request_module (can-proto-4) failed. [ 280.831596][ T7481] loop4: detected capacity change from 0 to 512 [ 281.004792][ T7481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 281.057889][ T7481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 281.066043][ T7481] System zones: 1-12 [ 281.118742][ T7481] EXT4-fs (loop4): 1 truncate cleaned up [ 281.140164][ T7481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.441612][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.757814][ T7494] loop2: detected capacity change from 0 to 128 [ 286.530958][ T7530] loop2: detected capacity change from 0 to 2048 [ 286.554844][ T7530] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 286.612888][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.625023][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.870758][ T28] audit: type=1800 audit(1777942281.597:22): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.261" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 287.113846][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.212237][ T7553] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 289.220630][ T7553] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 289.230398][ T7553] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 289.308559][ T7555] dns_resolver: Unsupported server list version (6) [ 289.842764][ T7569] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 292.271262][ T7590] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 292.325657][ T7590] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 292.378983][ T7590] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 294.143673][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 295.083862][ T7609] nbd: socks must be embedded in a SOCK_ITEM attr [ 295.775949][ T6479] udevd[6479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.820515][ T7622] dns_resolver: Unsupported server list version (6) [ 295.851233][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.278'. [ 295.861094][ T7618] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 295.883581][ T6403] udevd[6403]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 298.869180][ T7656] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 298.877625][ T7656] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 298.886305][ T7656] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 298.980209][ T7655] netlink: 'syz.5.284': attribute type 4 has an invalid length. [ 298.988019][ T7655] netlink: 17 bytes leftover after parsing attributes in process `syz.5.284'. [ 299.225980][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.284'. [ 299.836684][ T7662] loop4: detected capacity change from 0 to 128 [ 301.206081][ T7671] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 301.482460][ T7680] loop4: detected capacity change from 0 to 2048 [ 301.551081][ T7680] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 301.773699][ T7680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.852600][ T28] audit: type=1800 audit(1777942295.681:23): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.289" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 301.873693][ T7691] dns_resolver: Unsupported server list version (6) [ 302.770123][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.832257][ T7698] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 302.997174][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 303.086030][ T7704] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 303.128028][ T7704] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 303.238573][ T7704] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 304.100906][ T7715] loop5: detected capacity change from 0 to 128 [ 304.270767][ T7718] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 305.366003][ T7736] dns_resolver: Unsupported server list version (6) [ 305.383077][ T7735] loop2: detected capacity change from 0 to 512 [ 305.394728][ T7735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.515400][ T7735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 305.524198][ T7735] System zones: 1-12 [ 305.541618][ T7735] EXT4-fs (loop2): 1 truncate cleaned up [ 305.553112][ T7735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.253855][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.708002][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 309.829648][ T7759] loop5: detected capacity change from 0 to 512 [ 309.905670][ T7759] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 310.028893][ T7759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 310.060440][ T7759] System zones: 1-12 [ 310.077872][ T7764] loop4: detected capacity change from 0 to 2048 [ 310.096330][ T7759] EXT4-fs (loop5): 1 truncate cleaned up [ 310.103864][ T7759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.224982][ T7764] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 310.263640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 310.291778][ T7769] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 310.348451][ T7764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.432946][ T28] audit: type=1800 audit(1777942303.710:24): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.306" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 310.622214][ T7776] loop1: detected capacity change from 0 to 2048 [ 311.162150][ T7776] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 311.240712][ T7776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.284565][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.326996][ T28] audit: type=1800 audit(1777942304.552:25): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 311.585910][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.685393][ T7792] dns_resolver: Unsupported server list version (6) [ 311.719642][ T7791] loop4: detected capacity change from 0 to 2048 [ 311.789724][ T7791] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 311.836487][ T7791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.084627][ T28] audit: type=1800 audit(1777942305.132:26): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.311" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 312.197559][ T7801] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 315.246446][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.647586][ T7818] bridge_slave_0: left allmulticast mode [ 315.653563][ T7818] bridge_slave_0: left promiscuous mode [ 315.660436][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.993281][ T7818] bridge_slave_1: left allmulticast mode [ 315.999068][ T7818] bridge_slave_1: left promiscuous mode [ 316.005550][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.046305][ T7818] bond0: (slave bond_slave_0): Releasing backup interface [ 316.245366][ T7818] bond0: (slave bond_slave_1): Releasing backup interface [ 316.631036][ T7818] team0: Port device team_slave_0 removed [ 316.681987][ T7818] team0: Port device team_slave_1 removed [ 316.689040][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.697721][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.750842][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.758337][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.908285][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.023716][ T7827] loop4: detected capacity change from 0 to 2048 [ 317.075402][ T7827] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 317.237127][ T7827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.385742][ T28] audit: type=1800 audit(1777942310.223:27): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.318" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 318.088917][ T7845] loop2: detected capacity change from 0 to 2048 [ 318.133436][ T7845] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 318.216209][ T7845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.227910][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.256845][ T28] audit: type=1800 audit(1777942311.028:28): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.319" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 319.096666][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.187288][ T7858] Bluetooth: MGMT ver 1.22 [ 319.192336][ T7858] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 319.243367][ T7860] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 319.280853][ T7860] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 319.316068][ T7860] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 319.494956][ T7863] loop2: detected capacity change from 0 to 2048 [ 319.583402][ T7863] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 319.706071][ T7872] dns_resolver: Unsupported server list version (6) [ 319.914529][ T7863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.167307][ T28] audit: type=1800 audit(1777942312.656:29): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.321" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 320.989558][ T7886] loop1: detected capacity change from 0 to 2048 [ 321.086605][ T7886] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 322.276750][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.360756][ T28] audit: type=1800 audit(1777942314.874:30): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 323.174088][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.219861][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.575524][ T7916] loop5: detected capacity change from 0 to 2048 [ 323.588927][ T7919] loop1: detected capacity change from 0 to 2048 [ 323.622413][ T7916] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 323.633297][ T7919] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 323.653266][ T7907] loop4: detected capacity change from 0 to 512 [ 323.678565][ T7916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.727733][ T7919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.774513][ T7907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 323.832826][ T28] audit: type=1800 audit(1777942316.240:31): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.329" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 323.884484][ T28] audit: type=1800 audit(1777942316.278:32): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 324.482114][ T7907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 324.495847][ T7907] System zones: 1-12 [ 324.569432][ T7907] EXT4-fs (loop4): 1 truncate cleaned up [ 324.678948][ T7907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.184743][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.185852][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.007806][ T7946] dns_resolver: Unsupported server list version (6) [ 327.234328][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.503045][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 327.702984][ T7964] loop1: detected capacity change from 0 to 2048 [ 327.738299][ T7964] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 327.743053][ T7968] loop4: detected capacity change from 0 to 2048 [ 329.466578][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.473015][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.044620][ T7968] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 330.056279][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.131546][ T28] audit: type=1800 audit(1777942322.136:33): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.336" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 330.157805][ T7968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.908636][ T28] audit: type=1800 audit(1777942322.417:34): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.335" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 330.958468][ T7979] loop5: detected capacity change from 0 to 2048 [ 331.047762][ T7979] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 331.100516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 331.106100][ T7979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.143055][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.258011][ T28] audit: type=1800 audit(1777942323.203:35): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.338" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 331.970050][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.996410][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.132052][ T7993] loop1: detected capacity change from 0 to 2048 [ 332.187907][ T7993] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 332.285520][ T7993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.485390][ T28] audit: type=1800 audit(1777942324.335:36): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.339" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 333.325084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 334.202137][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.405672][ T8012] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 334.414082][ T8012] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 334.422852][ T8012] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 334.889031][ T8020] dns_resolver: Unsupported server list version (6) [ 335.261526][ T8030] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 335.372038][ T8034] loop5: detected capacity change from 0 to 2048 [ 335.393877][ T8034] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 335.549220][ T8034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.624922][ T8040] loop4: detected capacity change from 0 to 2048 [ 335.659847][ T28] audit: type=1800 audit(1777942327.320:37): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.347" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 335.762705][ T8040] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 336.299161][ T8040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.896975][ T28] audit: type=1800 audit(1777942328.481:38): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 338.703873][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.720316][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.681406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 340.858741][ T8083] loop5: detected capacity change from 0 to 2048 [ 340.948869][ T8083] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 341.089490][ T8083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.316438][ T28] audit: type=1800 audit(1777942332.551:39): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.353" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 341.417339][ T8099] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 341.752441][ T8101] dns_resolver: Unsupported server list version (6) [ 342.219780][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.797403][ T8109] loop5: detected capacity change from 0 to 512 [ 343.654203][ T8110] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 343.927456][ T8109] EXT4-fs (loop5): 1 truncate cleaned up [ 343.942685][ T8109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.146485][ T8108] loop1: detected capacity change from 0 to 2048 [ 344.271050][ T8108] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 344.397913][ T8116] loop4: detected capacity change from 0 to 2048 [ 344.423376][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.469539][ T8116] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 344.493849][ T8112] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.503871][ T8112] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.513967][ T8112] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.524841][ T8108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.563244][ T28] audit: type=1800 audit(1777942335.649:40): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 344.756688][ T8112] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.790969][ T8112] bond1: (slave geneve2): making interface the new active one [ 344.809018][ T8116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.826885][ T8112] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 345.411241][ T28] audit: type=1800 audit(1777942336.304:41): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.362" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 345.966215][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.995018][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.011194][ T8129] loop2: detected capacity change from 0 to 512 [ 346.157419][ T6403] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.510314][ T8131] loop5: detected capacity change from 0 to 512 [ 347.517938][ T8131] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 347.539390][ T8131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 347.549504][ T8131] System zones: 1-12 [ 347.561015][ T8131] EXT4-fs (loop5): 1 truncate cleaned up [ 347.568292][ T8131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.935379][ T8147] dns_resolver: Unsupported server list version (6) [ 347.942444][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.302820][ T8163] loop5: detected capacity change from 0 to 512 [ 350.617758][ T8163] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 350.684354][ T8173] loop4: detected capacity change from 0 to 2048 [ 350.933955][ T8173] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 350.979626][ T8163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 351.029786][ T8163] System zones: 1-12 [ 351.127848][ T8163] EXT4-fs (loop5): 1 truncate cleaned up [ 351.138597][ T8173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.234797][ T8163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.336825][ T28] audit: type=1800 audit(1777942341.984:42): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 352.071706][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.904790][ T8197] dns_resolver: Unsupported server list version (6) [ 355.128078][ T8202] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 355.891685][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.187752][ T8209] bridge_slave_0: left allmulticast mode [ 356.193681][ T8209] bridge_slave_0: left promiscuous mode [ 356.201068][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.117122][ T8209] bridge_slave_1: left allmulticast mode [ 357.125762][ T8209] bridge_slave_1: left promiscuous mode [ 357.131768][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.199621][ T8209] bond0: (slave bond_slave_0): Releasing backup interface [ 357.245294][ T8209] bond0: (slave bond_slave_1): Releasing backup interface [ 357.344036][ T8216] loop5: detected capacity change from 0 to 512 [ 357.401111][ T8216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 357.443902][ T8216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 357.452027][ T8216] System zones: 1-12 [ 357.464579][ T8216] EXT4-fs (loop5): 1 truncate cleaned up [ 357.471782][ T8216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.682750][ T8220] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 357.875875][ T8209] team0: Port device team_slave_0 removed [ 357.925321][ T8209] team0: Port device team_slave_1 removed [ 357.931779][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.939442][ T8209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.004954][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.012716][ T8209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.058118][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.084257][ T8209] bond1: (slave geneve2): Releasing active interface [ 358.122869][ T8209] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.132638][ T8209] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.141840][ T8209] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.151318][ T8209] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.310234][ T8228] loop5: detected capacity change from 0 to 2048 [ 358.361604][ T8228] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 359.588303][ T8228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.695044][ T28] audit: type=1800 audit(1777942349.798:43): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.385" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 361.369917][ T8251] dns_resolver: Unsupported server list version (6) [ 361.391634][ T7172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.403815][ T8244] loop4: detected capacity change from 0 to 512 [ 361.452940][ T8244] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 361.623857][ T8244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 361.983199][ T8255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 362.635628][ T8244] System zones: 1-12 [ 362.645959][ T8244] EXT4-fs (loop4): 1 truncate cleaned up [ 362.654285][ T8244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.914422][ T8260] loop1: detected capacity change from 0 to 512 [ 362.945793][ T8260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.087298][ T8260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 363.096575][ T8260] System zones: 1-12 [ 363.101145][ T8260] EXT4-fs (loop1): 1 truncate cleaned up [ 363.108410][ T8260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.550567][ T8266] loop5: detected capacity change from 0 to 8 [ 364.311407][ T8266] SQUASHFS error: xz decompression failed, data probably corrupt [ 364.320211][ T8266] SQUASHFS error: Failed to read block 0x108: -5 [ 364.326806][ T8266] SQUASHFS error: Unable to read metadata cache entry [106] [ 364.334349][ T8266] SQUASHFS error: Unable to read inode 0x11f [ 364.960445][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.257707][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.178285][ T8276] loop1: detected capacity change from 0 to 256 [ 366.201673][ T8276] exFAT-fs (loop1): error, The cluster chain has a loop [ 366.263573][ T8276] exFAT-fs (loop1): Filesystem has been set read-only [ 366.301079][ T8276] exFAT-fs (loop1): failed to count the number of clusters in root [ 366.321843][ T8276] exFAT-fs (loop1): failed to recognize exfat type [ 368.414163][ T8291] dns_resolver: Unsupported server list version (6) [ 368.556058][ T8294] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 372.542887][ T8323] loop5: detected capacity change from 0 to 512 [ 374.691068][ T8340] dns_resolver: Unsupported server list version (6) [ 375.019631][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 375.029044][ T8349] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 375.544885][ T5773] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 376.100278][ T8356] loop1: detected capacity change from 0 to 2048 [ 376.133699][ T5773] usb 5-1: config 0 has no interfaces? [ 376.139274][ T5773] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 376.164292][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.194379][ T8356] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 376.221616][ T5773] usb 5-1: config 0 descriptor?? [ 376.292533][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.351545][ T28] audit: type=1800 audit(1777942365.398:44): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.417" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 376.691868][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.827206][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.024514][ T5808] usb 5-1: USB disconnect, device number 2 [ 377.102718][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.606578][ T8387] loop4: detected capacity change from 0 to 512 [ 379.646209][ T8393] dns_resolver: Unsupported server list version (6) [ 379.650572][ T8387] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.675629][ T8387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 379.707077][ T8387] System zones: 1-12 [ 379.740943][ T8387] EXT4-fs (loop4): 1 truncate cleaned up [ 379.759744][ T8387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.254264][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 381.545485][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.655498][ T8407] loop1: detected capacity change from 0 to 512 [ 381.870621][ T8407] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 381.892674][ T8407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 381.900802][ T8407] System zones: 1-12 [ 381.914125][ T8407] EXT4-fs (loop1): 1 truncate cleaned up [ 381.921568][ T8407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.257203][ T8416] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 382.266835][ T8416] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 382.275333][ T8416] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 382.497941][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.048502][ T8428] dns_resolver: Unsupported server list version (6) [ 383.138648][ T8424] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 385.207120][ T8447] overlayfs: failed to clone upperpath [ 385.856842][ T8451] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 386.934201][ T8463] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 386.943493][ T8463] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 386.952053][ T8463] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 387.019152][ T8454] loop4: detected capacity change from 0 to 512 [ 387.078937][ T8454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.205894][ T8454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 387.232047][ T8454] System zones: 1-12 [ 387.264600][ T8454] EXT4-fs (loop4): 1 truncate cleaned up [ 387.315105][ T8454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.373225][ T8472] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 388.835621][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.668746][ T8507] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 393.011028][ T8508] loop4: detected capacity change from 0 to 512 [ 393.034498][ T8508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 393.178046][ T8508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 393.232674][ T8508] System zones: 1-12 [ 393.273167][ T8508] EXT4-fs (loop4): 1 truncate cleaned up [ 393.295172][ T8508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.296072][ T8529] loop1: detected capacity change from 0 to 512 [ 394.359303][ T8529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.404946][ T8529] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.437719][ T8530] Set syz0 is full, maxelem 0 reached [ 396.526732][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.554804][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.737940][ T5771] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 396.788541][ T5771] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 397.184225][ T6911] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.300015][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.056452][ T8548] loop4: detected capacity change from 0 to 128 [ 398.069590][ T8548] FAT-fs (loop4): Unrecognized mount option "184467440737095516150x0000000000000000" or missing value [ 398.759942][ T8558] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 401.406759][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.418693][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.426822][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.435401][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.443284][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 401.464465][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.956593][ T8578] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 402.932555][ T8568] chnl_net:caif_netlink_parms(): no params data found [ 403.097659][ T8587] netlink: 'syz.5.479': attribute type 1 has an invalid length. [ 403.206122][ T8587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.308518][ T8589] bond1: (slave geneve2): making interface the new active one [ 403.348658][ T8589] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 403.458395][ T8588] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 403.577679][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.585206][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.592527][ T8568] bridge_slave_0: entered allmulticast mode [ 403.600175][ T8568] bridge_slave_0: entered promiscuous mode [ 403.609757][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.617057][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.624570][ T8568] bridge_slave_1: entered allmulticast mode [ 403.632297][ T8568] bridge_slave_1: entered promiscuous mode [ 403.670473][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.683400][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.734218][ T5780] Bluetooth: hci1: command tx timeout [ 403.782965][ T8568] team0: Port device team_slave_0 added [ 403.803121][ T8568] team0: Port device team_slave_1 added [ 403.856299][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.494936][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.733365][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.754443][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.762244][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.789922][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.102706][ T8568] hsr_slave_0: entered promiscuous mode [ 405.260173][ T8568] hsr_slave_1: entered promiscuous mode [ 405.363876][ T8568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.463870][ T8568] Cannot create hsr debugfs directory [ 405.555485][ T8609] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 405.564144][ T8609] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 405.572903][ T8609] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 405.936989][ T5082] Bluetooth: hci1: command tx timeout [ 406.408590][ T8568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 406.445373][ T8568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 406.492056][ T8568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 406.523212][ T8568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 406.741251][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.781121][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.833168][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.840420][ T6870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.903759][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.912047][ T6870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.250584][ T5082] Bluetooth: hci1: command tx timeout [ 409.206885][ T8648] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 409.215568][ T8648] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 409.224242][ T8648] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 409.932524][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.551450][ T5082] Bluetooth: hci1: command tx timeout [ 412.937969][ T8568] veth0_vlan: entered promiscuous mode [ 413.011185][ T8568] veth1_vlan: entered promiscuous mode [ 413.102839][ T8568] veth0_macvtap: entered promiscuous mode [ 413.200065][ T8568] veth1_macvtap: entered promiscuous mode [ 413.326563][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.337193][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.347115][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.357607][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.370291][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.381785][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.392744][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.405080][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.419411][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.808445][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.212453][ T8568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.228048][ T8568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.236811][ T8568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.255793][ T8568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.689746][ T6877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.709093][ T8694] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 414.717483][ T8694] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 414.726045][ T8694] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 414.907588][ T6877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.582879][ T6859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.637892][ T6859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.490113][ T8711] loop6: detected capacity change from 0 to 128 [ 417.370690][ T8711] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 417.438140][ T8715] loop4: detected capacity change from 0 to 512 [ 417.475303][ T8706] ipip0: entered promiscuous mode [ 417.480579][ T8706] ipip0: entered allmulticast mode [ 417.486168][ T8715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 417.542453][ T8715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 417.550663][ T8715] System zones: 1-12 [ 417.563080][ T8715] EXT4-fs (loop4): 1 truncate cleaned up [ 417.570496][ T8715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.255212][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.348090][ T8724] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 418.356810][ T8724] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 418.365483][ T8724] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 418.926365][ T8723] loop6: detected capacity change from 0 to 2048 [ 418.973090][ T8723] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 419.084596][ T8723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.192532][ T28] audit: type=1800 audit(1777942405.488:45): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.510" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 419.529791][ T8732] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 419.538132][ T8732] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 419.546584][ T8732] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 420.374948][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.184991][ T8737] loop4: detected capacity change from 0 to 2048 [ 421.224682][ T8737] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 421.319517][ T8737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.438270][ T28] audit: type=1800 audit(1777942407.565:46): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.514" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 422.563675][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.117766][ T8759] loop6: detected capacity change from 0 to 32768 [ 423.728449][ T8759] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.897514][ T8759] XFS (loop6): Ending clean mount [ 423.909626][ T8759] XFS (loop6): Quotacheck needed: Please wait. [ 424.379541][ T8777] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 424.387831][ T8777] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 424.396382][ T8777] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 424.654912][ T8781] atomic_op ffff88805df6f198 conn xmit_atomic 0000000000000000 [ 425.093665][ T8782] 9pnet_virtio: no channels available for device syz [ 425.760752][ T8782] orangefs_mount: mount request failed with -4 [ 425.957716][ T8759] XFS (loop6): Quotacheck: Done. [ 426.924034][ T8568] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 429.375260][ T8793] loop4: detected capacity change from 0 to 512 [ 429.385751][ T8793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 429.412879][ T8793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 429.420980][ T8793] System zones: 1-12 [ 429.531328][ T8793] EXT4-fs (loop4): 1 truncate cleaned up [ 429.538507][ T8793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.740516][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.286012][ T8831] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 438.237994][ T8866] overlayfs: failed to clone upperpath [ 438.965591][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 439.179237][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 439.232553][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.243361][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x6F, skipping [ 439.256299][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 439.355299][ T23] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 439.365847][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 439.374806][ T23] usb 5-1: Product: syz [ 439.379114][ T23] usb 5-1: Manufacturer: syz [ 439.383897][ T23] usb 5-1: SerialNumber: syz [ 439.475340][ T23] usb 5-1: config 0 descriptor?? [ 439.561826][ T23] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 439.569866][ T23] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 439.580745][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 440.039516][ T8875] overlayfs: failed to clone upperpath [ 440.496103][ T8876] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 441.549312][ T5827] usb 5-1: USB disconnect, device number 3 [ 442.191049][ T8895] overlayfs: failed to clone upperpath [ 443.344566][ T8901] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 443.353100][ T8901] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 443.361651][ T8901] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 443.472197][ T8907] loop4: detected capacity change from 0 to 16 [ 443.498827][ T8907] erofs: Unknown parameter 'ãé' [ 443.578275][ T6403] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 443.996997][ T8909] atomic_op ffff888068d71198 conn xmit_atomic 0000000000000000 [ 445.801583][ T8917] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 446.426934][ T8929] netlink: 'syz.5.559': attribute type 10 has an invalid length. [ 446.754225][ T8929] team0: Port device dummy0 added [ 447.326246][ T8936] netlink: 'syz.5.559': attribute type 10 has an invalid length. [ 447.485204][ T8927] loop4: detected capacity change from 0 to 512 [ 447.547158][ T8927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 447.584913][ T8936] team0: Port device dummy0 removed [ 447.645090][ T8936] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 447.648555][ T8927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 447.966848][ T8927] System zones: 1-12 [ 448.053356][ T8927] EXT4-fs (loop4): 1 truncate cleaned up [ 448.152920][ T8951] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 448.161518][ T8951] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 448.170807][ T8951] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 449.052863][ T8927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.017520][ T8962] loop6: detected capacity change from 0 to 512 [ 450.084307][ T8962] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 450.208156][ T8962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 450.262070][ T8962] System zones: 1-12 [ 450.277908][ T8962] EXT4-fs (loop6): 1 truncate cleaned up [ 450.286716][ T8962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.691665][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.243302][ T8972] overlayfs: failed to clone upperpath [ 453.534304][ T8987] loop4: detected capacity change from 0 to 2048 [ 453.555449][ T8987] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 453.661384][ T8985] trusted_key: encrypted_key: insufficient parameters specified [ 453.672158][ T8985] trusted_key: encrypted_key: insufficient parameters specified [ 453.762909][ T8991] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 454.413936][ T8987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.451136][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.687095][ T28] audit: type=1800 audit(1777942438.671:47): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.574" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 455.724805][ T8995] ipip0: entered promiscuous mode [ 455.729919][ T8995] ipip0: entered allmulticast mode [ 456.413541][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.489243][ T9009] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 456.497759][ T9009] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 456.506429][ T9009] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 458.885312][ T9029] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 459.996324][ T9033] loop6: detected capacity change from 0 to 512 [ 460.141944][ T9033] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 460.211989][ T9033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 460.222794][ T9033] System zones: 1-12 [ 460.231685][ T9033] EXT4-fs (loop6): 1 truncate cleaned up [ 460.238890][ T9033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.484865][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.491918][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.535042][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 460.832561][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.955308][ T9040] loop4: detected capacity change from 0 to 8 [ 461.065392][ T9040] SQUASHFS error: lzo decompression failed, data probably corrupt [ 461.073493][ T9040] SQUASHFS error: Failed to read block 0x82: -5 [ 461.079893][ T9040] SQUASHFS error: Unable to read metadata cache entry [80] [ 461.087221][ T9040] SQUASHFS error: Unable to read inode 0x11f [ 461.310581][ T5808] IPVS: starting estimator thread 0... [ 461.812418][ T9041] IPVS: using max 18 ests per chain, 43200 per kthread [ 462.979167][ T9045] loop4: detected capacity change from 0 to 2048 [ 463.004535][ T9045] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 463.126543][ T9045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.167866][ T28] audit: type=1800 audit(1777942446.644:48): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.587" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 463.917832][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.237873][ T9065] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 464.246131][ T9065] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 464.254674][ T9065] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 468.604914][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 468.724230][ T9079] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 468.963785][ T9091] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 468.972043][ T9091] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 468.980464][ T9091] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 470.161089][ T9106] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 470.169439][ T9106] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 470.178070][ T9106] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 471.960760][ T9121] loop6: detected capacity change from 0 to 256 [ 472.038169][ T9123] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 474.276033][ T9132] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 474.284424][ T9132] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 474.292923][ T9132] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 474.531040][ T9137] loop6: detected capacity change from 0 to 2048 [ 474.546948][ T9137] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 474.902852][ T9137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.028715][ T28] audit: type=1800 audit(1777942457.743:49): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.613" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 477.022089][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.414931][ T9171] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 482.368891][ T9191] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 485.021973][ T9203] loop4: detected capacity change from 0 to 2048 [ 485.958937][ T9203] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 486.314574][ T9203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.438891][ T28] audit: type=1800 audit(1777942468.373:50): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.627" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 490.617912][ T9257] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 490.626398][ T9257] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 490.634994][ T9257] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 493.956376][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.865399][ T9286] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 494.874059][ T9286] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 494.882748][ T9286] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 496.082182][ T9288] loop6: detected capacity change from 0 to 2048 [ 496.098568][ T9288] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 496.453908][ T9288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.480479][ T28] audit: type=1800 audit(1777942477.816:51): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.645" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 498.238857][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.730389][ T9323] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 499.739445][ T9323] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 499.748707][ T9323] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 502.258099][ T9339] loop4: detected capacity change from 0 to 512 [ 502.468910][ T9197] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.714491][ T5082] Bluetooth: hci1: unknown advertising packet type: 0x70 [ 505.666503][ T9368] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 505.683228][ T9368] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 505.691753][ T9368] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 508.452356][ T9381] loop4: detected capacity change from 0 to 512 [ 508.464048][ T9381] EXT4-fs: Ignoring removed orlov option [ 508.469914][ T9381] EXT4-fs: Ignoring removed bh option [ 508.562641][ T9381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 508.599941][ T9381] EXT4-fs (loop4): orphan cleanup on readonly fs [ 508.663155][ T9381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.669: bg 0: block 248: padding at end of block bitmap is not set [ 508.693711][ T9381] Quota error (device loop4): write_blk: dquota write failed [ 508.702054][ T9381] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 508.712334][ T9381] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.669: Failed to acquire dquot type 1 [ 508.772733][ T9381] EXT4-fs (loop4): 1 truncate cleaned up [ 508.790224][ T9381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.843684][ T9381] EXT4-fs (loop4): shut down requested (2) [ 509.123853][ T9388] loop6: detected capacity change from 0 to 512 [ 509.154365][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.218829][ T9388] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 509.295045][ T9388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 509.303588][ T9388] System zones: 1-12 [ 509.313488][ T9388] EXT4-fs (loop6): 1 truncate cleaned up [ 509.320666][ T9388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.771382][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.380351][ T9413] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 511.389263][ T9413] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 511.397949][ T9413] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 513.022682][ T9428] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 513.031013][ T9428] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 513.039486][ T9428] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 514.520662][ T9441] loop4: detected capacity change from 0 to 4096 [ 514.705466][ T9441] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 514.717593][ T9441] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 514.738916][ T9441] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 514.750509][ T9441] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 514.764442][ T9441] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 514.798621][ T9441] ntfs: volume version 3.1. [ 514.838184][ T9441] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 514.850741][ T9441] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 514.875961][ T9441] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 514.887190][ T9441] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 514.898608][ T9441] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 516.359492][ T9461] loop6: detected capacity change from 0 to 512 [ 516.367753][ T9461] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 516.387556][ T9461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 516.396511][ T9461] System zones: 1-12 [ 516.401819][ T9461] EXT4-fs (loop6): 1 truncate cleaned up [ 516.408689][ T9461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.947706][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.098349][ T9477] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 518.106839][ T9477] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 518.115356][ T9477] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 520.552364][ T9502] loop6: detected capacity change from 0 to 2048 [ 520.650218][ T9504] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 (while UP) [ 521.443673][ T9502] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 521.507365][ T9502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.840854][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 521.840872][ T28] audit: type=1800 audit(1777942501.547:52): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.697" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 524.260772][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.083696][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.090073][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.009512][ T9590] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 530.017943][ T9590] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 530.026524][ T9590] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 532.108621][ T9602] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 533.855200][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 536.015669][ T9640] GUP no longer grows the stack in syz.4.732 (9640): 200000006000-200000009000 (200000004000) [ 536.026922][ T9640] CPU: 1 PID: 9640 Comm: syz.4.732 Not tainted syzkaller #0 [ 536.034246][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.044340][ T9640] Call Trace: [ 536.047653][ T9640] [ 536.050616][ T9640] dump_stack_lvl+0x18c/0x250 [ 536.055358][ T9640] ? show_regs_print_info+0x20/0x20 [ 536.060607][ T9640] ? load_image+0x420/0x420 [ 536.065176][ T9640] ? find_vma+0x134/0x1b0 [ 536.069587][ T9640] fixup_user_fault+0x642/0x700 [ 536.074521][ T9640] fault_in_user_writeable+0x71/0xd0 [ 536.079848][ T9640] futex_lock_pi+0x274/0x9b0 [ 536.084489][ T9640] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 536.089947][ T9640] ? lockdep_hardirqs_on+0x98/0x150 [ 536.095207][ T9640] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 536.101236][ T9640] do_futex+0x23d/0x3e0 [ 536.105448][ T9640] ? __ia32_sys_get_robust_list+0x110/0x110 [ 536.111374][ T9640] ? lock_chain_count+0x20/0x20 [ 536.116279][ T9640] __se_sys_futex+0x3a9/0x440 [ 536.120996][ T9640] ? __x64_sys_futex+0xf0/0xf0 [ 536.125801][ T9640] ? __x64_sys_futex+0x21/0xf0 [ 536.130620][ T9640] do_syscall_64+0x55/0xa0 [ 536.135091][ T9640] ? clear_bhb_loop+0x40/0x90 [ 536.139819][ T9640] ? clear_bhb_loop+0x40/0x90 [ 536.144564][ T9640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.150505][ T9640] RIP: 0033:0x7fa6d0d9cdd9 [ 536.154965][ T9640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.174610][ T9640] RSP: 002b:00007fa6d1ce6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 536.183066][ T9640] RAX: ffffffffffffffda RBX: 00007fa6d1016180 RCX: 00007fa6d0d9cdd9 [ 536.191070][ T9640] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 536.199079][ T9640] RBP: 00007fa6d0e32d69 R08: 0000000000000000 R09: 0000000000000082 [ 536.207082][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.215079][ T9640] R13: 00007fa6d1016218 R14: 00007fa6d1016180 R15: 00007ffd0db89ef8 [ 536.223103][ T9640] [ 536.471009][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.482223][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.518776][ T9639] ipip0: left promiscuous mode [ 538.922964][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 538.970129][ T9659] overlayfs: failed to clone upperpath [ 539.553957][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 539.639341][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.734'. [ 539.641457][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 539.657213][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 539.666932][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 539.683784][ T9] usb 5-1: string descriptor 0 read error: -22 [ 539.690149][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 539.699339][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.838870][ T9] snd-ua101 5-1:1.0: invalid num_altsetting [ 539.849433][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.930078][ T9653] bond2: (slave bond0): making interface the new active one [ 539.938750][ T9653] bond2: (slave bond0): Enslaving as an active interface with an up link [ 539.949330][ T9662] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 539.957657][ T9662] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 539.966257][ T9662] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 540.818208][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 540.833204][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 540.877969][ T9673] loop6: detected capacity change from 0 to 512 [ 540.891667][ T9673] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 540.899727][ T9652] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 540.935680][ T9673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 540.944243][ T9673] System zones: 1-12 [ 540.957866][ T9673] EXT4-fs (loop6): 1 truncate cleaned up [ 540.965215][ T9673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.126110][ T9652] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 541.208610][ T9155] usb 5-1: USB disconnect, device number 4 [ 542.366986][ T8568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.213598][ T9691] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 543.759845][ T5082] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 543.791486][ T9699] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 543.878786][ T5844] ------------[ cut here ]------------ [ 543.884893][ T5844] WARNING: CPU: 0 PID: 5844 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.896069][ T5844] Modules linked in: [ 543.900011][ T5844] CPU: 0 PID: 5844 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 543.908008][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.918175][ T5844] Workqueue: phy3 ieee80211_csa_finalize_work [ 543.924373][ T5844] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.931757][ T5844] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 543.951576][ T5844] RSP: 0018:ffffc900048cf9c0 EFLAGS: 00010293 [ 543.957749][ T5844] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff888031bc3c00 [ 543.965785][ T5844] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 543.975052][ C0] ------------[ cut here ]------------ [ 543.975157][ C0] WARNING: CPU: 0 PID: 5844 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 543.975202][ C0] Modules linked in: [ 543.975218][ C0] CPU: 0 PID: 5844 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 543.975246][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.975261][ C0] Workqueue: phy3 ieee80211_csa_finalize_work [ 543.975291][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 543.975319][ C0] Code: 24 4c 89 e7 e8 be 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ad b2 82 f7 <0f> 0b e9 48 fb ff ff e8 a1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 543.975338][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 543.975360][ C0] RAX: ffffffff8a046f53 RBX: ffffffff8a045d56 RCX: ffff888031bc3c00 [ 543.975377][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.975392][ C0] RBP: 0000000000000000 R08: ffff888031bc3c00 R09: 0000000000000003 [ 543.975407][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cf123c0 [ 543.975422][ C0] R13: dffffc0000000000 R14: ffff88805cf128b0 R15: ffff888140fcb824 [ 543.975439][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 543.975458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.975474][ C0] CR2: 0000001b3371bff8 CR3: 00000000681e8000 CR4: 00000000003506f0 [ 543.975495][ C0] Call Trace: [ 543.975504][ C0] [ 543.975517][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 543.975554][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 543.975586][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 543.975627][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 543.975662][ C0] __iterate_interfaces+0x243/0x500 [ 543.975692][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 543.975718][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 543.975749][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 543.975774][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 543.975819][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 543.975846][ C0] __hrtimer_run_queues+0x520/0xc40 [ 543.975870][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 543.975904][ C0] ? hw_scan_work+0xf60/0xf60 [ 543.975937][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 543.975960][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 543.975997][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 543.976025][ C0] handle_softirqs+0x280/0x820 [ 543.976054][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 543.976081][ C0] ? do_softirq+0x1a0/0x1a0 [ 543.976109][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 543.976140][ C0] __irq_exit_rcu+0xd3/0x190 [ 543.976162][ C0] ? irq_exit_rcu+0x20/0x20 [ 543.976195][ C0] irq_exit_rcu+0x9/0x20 [ 543.976214][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 543.976240][ C0] [ 543.976249][ C0] [ 543.976259][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.976286][ C0] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 543.976313][ C0] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 543.976331][ C0] RSP: 0018:ffffc900048cf340 EFLAGS: 00000293 [ 543.976350][ C0] RAX: ffffffff816b9b86 RBX: ffffc900048cf4df RCX: ffff888031bc3c00 [ 543.976366][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.976380][ C0] RBP: ffffc900048cf4b0 R08: ffffffff911c6507 R09: 1ffffffff2238ca0 [ 543.976396][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffff8d8b9500 [ 543.976413][ C0] R13: 1ffffffff19f970c R14: ffffffff8d8b9558 R15: dffffc0000000000 [ 543.976438][ C0] ? console_flush_all+0x8a6/0xd20 [ 543.976477][ C0] ? console_flush_all+0x10a/0xd20 [ 543.976519][ C0] ? is_console_locked+0x20/0x20 [ 543.976545][ C0] ? lock_chain_count+0x20/0x20 [ 543.976573][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 543.976604][ C0] console_unlock+0xad/0x350 [ 543.976633][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 543.976657][ C0] ? vprintk_emit+0x53d/0x610 [ 543.976685][ C0] ? printk_sprint+0x460/0x460 [ 543.976713][ C0] ? __wake_up_klogd+0xd9/0x100 [ 543.976743][ C0] vprintk_emit+0x497/0x610 [ 543.976790][ C0] ? printk_sprint+0x460/0x460 [ 543.976824][ C0] ? _printk+0xde/0x130 [ 543.976851][ C0] ? copy_from_kernel_nofault+0x1d2/0x310 [ 543.976893][ C0] _printk+0xde/0x130 [ 543.976920][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 543.976948][ C0] ? load_image+0x420/0x420 [ 543.977025][ C0] __show_regs+0x159/0x600 [ 543.977051][ C0] ? dump_stack_print_info+0xf5/0x150 [ 543.977082][ C0] show_regs+0x44/0x90 [ 543.977109][ C0] __warn+0x160/0x470 [ 543.977127][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.977151][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.977173][ C0] report_bug+0x2be/0x4f0 [ 543.977193][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.977218][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.977240][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 543.977265][ C0] handle_bug+0xcf/0x120 [ 543.977285][ C0] exc_invalid_op+0x1a/0x50 [ 543.977305][ C0] asm_exc_invalid_op+0x1a/0x20 [ 543.977327][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.977353][ C0] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 543.977371][ C0] RSP: 0018:ffffc900048cf9c0 EFLAGS: 00010293 [ 543.977393][ C0] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff888031bc3c00 [ 543.977409][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 543.977423][ C0] RBP: dffffc0000000000 R08: ffff88805cf115af R09: 1ffff1100b9e22b5 [ 543.977439][ C0] R10: dffffc0000000000 R11: ffffed100b9e22b6 R12: 0000000000000001 [ 543.977455][ C0] R13: ffff88805cf125d9 R14: ffff888079bd2c70 R15: ffff888079bd2ce8 [ 543.977480][ C0] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 543.977530][ C0] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 543.977561][ C0] ieee80211_csa_finalize+0x5a6/0xf20 [ 543.977588][ C0] ? mutex_lock_nested+0x20/0x20 [ 543.977613][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 543.977639][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 543.977667][ C0] ? read_lock_is_recursive+0x20/0x20 [ 543.977701][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 543.977740][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 543.977768][ C0] process_scheduled_works+0xa5d/0x15d0 [ 543.977845][ C0] ? worker_attach_to_pool+0x380/0x380 [ 543.977880][ C0] ? assign_work+0x3d2/0x5d0 [ 543.977913][ C0] worker_thread+0xa55/0xfc0 [ 543.977941][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 543.977992][ C0] kthread+0x2fa/0x390 [ 543.978012][ C0] ? pr_cont_work+0x560/0x560 [ 543.978039][ C0] ? kthread_blkcg+0xd0/0xd0 [ 543.978060][ C0] ret_from_fork+0x48/0x80 [ 543.978086][ C0] ? kthread_blkcg+0xd0/0xd0 [ 543.978107][ C0] ret_from_fork_asm+0x11/0x20 [ 543.978152][ C0] [ 543.978164][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 543.978174][ C0] CPU: 0 PID: 5844 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 543.978193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.978204][ C0] Workqueue: phy3 ieee80211_csa_finalize_work [ 543.978229][ C0] Call Trace: [ 543.978235][ C0] [ 543.978243][ C0] dump_stack_lvl+0x18c/0x250 [ 543.978275][ C0] ? show_regs_print_info+0x20/0x20 [ 543.978304][ C0] ? load_image+0x420/0x420 [ 543.978343][ C0] panic+0x2dc/0x730 [ 543.978374][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 543.978407][ C0] ? ret_from_fork_asm+0x11/0x20 [ 543.978438][ C0] __warn+0x2e0/0x470 [ 543.978458][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 543.978485][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 543.978509][ C0] report_bug+0x2be/0x4f0 [ 543.978529][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 543.978552][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 543.978575][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 543.978599][ C0] handle_bug+0xcf/0x120 [ 543.978618][ C0] exc_invalid_op+0x1a/0x50 [ 543.978638][ C0] asm_exc_invalid_op+0x1a/0x20 [ 543.978659][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 543.978683][ C0] Code: 24 4c 89 e7 e8 be 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ad b2 82 f7 <0f> 0b e9 48 fb ff ff e8 a1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 543.978699][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 543.978715][ C0] RAX: ffffffff8a046f53 RBX: ffffffff8a045d56 RCX: ffff888031bc3c00 [ 543.978729][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.978741][ C0] RBP: 0000000000000000 R08: ffff888031bc3c00 R09: 0000000000000003 [ 543.978753][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cf123c0 [ 543.978766][ C0] R13: dffffc0000000000 R14: ffff88805cf128b0 R15: ffff888140fcb824 [ 543.978784][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 543.978819][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 543.978850][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 543.978876][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 543.978910][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 543.978939][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 543.978977][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 543.979009][ C0] __iterate_interfaces+0x243/0x500 [ 543.979037][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 543.979060][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 543.979091][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 543.979113][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 543.979145][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 543.979169][ C0] __hrtimer_run_queues+0x520/0xc40 [ 543.979189][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 543.979221][ C0] ? hw_scan_work+0xf60/0xf60 [ 543.979251][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 543.979272][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 543.979306][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 543.979333][ C0] handle_softirqs+0x280/0x820 [ 543.979358][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 543.979384][ C0] ? do_softirq+0x1a0/0x1a0 [ 543.979409][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 543.979437][ C0] __irq_exit_rcu+0xd3/0x190 [ 543.979457][ C0] ? irq_exit_rcu+0x20/0x20 [ 543.979486][ C0] irq_exit_rcu+0x9/0x20 [ 543.979503][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 543.979526][ C0] [ 543.979532][ C0] [ 543.979540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.979562][ C0] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 543.979585][ C0] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 543.979600][ C0] RSP: 0018:ffffc900048cf340 EFLAGS: 00000293 [ 543.979617][ C0] RAX: ffffffff816b9b86 RBX: ffffc900048cf4df RCX: ffff888031bc3c00 [ 543.979631][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.979642][ C0] RBP: ffffc900048cf4b0 R08: ffffffff911c6507 R09: 1ffffffff2238ca0 [ 543.979656][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffff8d8b9500 [ 543.979671][ C0] R13: 1ffffffff19f970c R14: ffffffff8d8b9558 R15: dffffc0000000000 [ 543.979694][ C0] ? console_flush_all+0x8a6/0xd20 [ 543.979728][ C0] ? console_flush_all+0x10a/0xd20 [ 543.979767][ C0] ? is_console_locked+0x20/0x20 [ 543.979799][ C0] ? lock_chain_count+0x20/0x20 [ 543.979827][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 543.979855][ C0] console_unlock+0xad/0x350 [ 543.979881][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 543.979902][ C0] ? vprintk_emit+0x53d/0x610 [ 543.979927][ C0] ? printk_sprint+0x460/0x460 [ 543.979952][ C0] ? __wake_up_klogd+0xd9/0x100 [ 543.979978][ C0] vprintk_emit+0x497/0x610 [ 543.980004][ C0] ? printk_sprint+0x460/0x460 [ 543.980028][ C0] ? _printk+0xde/0x130 [ 543.980052][ C0] ? copy_from_kernel_nofault+0x1d2/0x310 [ 543.980090][ C0] _printk+0xde/0x130 [ 543.980114][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 543.980142][ C0] ? load_image+0x420/0x420 [ 543.980182][ C0] __show_regs+0x159/0x600 [ 543.980207][ C0] ? dump_stack_print_info+0xf5/0x150 [ 543.980239][ C0] show_regs+0x44/0x90 [ 543.980263][ C0] __warn+0x160/0x470 [ 543.980284][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.980309][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.980333][ C0] report_bug+0x2be/0x4f0 [ 543.980352][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.980376][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.980400][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 543.980422][ C0] handle_bug+0xcf/0x120 [ 543.980442][ C0] exc_invalid_op+0x1a/0x50 [ 543.980462][ C0] asm_exc_invalid_op+0x1a/0x20 [ 543.980483][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 543.980506][ C0] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 543.980522][ C0] RSP: 0018:ffffc900048cf9c0 EFLAGS: 00010293 [ 543.980538][ C0] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff888031bc3c00 [ 543.980550][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 543.980562][ C0] RBP: dffffc0000000000 R08: ffff88805cf115af R09: 1ffff1100b9e22b5 [ 543.980576][ C0] R10: dffffc0000000000 R11: ffffed100b9e22b6 R12: 0000000000000001 [ 543.980589][ C0] R13: ffff88805cf125d9 R14: ffff888079bd2c70 R15: ffff888079bd2ce8 [ 543.980612][ C0] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 543.980658][ C0] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 543.980688][ C0] ieee80211_csa_finalize+0x5a6/0xf20 [ 543.980713][ C0] ? mutex_lock_nested+0x20/0x20 [ 543.980735][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 543.980757][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 543.980783][ C0] ? read_lock_is_recursive+0x20/0x20 [ 543.980822][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 543.980848][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 543.980873][ C0] process_scheduled_works+0xa5d/0x15d0 [ 543.980928][ C0] ? worker_attach_to_pool+0x380/0x380 [ 543.980961][ C0] ? assign_work+0x3d2/0x5d0 [ 543.980991][ C0] worker_thread+0xa55/0xfc0 [ 543.981016][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 543.981065][ C0] kthread+0x2fa/0x390 [ 543.981083][ C0] ? pr_cont_work+0x560/0x560 [ 543.981107][ C0] ? kthread_blkcg+0xd0/0xd0 [ 543.981127][ C0] ret_from_fork+0x48/0x80 [ 543.981148][ C0] ? kthread_blkcg+0xd0/0xd0 [ 543.981168][ C0] ret_from_fork_asm+0x11/0x20 [ 543.981209][ C0] [ 543.981347][ C0] Kernel Offset: disabled