last executing test programs: 23m30.36173618s ago: executing program 3 (id=53): read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x100010, r3, 0x64dc6000) 23m29.105155513s ago: executing program 3 (id=55): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './cgroup\x00'}, 0x6e) 23m28.922160074s ago: executing program 3 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 23m27.61764465s ago: executing program 3 (id=60): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 23m25.875365222s ago: executing program 3 (id=64): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0) 23m24.794765425s ago: executing program 3 (id=66): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 23m24.477010792s ago: executing program 32 (id=66): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 8m8.592020655s ago: executing program 0 (id=1493): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=ep866,errors=continue,utf8=0,shortname=mixed,shortname=win95,nonumtail=0,uni_xlate=1,iocharset=cp857,shortname=mixed,utf8=1,uni_xlate=0,shortname=win95,codepage=936,utf8=1,utf8=0,\x00'], 0xfd, 0x2a8, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) 8m6.43910461s ago: executing program 0 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 8m6.073039501s ago: executing program 0 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 8m4.696393952s ago: executing program 0 (id=1501): r0 = io_uring_setup(0x3a4d, &(0x7f0000000100)={0x0, 0x2118, 0x800}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xf, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x10000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) r5 = socket(0x1d, 0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x6a, 0x1, 0x0, 0x0) 8m3.328668881s ago: executing program 0 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 8m1.683585438s ago: executing program 0 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 7m46.582397948s ago: executing program 33 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 17.965817381s ago: executing program 5 (id=2396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 14.629002376s ago: executing program 5 (id=2403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 13.269059246s ago: executing program 5 (id=2407): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) 11.693630678s ago: executing program 5 (id=2409): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x6) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r8, 0x5403, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r9, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) connect$ax25(r9, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 8.771099128s ago: executing program 1 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 7.774707586s ago: executing program 2 (id=2418): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x6) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 6.896828837s ago: executing program 2 (id=2420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 5.571985965s ago: executing program 5 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 4.884065375s ago: executing program 2 (id=2422): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.987256707s ago: executing program 1 (id=2425): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) writev(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000140)="14186d6285c6fecbcca8a293acefd9ce4117ad02e1d23bc858bbc7a5874877e1fb5397539e59ea4c24765558fc8c7e189e401d40ddfa051346c2c62895d3", 0x3e}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) 3.714665733s ago: executing program 4 (id=2426): r0 = io_uring_setup(0x3a4d, &(0x7f0000000100)={0x0, 0x2118, 0x800}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xf, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) r5 = socket(0x1d, 0x2, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x6a, 0x1, 0x0, 0x0) 3.431862529s ago: executing program 4 (id=2427): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x6) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r8, 0x5403, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r9, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.092270669s ago: executing program 1 (id=2428): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) socket(0x28, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000140)="14186d6285c6fecbcca8a293acefd9ce4117ad02e1d23bc858bbc7a5874877e1fb5397539e59ea4c24765558fc8c7e189e401d40ddfa051346c2c62895d3", 0x3e}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.091129779s ago: executing program 4 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 2.755396119s ago: executing program 2 (id=2430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 2.754005529s ago: executing program 4 (id=2431): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x6) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f0000000080)=0xa) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r9, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.743740298s ago: executing program 2 (id=2432): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) writev(r3, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000140)="14186d6285c6fecbcca8a293acefd9ce4117ad02e1d23bc858bbc7a5874877e1fb5397539e59ea4c24765558fc8c7e189e401d40ddfa051346c2c62895d3", 0x3e}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) 1.739820768s ago: executing program 4 (id=2433): socket(0x1e, 0x4, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7010f5ffffff040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.717703759s ago: executing program 1 (id=2434): mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) 1.715369759s ago: executing program 5 (id=2435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 798.336973ms ago: executing program 1 (id=2436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 573.007696ms ago: executing program 4 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r2}) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 308.988611ms ago: executing program 2 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000140), 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) unshare(0x22020600) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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") 0s ago: executing program 1 (id=2439): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) socket(0x28, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000140)="14186d6285c6fecbcca8a293acefd9ce4117ad02e1d23bc858bbc7a5874877e1fb5397539e59ea4c24765558fc8c7e189e401d40ddfa051346c2c62895d3", 0x3e}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): ) flags 0x80700 phys_seg 1 prio class 2 [ 796.566542][T10586] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 796.569279][T10576] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 796.780658][T10576] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1079: attempt to clear invalid blocks 2 len 1 [ 796.815740][T10576] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 796.855696][T10576] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1079: invalid indirect mapped block 1819239214 (level 0) [ 796.943836][T10576] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1079: invalid indirect mapped block 1819239214 (level 1) [ 798.923295][T10576] EXT4-fs (loop2): 1 truncate cleaned up [ 798.942092][T10576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.192267][ T5854] Process accounting resumed [ 799.200580][ T5761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.378621][T10606] loop1: detected capacity change from 0 to 256 [ 799.690919][T10612] xt_socket: unknown flags 0x50 [ 800.558045][T10614] loop2: detected capacity change from 0 to 64 [ 800.635644][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.261608][T10614] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 804.353347][T10640] bond2: entered promiscuous mode [ 804.381255][T10642] bridge0: port 3(syz_tun) entered blocking state [ 804.545944][T10642] bridge0: port 3(syz_tun) entered disabled state [ 804.573770][T10642] syz_tun: entered allmulticast mode [ 804.598271][T10642] syz_tun: entered promiscuous mode [ 804.719177][T10648] loop0: detected capacity change from 0 to 1024 [ 804.736558][T10648] hfsplus: unable to parse mount options [ 804.882635][T10642] bridge0: port 3(syz_tun) entered blocking state [ 804.889816][T10642] bridge0: port 3(syz_tun) entered forwarding state [ 805.073928][T10648] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 805.083669][T10648] overlayfs: failed to set xattr on upper [ 805.089562][T10648] overlayfs: ...falling back to redirect_dir=nofollow. [ 805.096599][T10648] overlayfs: ...falling back to index=off. [ 805.102512][T10648] overlayfs: ...falling back to uuid=null. [ 805.332761][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 805.332778][ T28] audit: type=1326 audit(1769584354.283:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.365165][ T28] audit: type=1326 audit(1769584354.283:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.389460][ T28] audit: type=1326 audit(1769584354.283:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.412774][ T28] audit: type=1326 audit(1769584354.283:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.516102][ T28] audit: type=1326 audit(1769584354.283:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.548553][ T28] audit: type=1326 audit(1769584354.293:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.572391][ T28] audit: type=1326 audit(1769584354.293:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 805.616520][ T28] audit: type=1326 audit(1769584354.293:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242259aeb9 code=0x7ffc0000 [ 806.308708][ T28] audit: type=1326 audit(1769584354.293:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f242255b78e code=0x7ffc0000 [ 806.331089][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.405948][ T28] audit: type=1326 audit(1769584354.293:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f242255b78e code=0x7ffc0000 [ 806.428438][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.618255][T10640] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 806.676419][T10640] bridge0: port 3(syz_tun) entered disabled state [ 806.683096][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.690508][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.699336][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 807.740392][T10673] fuse: Bad value for 'fd' [ 807.850982][T10679] fuse: Bad value for 'fd' [ 808.315941][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.972536][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.993458][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.313607][T10697] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 810.802183][T10681] syz.2.1110 (10681) used greatest stack depth: 16720 bytes left [ 810.946718][T10701] loop1: detected capacity change from 0 to 512 [ 811.204624][T10701] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1117: inode has both inline data and extents flags [ 811.957325][T10714] loop2: detected capacity change from 0 to 64 [ 812.134730][T10701] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1117: couldn't read orphan inode 15 (err -117) [ 812.442453][T10701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.692956][T10725] loop2: detected capacity change from 0 to 22 [ 813.701725][T10725] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 813.903657][T10725] romfs: bad initial checksum on dev loop2. [ 814.172803][ T9031] udevd[9031]: incorrect romfs checksum on /dev/loop2 [ 814.279261][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.877043][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 815.897876][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1126'. [ 817.545996][T10704] syz.4.1119: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 817.587370][T10704] CPU: 0 PID: 10704 Comm: syz.4.1119 Not tainted syzkaller #0 [ 817.594902][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.604982][T10704] Call Trace: [ 817.608277][T10704] [ 817.611220][T10704] dump_stack_lvl+0x18c/0x250 [ 817.615938][T10704] ? show_regs_print_info+0x20/0x20 [ 817.621162][T10704] ? load_image+0x400/0x400 [ 817.625691][T10704] ? __rcu_read_unlock+0x7c/0xd0 [ 817.630653][T10704] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 817.637094][T10704] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 817.643628][T10704] warn_alloc+0x246/0x340 [ 817.647996][T10704] ? zone_watermark_ok_safe+0x230/0x230 [ 817.653577][T10704] ? _raw_spin_unlock+0x28/0x40 [ 817.658448][T10704] ? netlink_rcv_skb+0x241/0x4d0 [ 817.663424][T10704] __vmalloc_node_range+0x662/0x1330 [ 817.668736][T10704] ? __asan_memset+0x22/0x40 [ 817.673406][T10704] ? free_vm_area+0x50/0x50 [ 817.677952][T10704] ? kvmalloc_node+0x70/0x180 [ 817.682662][T10704] ? rcu_is_watching+0x15/0xb0 [ 817.687533][T10704] ? kvmalloc_node+0x70/0x180 [ 817.692234][T10704] ? trace_kmalloc+0x1f/0x90 [ 817.696855][T10704] kvmalloc_node+0x13f/0x180 [ 817.701551][T10704] ? hash_netport4_resize+0x232/0x1b40 [ 817.707026][T10704] hash_netport4_resize+0x232/0x1b40 [ 817.712332][T10704] ? hash_netport4_uadt+0xc99/0xf30 [ 817.717559][T10704] ? hash_netport4_uadt+0xf30/0xf30 [ 817.722775][T10704] ? hash_netport4_kadt+0x590/0x590 [ 817.728084][T10704] ? _local_bh_enable+0xa0/0xa0 [ 817.732962][T10704] call_ad+0x454/0xb40 [ 817.737071][T10704] ? ip_set_ad+0x9c0/0x9c0 [ 817.741521][T10704] ? __nla_parse+0x40/0x50 [ 817.745963][T10704] ip_set_ad+0x81a/0x9c0 [ 817.750322][T10704] ? ip_set_dump_done+0x1e0/0x1e0 [ 817.755370][T10704] ? rcu_is_watching+0x15/0xb0 [ 817.760187][T10704] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 817.765234][T10704] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.771320][T10704] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 817.776565][T10704] ? nfnetlink_unbind+0x160/0x160 [ 817.781632][T10704] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 817.786849][T10704] ? __netlink_deliver_tap+0x5ab/0x830 [ 817.792383][T10704] ? netlink_deliver_tap+0x19c/0x1b0 [ 817.797692][T10704] ? netlink_unicast+0x72c/0x8d0 [ 817.802647][T10704] ? netlink_sendmsg+0x8d0/0xbf0 [ 817.807607][T10704] ? ____sys_sendmsg+0x5ba/0x960 [ 817.812576][T10704] ? ___sys_sendmsg+0x2a6/0x360 [ 817.817444][T10704] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 817.822489][T10704] ? do_syscall_64+0x55/0xa0 [ 817.827113][T10704] netlink_rcv_skb+0x241/0x4d0 [ 817.831904][T10704] ? nfnetlink_unbind+0x160/0x160 [ 817.837037][T10704] ? netlink_ack+0x1180/0x1180 [ 817.841835][T10704] ? apparmor_capable+0x137/0x1a0 [ 817.846888][T10704] ? bpf_lsm_capable+0x9/0x10 [ 817.851588][T10704] ? security_capable+0x89/0xb0 [ 817.856475][T10704] nfnetlink_rcv+0x2c9/0x24a0 [ 817.861181][T10704] ? __local_bh_enable_ip+0x13a/0x1c0 [ 817.866573][T10704] ? lockdep_hardirqs_on+0x98/0x150 [ 817.871788][T10704] ? __local_bh_enable_ip+0x13a/0x1c0 [ 817.877179][T10704] ? _local_bh_enable+0xa0/0xa0 [ 817.882047][T10704] ? __dev_queue_xmit+0x26b/0x36b0 [ 817.887182][T10704] ? __dev_queue_xmit+0x26b/0x36b0 [ 817.892309][T10704] ? __dev_queue_xmit+0x124f/0x36b0 [ 817.897524][T10704] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 817.903091][T10704] ? __dev_queue_xmit+0x26b/0x36b0 [ 817.908240][T10704] ? ref_tracker_free+0x690/0x840 [ 817.913285][T10704] ? refcount_inc+0x70/0x70 [ 817.917804][T10704] ? __asan_memcpy+0x40/0x70 [ 817.922415][T10704] ? __skb_clone+0x63/0x790 [ 817.926939][T10704] ? __skb_clone+0x480/0x790 [ 817.931553][T10704] ? __netlink_deliver_tap+0x7e8/0x830 [ 817.937030][T10704] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.942250][T10704] ? __lock_acquire+0x7d40/0x7d40 [ 817.947302][T10704] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.952534][T10704] netlink_unicast+0x751/0x8d0 [ 817.957331][T10704] netlink_sendmsg+0x8d0/0xbf0 [ 817.962135][T10704] ? netlink_getsockopt+0x590/0x590 [ 817.967365][T10704] ? aa_sock_msg_perm+0x94/0x150 [ 817.972419][T10704] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 817.977727][T10704] ? security_socket_sendmsg+0x80/0xa0 [ 817.983200][T10704] ? netlink_getsockopt+0x590/0x590 [ 817.988420][T10704] ____sys_sendmsg+0x5ba/0x960 [ 817.993216][T10704] ? __asan_memset+0x22/0x40 [ 817.997827][T10704] ? __sys_sendmsg_sock+0x30/0x30 [ 818.002874][T10704] ? __import_iovec+0x5f2/0x850 [ 818.007757][T10704] ? import_iovec+0x73/0xa0 [ 818.012291][T10704] ___sys_sendmsg+0x2a6/0x360 [ 818.017003][T10704] ? __sys_sendmsg+0x2a0/0x2a0 [ 818.021845][T10704] __se_sys_sendmsg+0x1c2/0x2b0 [ 818.026723][T10704] ? __x64_sys_sendmsg+0x80/0x80 [ 818.031702][T10704] ? lockdep_hardirqs_on+0x98/0x150 [ 818.036933][T10704] do_syscall_64+0x55/0xa0 [ 818.041391][T10704] ? clear_bhb_loop+0x40/0x90 [ 818.046087][T10704] ? clear_bhb_loop+0x40/0x90 [ 818.050790][T10704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.056704][T10704] RIP: 0033:0x7f242259aeb9 [ 818.061191][T10704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.080913][T10704] RSP: 002b:00007f2423470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.089359][T10704] RAX: ffffffffffffffda RBX: 00007f2422815fa0 RCX: 00007f242259aeb9 [ 818.097363][T10704] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 818.105371][T10704] RBP: 00007f2422608c1f R08: 0000000000000000 R09: 0000000000000000 [ 818.113372][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.121381][T10704] R13: 00007f2422816038 R14: 00007f2422815fa0 R15: 00007ffd4ad71428 [ 818.129385][T10704] [ 818.146266][T10704] Mem-Info: [ 818.149698][T10704] active_anon:6304 inactive_anon:0 isolated_anon:0 [ 818.149698][T10704] active_file:18509 inactive_file:40395 isolated_file:0 [ 818.149698][T10704] unevictable:768 dirty:149 writeback:0 [ 818.149698][T10704] slab_reclaimable:8418 slab_unreclaimable:97820 [ 818.149698][T10704] mapped:25076 shmem:1595 pagetables:790 [ 818.149698][T10704] sec_pagetables:0 bounce:0 [ 818.149698][T10704] kernel_misc_reclaimable:0 [ 818.149698][T10704] free:1323421 free_pcp:16978 free_cma:0 [ 818.379277][T10704] Node 0 active_anon:45516kB inactive_anon:0kB active_file:74036kB inactive_file:161372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120504kB dirty:592kB writeback:0kB shmem:25144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12088kB pagetables:3160kB sec_pagetables:0kB all_unreclaimable? no [ 818.411667][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.558324][T10751] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 818.760821][T10704] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 818.939575][T10704] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.967269][T10704] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 818.981452][T10704] Node 0 DMA32 free:1393304kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:47172kB inactive_anon:0kB active_file:74036kB inactive_file:160544kB unevictable:1536kB writepending:592kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:16588kB local_pcp:7964kB free_cma:0kB [ 819.012028][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.103647][T10704] lowmem_reserve[]: 0 0 0 0 0 [ 819.108450][T10704] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.172809][T10704] lowmem_reserve[]: 0 0 0 0 0 [ 819.177618][T10704] Node 1 Normal free:3884812kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:28708kB local_pcp:15936kB free_cma:0kB [ 819.207157][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.234094][T10704] lowmem_reserve[]: 0 0 0 0 0 [ 819.244104][T10704] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 819.308758][T10704] Node 0 DMA32: 386*4kB (ME) 670*8kB (ME) 804*16kB (UME) 993*32kB (UME) 471*64kB (UME) 53*128kB (UME) 116*256kB (UME) 75*512kB (UME) 28*1024kB (UM) 16*2048kB (UME) 287*4096kB (M) = 1393560kB [ 819.348856][ T5766] Bluetooth: hci3: command 0x0406 tx timeout [ 819.359030][T10704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 819.370727][T10704] Node 1 Normal: 279*4kB (UME) 62*8kB (UME) 42*16kB (UME) 75*32kB (UME) 15*64kB (UME) 6*128kB (UM) 2*256kB (UM) 2*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3884812kB [ 819.389072][T10704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.398714][T10704] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 819.408068][T10704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.417810][T10704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 819.427219][T10704] 63556 total pagecache pages [ 819.432409][T10704] 0 pages in swap cache [ 819.436590][T10704] Free swap = 124436kB [ 819.443736][T10704] Total swap = 124996kB [ 819.447921][T10704] 2097051 pages RAM [ 819.452856][T10704] 0 pages HighMem/MovableOnly [ 819.457648][T10704] 416922 pages reserved [ 819.461896][T10704] 0 pages cma reserved [ 822.527369][T10776] loop0: detected capacity change from 0 to 64 [ 823.703190][T10780] loop0: detected capacity change from 0 to 64 [ 826.833713][T10810] fuse: Bad value for 'fd' [ 827.866747][T10812] batman_adv: batadv: cannot create tp meter kthread [ 828.070853][T10820] fuse: Bad value for 'fd' [ 829.172216][T10832] fuse: Bad value for 'fd' [ 830.747456][T10837] warn_alloc: 1 callbacks suppressed [ 830.747474][T10837] syz.1.1155: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 830.838461][T10837] CPU: 0 PID: 10837 Comm: syz.1.1155 Not tainted syzkaller #0 [ 830.845991][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.856161][T10837] Call Trace: [ 830.859461][T10837] [ 830.862409][T10837] dump_stack_lvl+0x18c/0x250 [ 830.867125][T10837] ? show_regs_print_info+0x20/0x20 [ 830.872354][T10837] ? load_image+0x400/0x400 [ 830.876884][T10837] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 830.883331][T10837] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 830.889864][T10837] warn_alloc+0x246/0x340 [ 830.894226][T10837] ? zone_watermark_ok_safe+0x230/0x230 [ 830.900044][T10837] ? _raw_spin_unlock+0x28/0x40 [ 830.904893][T10837] ? netlink_rcv_skb+0x241/0x4d0 [ 830.909840][T10837] __vmalloc_node_range+0x662/0x1330 [ 830.915137][T10837] ? __asan_memset+0x22/0x40 [ 830.919787][T10837] ? free_vm_area+0x50/0x50 [ 830.924299][T10837] ? kvmalloc_node+0x70/0x180 [ 830.928978][T10837] ? rcu_is_watching+0x15/0xb0 [ 830.933753][T10837] ? kvmalloc_node+0x70/0x180 [ 830.938432][T10837] ? trace_kmalloc+0x1f/0x90 [ 830.943023][T10837] kvmalloc_node+0x13f/0x180 [ 830.947614][T10837] ? hash_netport4_resize+0x232/0x1b40 [ 830.953172][T10837] hash_netport4_resize+0x232/0x1b40 [ 830.958461][T10837] ? hash_netport4_uadt+0xc99/0xf30 [ 830.963676][T10837] ? hash_netport4_uadt+0xf30/0xf30 [ 830.968873][T10837] ? hash_netport4_kadt+0x590/0x590 [ 830.974083][T10837] ? _local_bh_enable+0xa0/0xa0 [ 830.978939][T10837] call_ad+0x454/0xb40 [ 830.983015][T10837] ? ip_set_ad+0x9c0/0x9c0 [ 830.987434][T10837] ? __nla_parse+0x40/0x50 [ 830.991940][T10837] ip_set_ad+0x81a/0x9c0 [ 830.996188][T10837] ? ip_set_dump_done+0x1e0/0x1e0 [ 831.001221][T10837] ? rcu_is_watching+0x15/0xb0 [ 831.006013][T10837] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 831.011041][T10837] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.017105][T10837] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 831.022314][T10837] ? nfnetlink_unbind+0x160/0x160 [ 831.027356][T10837] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 831.032554][T10837] ? __netlink_deliver_tap+0x5ab/0x830 [ 831.038164][T10837] ? netlink_deliver_tap+0x19c/0x1b0 [ 831.043469][T10837] ? netlink_unicast+0x72c/0x8d0 [ 831.048405][T10837] ? netlink_sendmsg+0x8d0/0xbf0 [ 831.053344][T10837] ? ____sys_sendmsg+0x5ba/0x960 [ 831.058372][T10837] ? ___sys_sendmsg+0x2a6/0x360 [ 831.063224][T10837] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 831.068249][T10837] ? do_syscall_64+0x55/0xa0 [ 831.072854][T10837] netlink_rcv_skb+0x241/0x4d0 [ 831.077630][T10837] ? nfnetlink_unbind+0x160/0x160 [ 831.082833][T10837] ? netlink_ack+0x1180/0x1180 [ 831.087607][T10837] ? apparmor_capable+0x137/0x1a0 [ 831.092632][T10837] ? bpf_lsm_capable+0x9/0x10 [ 831.097311][T10837] ? security_capable+0x89/0xb0 [ 831.102170][T10837] nfnetlink_rcv+0x2c9/0x24a0 [ 831.106857][T10837] ? __local_bh_enable_ip+0x13a/0x1c0 [ 831.112232][T10837] ? lockdep_hardirqs_on+0x98/0x150 [ 831.117427][T10837] ? __local_bh_enable_ip+0x13a/0x1c0 [ 831.122797][T10837] ? _local_bh_enable+0xa0/0xa0 [ 831.127650][T10837] ? __dev_queue_xmit+0x26b/0x36b0 [ 831.132761][T10837] ? __dev_queue_xmit+0x26b/0x36b0 [ 831.137876][T10837] ? __dev_queue_xmit+0x124f/0x36b0 [ 831.143186][T10837] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 831.148756][T10837] ? __dev_queue_xmit+0x26b/0x36b0 [ 831.153952][T10837] ? ref_tracker_free+0x690/0x840 [ 831.159090][T10837] ? refcount_inc+0x70/0x70 [ 831.163588][T10837] ? __asan_memcpy+0x40/0x70 [ 831.168185][T10837] ? __skb_clone+0x63/0x790 [ 831.172684][T10837] ? __skb_clone+0x480/0x790 [ 831.177375][T10837] ? __netlink_deliver_tap+0x7e8/0x830 [ 831.182839][T10837] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.188045][T10837] ? __lock_acquire+0x7d40/0x7d40 [ 831.193076][T10837] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.198285][T10837] netlink_unicast+0x751/0x8d0 [ 831.203058][T10837] netlink_sendmsg+0x8d0/0xbf0 [ 831.207862][T10837] ? netlink_getsockopt+0x590/0x590 [ 831.213114][T10837] ? aa_sock_msg_perm+0x94/0x150 [ 831.218052][T10837] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 831.223347][T10837] ? security_socket_sendmsg+0x80/0xa0 [ 831.228825][T10837] ? netlink_getsockopt+0x590/0x590 [ 831.234037][T10837] ____sys_sendmsg+0x5ba/0x960 [ 831.238849][T10837] ? __asan_memset+0x22/0x40 [ 831.243443][T10837] ? __sys_sendmsg_sock+0x30/0x30 [ 831.248477][T10837] ? __import_iovec+0x5f2/0x850 [ 831.253423][T10837] ? import_iovec+0x73/0xa0 [ 831.257932][T10837] ___sys_sendmsg+0x2a6/0x360 [ 831.262620][T10837] ? __sys_sendmsg+0x2a0/0x2a0 [ 831.267437][T10837] __se_sys_sendmsg+0x1c2/0x2b0 [ 831.272410][T10837] ? __x64_sys_sendmsg+0x80/0x80 [ 831.277374][T10837] ? lockdep_hardirqs_on+0x98/0x150 [ 831.282573][T10837] do_syscall_64+0x55/0xa0 [ 831.286994][T10837] ? clear_bhb_loop+0x40/0x90 [ 831.291670][T10837] ? clear_bhb_loop+0x40/0x90 [ 831.296350][T10837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.302246][T10837] RIP: 0033:0x7f5249d9aeb9 [ 831.306662][T10837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.326384][T10837] RSP: 002b:00007f524accd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.334937][T10837] RAX: ffffffffffffffda RBX: 00007f524a015fa0 RCX: 00007f5249d9aeb9 [ 831.342910][T10837] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 831.350892][T10837] RBP: 00007f5249e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 831.358859][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.366831][T10837] R13: 00007f524a016038 R14: 00007f524a015fa0 R15: 00007ffec576c3d8 [ 831.374902][T10837] [ 831.421247][T10837] Mem-Info: [ 831.428273][T10837] active_anon:8856 inactive_anon:0 isolated_anon:0 [ 831.428273][T10837] active_file:18509 inactive_file:40401 isolated_file:0 [ 831.428273][T10837] unevictable:768 dirty:217 writeback:0 [ 831.428273][T10837] slab_reclaimable:8398 slab_unreclaimable:99116 [ 831.428273][T10837] mapped:24856 shmem:4206 pagetables:745 [ 831.428273][T10837] sec_pagetables:0 bounce:0 [ 831.428273][T10837] kernel_misc_reclaimable:0 [ 831.428273][T10837] free:1326120 free_pcp:9772 free_cma:0 [ 831.473478][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.539371][T10837] Node 0 active_anon:24824kB inactive_anon:0kB active_file:74036kB inactive_file:161396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99424kB dirty:864kB writeback:0kB shmem:4588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12036kB pagetables:3080kB sec_pagetables:0kB all_unreclaimable? no [ 831.571688][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.610657][T10851] fuse: Bad value for 'fd' [ 831.693286][T10852] loop2: detected capacity change from 0 to 64 [ 831.794710][T10837] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 832.154479][T10837] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.430670][T10837] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 832.498218][T10837] Node 0 DMA32 free:1398212kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26948kB inactive_anon:0kB active_file:74036kB inactive_file:160596kB unevictable:1536kB writepending:884kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21172kB local_pcp:6288kB free_cma:0kB [ 832.591380][T10837] lowmem_reserve[]: 0 0 0 0 0 [ 832.596892][T10837] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.623948][T10837] lowmem_reserve[]: 0 0 0 0 0 [ 832.629193][T10837] Node 1 Normal free:3885068kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:28452kB local_pcp:15680kB free_cma:0kB [ 832.658866][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.665450][T10837] lowmem_reserve[]: 0 0 0 0 0 [ 832.901204][T10837] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 832.982049][T10837] Node 0 DMA32: 7*4kB (ME) 50*8kB (E) 661*16kB (ME) 753*32kB (UME) 335*64kB (UME) 172*128kB (UME) 123*256kB (UME) 76*512kB (UME) 28*1024kB (UM) 17*2048kB (UME) 286*4096kB (M) = 1383900kB [ 833.027396][T10837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 833.044859][T10837] Node 1 Normal: 279*4kB (UME) 62*8kB (UME) 42*16kB (UME) 79*32kB (UME) 17*64kB (UME) 6*128kB (UM) 2*256kB (UM) 2*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3885068kB [ 833.069301][T10837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 833.079627][T10837] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 833.095363][T10837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 833.106870][T10837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 833.116907][T10837] 64577 total pagecache pages [ 833.149061][T10837] 0 pages in swap cache [ 833.161181][T10837] Free swap = 124436kB [ 833.170086][T10837] Total swap = 124996kB [ 833.181739][T10837] 2097051 pages RAM [ 833.190167][T10837] 0 pages HighMem/MovableOnly [ 833.199785][T10837] 416922 pages reserved [ 833.207487][T10837] 0 pages cma reserved [ 834.712432][T10868] fuse: Bad value for 'fd' [ 834.978990][T10873] loop2: detected capacity change from 0 to 1024 [ 834.987526][T10873] EXT4-fs: Ignoring removed oldalloc option [ 834.999551][T10873] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 837.072672][T10879] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1168'. [ 838.431975][T10890] fuse: Bad value for 'fd' [ 839.610840][T10900] trusted_key: syz.0.1172 sent an empty control message without MSG_MORE. [ 840.405233][T10897] bond1: entered promiscuous mode [ 840.423519][T10902] bridge0: port 3(syz_tun) entered blocking state [ 840.442251][T10902] bridge0: port 3(syz_tun) entered disabled state [ 841.116694][T10902] syz_tun: entered promiscuous mode [ 841.205298][T10906] loop0: detected capacity change from 0 to 64 [ 841.816072][T10910] loop0: detected capacity change from 0 to 256 [ 843.266416][T10917] loop2: detected capacity change from 0 to 1024 [ 843.275542][T10917] EXT4-fs: Ignoring removed oldalloc option [ 843.860453][T10917] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 848.889733][T10957] loop1: detected capacity change from 0 to 22 [ 848.899572][T10957] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 851.749863][T10957] romfs: bad initial checksum on dev loop1. [ 851.827373][T10960] loop0: detected capacity change from 0 to 1024 [ 851.838846][T10960] EXT4-fs: Ignoring removed oldalloc option [ 851.854555][T10960] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 853.105815][T10967] loop2: detected capacity change from 0 to 512 [ 853.125236][T10967] EXT4-fs (loop2): Test dummy encryption mode enabled [ 853.385298][T10969] loop1: detected capacity change from 0 to 22 [ 853.394840][T10969] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 853.627064][T10969] romfs: bad initial checksum on dev loop1. [ 853.790248][T10967] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 853.878555][T10967] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.1190: bad orphan inode 131083 [ 853.895687][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop1 [ 853.917012][T10967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.545341][ T5761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.128573][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 862.947250][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 862.947263][ T28] audit: type=1326 audit(1769584412.011:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8cd9aeb9 code=0x0 [ 863.137810][T11024] loop1: detected capacity change from 0 to 22 [ 863.148641][T11024] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 865.316472][T11021] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 865.323167][T11021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 865.330991][T11021] vhci_hcd vhci_hcd.0: Device attached [ 865.336599][T11023] vhci_hcd: connection closed [ 865.432401][T11024] romfs: bad initial checksum on dev loop1. [ 865.791680][ T11] vhci_hcd: stop threads [ 865.877640][ T11] vhci_hcd: release socket [ 865.882130][ T11] vhci_hcd: disconnect device [ 865.901844][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop1 [ 866.165369][ T28] audit: type=1326 audit(1769584415.223:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.2.1205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8cd9aeb9 code=0x0 [ 868.078842][T11044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 868.085526][T11044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 868.093443][T11044] vhci_hcd vhci_hcd.0: Device attached [ 868.093471][T11045] vhci_hcd: connection closed [ 868.100054][ T11] vhci_hcd: stop threads [ 868.202589][ T11] vhci_hcd: release socket [ 868.215578][ T11] vhci_hcd: disconnect device [ 870.367998][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.374518][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.558406][ T28] audit: type=1326 audit(1769584420.626:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeeb39aeb9 code=0x0 [ 871.680885][T11072] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 871.687460][T11072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 871.697383][T11072] vhci_hcd vhci_hcd.0: Device attached [ 872.152488][ T5767] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 872.414957][T11074] vhci_hcd: connection reset by peer [ 872.423329][ T59] vhci_hcd: stop threads [ 872.427790][ T59] vhci_hcd: release socket [ 872.432796][ T59] vhci_hcd: disconnect device [ 873.426230][T11086] loop1: detected capacity change from 0 to 256 [ 875.154707][ T28] audit: type=1326 audit(1769584424.208:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.1222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeeb39aeb9 code=0x0 [ 875.480755][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 876.003418][T11101] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 876.010074][T11101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 876.017938][T11101] vhci_hcd vhci_hcd.0: Device attached [ 876.023850][T11103] vhci_hcd: connection closed [ 876.033056][ T49] vhci_hcd: stop threads [ 876.260243][ T49] vhci_hcd: release socket [ 876.344879][ T49] vhci_hcd: disconnect device [ 877.526686][T11108] loop2: detected capacity change from 0 to 256 [ 877.559667][ T5767] vhci_hcd: vhci_device speed not set [ 879.007782][ T28] audit: type=1326 audit(1769584428.079:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11121 comm="syz.4.1227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 880.053233][T11133] loop2: detected capacity change from 0 to 256 [ 882.490020][T11148] loop0: detected capacity change from 0 to 256 [ 884.051970][T11158] loop2: detected capacity change from 0 to 256 [ 886.181379][ T28] audit: type=1326 audit(1769584435.253:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.4.1243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 886.272842][T11185] loop0: detected capacity change from 0 to 22 [ 886.282542][T11185] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 886.597364][T11185] romfs: bad initial checksum on dev loop0. [ 889.106280][T11188] loop1: detected capacity change from 0 to 22 [ 889.114246][T11188] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 890.268198][T11188] romfs: bad initial checksum on dev loop1. [ 890.428897][T11194] loop2: detected capacity change from 0 to 22 [ 890.438924][T11194] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 890.514085][T11194] romfs: bad initial checksum on dev loop2. [ 890.600746][ T9022] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 890.784819][ T9031] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 891.811601][T11187] loop1: detected capacity change from 0 to 1024 [ 891.818688][T11187] EXT4-fs: Ignoring removed oldalloc option [ 891.826762][T11187] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 891.874500][T11193] loop2: detected capacity change from 0 to 1024 [ 891.881338][T11193] EXT4-fs: Ignoring removed oldalloc option [ 891.913753][T11193] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 892.125795][T11199] loop0: detected capacity change from 0 to 256 [ 892.230222][ T28] audit: type=1326 audit(1769584441.306:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.2.1249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8cd9aeb9 code=0x0 [ 892.340368][ T28] audit: type=1326 audit(1769584441.416:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.4.1248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 893.084185][T11210] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 893.090727][T11210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 893.098437][T11210] vhci_hcd vhci_hcd.0: Device attached [ 893.296644][T11220] overlayfs: failed to resolve './file2': -2 [ 893.986825][T11215] vhci_hcd: connection closed [ 893.987087][ T49] vhci_hcd: stop threads [ 894.015430][ T49] vhci_hcd: release socket [ 894.019991][ T49] vhci_hcd: disconnect device [ 894.024855][ T27] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 894.087584][ T27] usb 37-1: enqueue for inactive port 0 [ 894.629870][ T27] vhci_hcd: vhci_device speed not set [ 895.176611][T11231] overlayfs: failed to resolve './file2': -2 [ 895.409365][T11236] loop2: detected capacity change from 0 to 22 [ 895.419679][T11236] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 896.002984][T11236] romfs: bad initial checksum on dev loop2. [ 897.271943][ T9022] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 897.294476][T11235] loop2: detected capacity change from 0 to 1024 [ 897.301680][T11235] EXT4-fs: Ignoring removed oldalloc option [ 897.333562][ T28] audit: type=1326 audit(1769584446.419:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.4.1256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 897.363160][T11235] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 897.715908][T11246] loop2: detected capacity change from 0 to 22 [ 897.726002][T11246] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 899.357928][T11246] romfs: bad initial checksum on dev loop2. [ 899.380493][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop2 [ 899.434441][T11246] loop2: detected capacity change from 0 to 1024 [ 899.441549][T11246] EXT4-fs: Ignoring removed oldalloc option [ 899.452174][T11246] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 899.840291][T11256] loop0: detected capacity change from 0 to 256 [ 901.411647][ T28] audit: type=1326 audit(1769584450.491:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.0.1263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeeb39aeb9 code=0x0 [ 901.653680][T11272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 901.660328][T11272] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 901.694186][T11272] vhci_hcd vhci_hcd.0: Device attached [ 901.823315][T11279] loop1: detected capacity change from 0 to 22 [ 901.833340][T11279] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 902.808784][T11279] romfs: bad initial checksum on dev loop1. [ 902.846238][T11273] vhci_hcd: connection closed [ 902.912588][T11279] loop1: detected capacity change from 0 to 1024 [ 902.926758][T11279] EXT4-fs: Ignoring removed oldalloc option [ 903.106861][ T1074] vhci_hcd: stop threads [ 903.129642][T11279] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 903.159162][ T1074] vhci_hcd: release socket [ 903.179449][ T1074] vhci_hcd: disconnect device [ 904.028007][T11292] loop0: detected capacity change from 0 to 22 [ 904.038088][T11292] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 904.307860][T11292] romfs: bad initial checksum on dev loop0. [ 904.924204][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop0 [ 905.387492][T11297] loop1: detected capacity change from 0 to 256 [ 906.562928][T11307] overlayfs: failed to resolve './file2': -2 [ 908.396090][T11317] loop1: detected capacity change from 0 to 64 [ 909.723948][ T28] audit: type=1326 audit(1769584458.815:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeeb39aeb9 code=0x0 [ 914.376107][T11336] loop2: detected capacity change from 0 to 256 [ 921.050902][T11379] loop1: detected capacity change from 0 to 64 [ 922.571359][T11380] loop0: detected capacity change from 0 to 256 [ 922.603080][ T28] audit: type=1326 audit(1769584471.671:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.4.1291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 923.185581][ T28] audit: type=1326 audit(1769584472.272:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.1.1294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5249d9aeb9 code=0x0 [ 923.343584][T11392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 923.350160][T11392] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 923.431395][T11392] vhci_hcd vhci_hcd.0: Device attached [ 924.199716][T11393] vhci_hcd: connection closed [ 924.241733][ T6315] vhci_hcd: stop threads [ 924.322103][ T6315] vhci_hcd: release socket [ 924.373206][ T6315] vhci_hcd: disconnect device [ 930.461524][T11411] Set syz1 is full, maxelem 65536 reached [ 930.560526][T11420] loop0: detected capacity change from 0 to 256 [ 931.788599][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.794991][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.968613][T11459] loop1: detected capacity change from 0 to 64 [ 939.823596][T11470] loop1: detected capacity change from 0 to 64 [ 942.153090][T11481] 9pnet_virtio: no channels available for device [ 942.153090][T11481] [ 942.955297][T11484] loop2: detected capacity change from 0 to 256 [ 943.143027][T11489] loop1: detected capacity change from 0 to 256 [ 943.373883][ T9031] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 944.333125][T11496] loop0: detected capacity change from 0 to 256 [ 948.163214][T11516] loop1: detected capacity change from 0 to 256 [ 949.070803][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'. [ 954.047165][T11556] loop0: detected capacity change from 0 to 22 [ 954.054339][T11556] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 954.070000][T11556] romfs: bad initial checksum on dev loop0. [ 954.166180][T11561] loop0: detected capacity change from 0 to 1024 [ 954.173478][T11561] EXT4-fs: Ignoring removed oldalloc option [ 954.299926][T11561] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 957.399762][T11598] loop2: detected capacity change from 0 to 22 [ 957.409828][T11598] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 957.527103][T11598] romfs: bad initial checksum on dev loop2. [ 957.906067][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop2 [ 958.305741][T11614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1353'. [ 958.383999][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'. [ 960.447163][ T28] audit: type=1326 audit(1769584509.560:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.2.1362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8cd9aeb9 code=0x0 [ 961.430840][T11641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 961.437503][T11641] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 961.570146][T11641] vhci_hcd vhci_hcd.0: Device attached [ 961.704646][T11643] vhci_hcd: connection closed [ 961.813264][ T2116] vhci_hcd: stop threads [ 961.849748][ T2116] vhci_hcd: release socket [ 961.857495][ T2116] vhci_hcd: disconnect device [ 962.094902][ T5767] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 962.102598][ T5767] usb 37-1: enqueue for inactive port 0 [ 962.187348][ T5767] vhci_hcd: vhci_device speed not set [ 965.263759][ T28] audit: type=1326 audit(1769584514.373:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.2.1374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8cd9aeb9 code=0x0 [ 967.169207][T11690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 967.175793][T11690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 967.183925][T11690] vhci_hcd vhci_hcd.0: Device attached [ 967.667189][ T967] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 969.360611][T11692] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 969.451498][ T42] vhci_hcd: stop threads [ 969.532482][ T42] vhci_hcd: release socket [ 969.610704][ T42] vhci_hcd: disconnect device [ 969.888724][T11697] loop1: detected capacity change from 0 to 256 [ 970.024519][T11702] loop0: detected capacity change from 0 to 22 [ 970.031610][T11702] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 970.044322][T11702] romfs: bad initial checksum on dev loop0. [ 970.798062][ T9380] udevd[9380]: incorrect romfs checksum on /dev/loop0 [ 973.920566][T11736] 9pnet_virtio: no channels available for device [ 973.920566][T11736] [ 974.561145][ T967] vhci_hcd: vhci_device speed not set [ 974.703225][T11742] loop1: detected capacity change from 0 to 256 [ 976.213673][T11752] loop0: detected capacity change from 0 to 256 [ 976.954124][ T9022] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.829592][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 979.448776][T11775] loop1: detected capacity change from 0 to 64 [ 979.865383][T11780] 9pnet_virtio: no channels available for device [ 979.865383][T11780] [ 980.833845][T11789] loop2: detected capacity change from 0 to 22 [ 980.840743][T11789] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 980.848993][T11789] romfs: bad initial checksum on dev loop2. [ 980.950654][T11791] loop2: detected capacity change from 0 to 1024 [ 980.957480][T11791] EXT4-fs: Ignoring removed oldalloc option [ 980.964065][T11791] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 981.155897][ T28] audit: type=1326 audit(1769584530.271:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.1.1401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5249d9aeb9 code=0x0 [ 981.352478][T11794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 981.359136][T11794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 981.397991][T11794] vhci_hcd vhci_hcd.0: Device attached [ 981.626520][T11795] vhci_hcd: connection closed [ 981.626779][ T12] vhci_hcd: stop threads [ 981.644803][ T12] vhci_hcd: release socket [ 981.649612][ T12] vhci_hcd: disconnect device [ 981.671659][T11803] loop2: detected capacity change from 0 to 256 [ 981.719952][ T5767] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 981.723533][ T9022] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 981.728549][ T5767] usb 35-1: enqueue for inactive port 0 [ 982.598239][ T5767] vhci_hcd: vhci_device speed not set [ 983.966011][T11816] loop1: detected capacity change from 0 to 64 [ 984.116042][T11818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 984.396157][ T28] audit: type=1326 audit(1769584533.512:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.1.1411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5249d9aeb9 code=0x0 [ 984.593363][T11820] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 984.599935][T11820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 984.607746][T11820] vhci_hcd vhci_hcd.0: Device attached [ 984.616841][T11827] 9pnet_virtio: no channels available for device [ 984.616841][T11827] [ 984.896467][ T5767] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 985.094483][T11828] vhci_hcd: connection reset by peer [ 985.103809][ T8824] vhci_hcd: stop threads [ 985.108368][ T8824] vhci_hcd: release socket [ 985.113042][ T8824] vhci_hcd: disconnect device [ 985.183813][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 987.680662][ T28] audit: type=1326 audit(1769584536.804:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.4.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 988.038563][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1419'. [ 988.856814][ T28] audit: type=1326 audit(1769584537.984:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.2.1421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8cd9aeb9 code=0x0 [ 988.878664][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.393356][ T5767] vhci_hcd: vhci_device speed not set [ 990.699509][T11883] loop2: detected capacity change from 0 to 22 [ 990.706372][T11883] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 990.720199][T11883] romfs: bad initial checksum on dev loop2. [ 990.758454][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop2 [ 993.186936][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.193997][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.660383][T11910] loop1: detected capacity change from 0 to 256 [ 994.865194][T11914] loop2: detected capacity change from 0 to 256 [ 994.903761][ T9031] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 996.535443][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1436'. [ 996.771627][ T28] audit: type=1326 audit(1769584545.908:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.4.1437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f242259aeb9 code=0x0 [ 996.805474][T11930] loop1: detected capacity change from 0 to 256 [ 998.831946][T11947] loop0: detected capacity change from 0 to 256 [ 998.964406][ T9022] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1000.303476][T11955] (null): rxe_set_mtu: Set mtu to 256 [ 1000.320364][T11955] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1002.764135][T11974] (null): rxe_set_mtu: Set mtu to 1024 [ 1002.774728][T11974] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1003.520477][T11983] loop0: detected capacity change from 0 to 256 [ 1003.605501][T11984] (null): rxe_set_mtu: Set mtu to 1024 [ 1003.612429][T11984] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1004.222779][T11986] loop1: detected capacity change from 0 to 256 [ 1004.438028][T11988] bond2: entered promiscuous mode [ 1004.516876][ T9022] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.669291][T11988] netlink: 'syz.2.1452': attribute type 10 has an invalid length. [ 1006.701078][T11988] bridge0: port 3(syz_tun) entered blocking state [ 1006.707765][T11988] bridge0: port 3(syz_tun) entered listening state [ 1006.714699][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.721969][T11988] bridge0: port 2(bridge_slave_1) entered listening state [ 1006.729431][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.736662][T11988] bridge0: port 1(bridge_slave_0) entered listening state [ 1006.807175][T11988] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1007.094487][T12004] loop2: detected capacity change from 0 to 22 [ 1007.102112][T12004] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1007.114186][T12004] romfs: bad initial checksum on dev loop2. [ 1007.456330][ T9022] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1007.528473][T12004] loop2: detected capacity change from 0 to 1024 [ 1007.535655][T12004] EXT4-fs: Ignoring removed oldalloc option [ 1007.562772][T12004] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1007.972136][T12009] ip6t_srh: unknown srh invflags 7F00 [ 1008.544251][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1008.775785][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1008.786695][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1008.794134][ C0] bridge0: port 3(syz_tun) entered learning state [ 1010.571323][T12024] (null): rxe_set_mtu: Set mtu to 1024 [ 1010.577256][T12024] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1010.855393][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 1010.862047][ C0] bridge0: topology change detected, propagating [ 1010.868729][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.875943][ C0] bridge0: topology change detected, propagating [ 1010.882384][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.889599][ C0] bridge0: topology change detected, propagating [ 1010.973243][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1462'. [ 1011.014971][T12038] loop2: detected capacity change from 0 to 256 [ 1014.053804][T12051] loop1: detected capacity change from 0 to 256 [ 1015.704204][T12059] (null): rxe_set_mtu: Set mtu to 256 [ 1015.709923][T12059] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1015.725591][T12060] (null): rxe_set_mtu: Set mtu to 1024 [ 1015.731795][T12060] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1017.848124][T12087] (null): rxe_set_mtu: Set mtu to 1024 [ 1017.859702][T12087] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1018.291178][T12092] fuse: Bad value for 'fd' [ 1018.324073][T12095] loop2: detected capacity change from 0 to 64 [ 1018.423623][T12086] loop0: detected capacity change from 0 to 22 [ 1018.440601][T12086] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1018.450006][T12086] romfs: bad initial checksum on dev loop0. [ 1018.540078][ T9031] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1018.596786][T12093] loop0: detected capacity change from 0 to 1024 [ 1018.603659][T12093] EXT4-fs: Ignoring removed oldalloc option [ 1018.617517][T12093] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 1018.839946][T12100] loop1: detected capacity change from 0 to 256 [ 1019.603784][ T9022] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1022.245889][T12117] (null): rxe_set_mtu: Set mtu to 256 [ 1022.262286][T12117] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1023.400414][T12124] loop0: detected capacity change from 0 to 64 [ 1024.534484][T12133] loop0: detected capacity change from 0 to 22 [ 1024.541400][T12133] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1024.548871][T12133] romfs: bad initial checksum on dev loop0. [ 1024.606191][ T9022] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1024.856232][T12138] loop0: detected capacity change from 0 to 1024 [ 1024.863596][T12138] EXT4-fs: Ignoring removed oldalloc option [ 1025.762926][T12138] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 1026.284372][ T9022] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1027.292846][T12151] loop0: detected capacity change from 0 to 256 [ 1027.343392][T12148] 9pnet_virtio: no channels available for device [ 1027.343392][T12148] [ 1029.017551][T12161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1496'. [ 1029.730653][T12169] (null): rxe_set_mtu: Set mtu to 256 [ 1029.737632][T12169] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1030.278376][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1498'. [ 1030.333493][T12171] loop1: detected capacity change from 0 to 256 [ 1031.443960][T12179] ip6t_srh: unknown srh invflags 7F00 [ 1032.936049][T12195] (null): rxe_set_mtu: Set mtu to 1024 [ 1032.943039][T12195] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1033.533567][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1503'. [ 1034.196429][T12207] (null): rxe_set_mtu: Set mtu to 1024 [ 1034.205575][T12207] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1036.381828][T12221] (null): rxe_set_mtu: Set mtu to 1024 [ 1036.388696][T12221] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1036.611995][T12223] ip6t_srh: unknown srh invflags 7F00 [ 1036.978900][T12226] loop2: detected capacity change from 0 to 256 [ 1037.989043][T12234] (null): rxe_set_mtu: Set mtu to 256 [ 1037.994844][T12234] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1039.725022][T12241] bond3: entered promiscuous mode [ 1040.808371][T12241] netlink: 'syz.2.1516': attribute type 10 has an invalid length. [ 1040.816797][T12241] bridge0: port 3(syz_tun) entered disabled state [ 1040.823505][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.830863][T12241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.975687][T12254] (null): rxe_set_mtu: Set mtu to 1024 [ 1041.981578][T12254] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1042.672143][T12260] (null): rxe_set_mtu: Set mtu to 1024 [ 1042.679011][T12260] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1044.090471][T12272] ip6t_srh: unknown srh invflags 7F00 [ 1044.545241][T12275] (null): rxe_set_mtu: Set mtu to 1024 [ 1044.551406][T12275] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1045.660678][T12286] loop1: detected capacity change from 0 to 256 [ 1047.146372][T12288] (null): rxe_set_mtu: Set mtu to 1024 [ 1047.152274][T12288] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1047.891523][T12307] trusted_key: encrypted_key: insufficient parameters specified [ 1048.292409][T12199] Set syz1 is full, maxelem 65536 reached [ 1048.657300][T12312] ip6t_srh: unknown srh invflags 7F00 [ 1050.208436][T10742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1050.243473][T10742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1050.256197][T10742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1050.283944][T10742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1050.303529][T10742] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1050.377182][T12327] trusted_key: encrypted_key: insufficient parameters specified [ 1050.395108][T10742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1051.609464][T12334] trusted_key: encrypted_key: insufficient parameters specified [ 1052.647168][T12322] chnl_net:caif_netlink_parms(): no params data found [ 1052.772792][T12322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.821257][T12322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.848335][ T5766] Bluetooth: hci4: command tx timeout [ 1053.051510][T12322] bridge_slave_0: entered allmulticast mode [ 1053.142170][T12322] bridge_slave_0: entered promiscuous mode [ 1053.344509][T12322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.364115][T12322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.371420][T12322] bridge_slave_1: entered allmulticast mode [ 1053.403748][T12322] bridge_slave_1: entered promiscuous mode [ 1053.521268][T12322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.589647][T12322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.705468][T12322] team0: Port device team_slave_0 added [ 1053.774979][T12322] team0: Port device team_slave_1 added [ 1053.814209][T12322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.821454][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.847339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.901256][T12361] ip6t_srh: unknown srh invflags 7F00 [ 1054.516870][T12322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.563354][T12322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.570347][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.601439][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.601614][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.759600][T12363] loop2: detected capacity change from 0 to 32768 [ 1054.773465][T12322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.795999][T12363] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1054.910932][ T5766] Bluetooth: hci4: command tx timeout [ 1055.691941][T12322] hsr_slave_0: entered promiscuous mode [ 1055.832097][T12368] trusted_key: encrypted_key: insufficient parameters specified [ 1055.891432][ T9022] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1056.438293][T12322] hsr_slave_1: entered promiscuous mode [ 1056.532294][T12322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.540608][T12322] Cannot create hsr debugfs directory [ 1056.614661][T12355] loop1: detected capacity change from 0 to 32768 [ 1056.922904][T12376] trusted_key: encrypted_key: insufficient parameters specified [ 1057.070297][ T5766] Bluetooth: hci4: command tx timeout [ 1057.817678][T12374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 1058.022307][T12322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1058.029054][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1550'. [ 1058.064933][T12322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1058.082761][T12322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1058.165088][T12322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1058.452137][T12322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.148983][ T5766] Bluetooth: hci4: command tx timeout [ 1059.238440][T12322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.308147][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.315299][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.349737][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.358223][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.405501][T12322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1059.436409][T12322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.730959][T12322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.964253][T12322] veth0_vlan: entered promiscuous mode [ 1059.975306][T12322] veth1_vlan: entered promiscuous mode [ 1060.008791][T12322] veth0_macvtap: entered promiscuous mode [ 1060.024399][T12322] veth1_macvtap: entered promiscuous mode [ 1060.046890][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.057824][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.071917][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.082708][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.095569][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.127466][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.150122][T12322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.174929][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.185988][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.206961][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.218295][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.228642][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.240877][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.252480][T12322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.334499][T12322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.401759][T12322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.420777][T12322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.439254][T12322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.482319][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.530448][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.627423][ T2116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.650111][T12420] loop1: detected capacity change from 0 to 256 [ 1061.679857][ T2116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.877787][T12429] trusted_key: encrypted_key: insufficient parameters specified [ 1063.769959][T12435] trusted_key: encrypted_key: insufficient parameters specified [ 1064.622855][ T28] audit: type=1326 audit(1769584613.772:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5249d9aeb9 code=0x0 [ 1065.124406][T12438] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1065.131063][T12438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1065.138820][T12438] vhci_hcd vhci_hcd.0: Device attached [ 1065.214492][T12451] (null): rxe_set_mtu: Set mtu to 1024 [ 1065.221436][T12451] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1066.228089][T12449] vhci_hcd: connection closed [ 1066.232760][ T12] vhci_hcd: stop threads [ 1066.242362][ T12] vhci_hcd: release socket [ 1066.249745][ T12] vhci_hcd: disconnect device [ 1066.281222][ T5853] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 1066.305362][ T5853] usb 35-1: enqueue for inactive port 0 [ 1066.385247][ T5853] vhci_hcd: vhci_device speed not set [ 1067.704736][T12474] trusted_key: encrypted_key: insufficient parameters specified [ 1068.559419][T12476] loop5: detected capacity change from 0 to 32768 [ 1068.632165][T12476] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1068.642396][T12476] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1068.651174][T12476] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1068.659288][T12476] BTRFS info (device loop5): enabling auto defrag [ 1068.666065][T12476] BTRFS info (device loop5): max_inline at 0 [ 1068.672068][T12476] BTRFS info (device loop5): using free space tree [ 1068.724840][T12476] BTRFS info (device loop5): auto enabling async discard [ 1069.842237][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1070.373583][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (9022) [ 1071.747967][T12520] loop2: detected capacity change from 0 to 22 [ 1071.791365][T12522] trusted_key: encrypted_key: insufficient parameters specified [ 1072.635358][T12520] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1072.658875][ T9031] udevd[9031]: incorrect romfs checksum on /dev/loop2 [ 1072.686218][T12520] romfs: bad initial checksum on dev loop2. [ 1072.880660][T12527] trusted_key: encrypted_key: insufficient parameters specified [ 1073.783022][T12525] loop2: detected capacity change from 0 to 1024 [ 1073.816004][T12525] EXT4-fs: Ignoring removed oldalloc option [ 1073.850252][T12525] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1074.015316][T12531] loop5: detected capacity change from 0 to 32768 [ 1074.037727][T12531] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1074.047955][T12531] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1074.056718][T12531] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1074.064826][T12531] BTRFS info (device loop5): enabling auto defrag [ 1074.071377][T12531] BTRFS info (device loop5): max_inline at 0 [ 1074.077363][T12531] BTRFS info (device loop5): using free space tree [ 1074.345927][T12531] BTRFS info (device loop5): auto enabling async discard [ 1075.263237][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1075.878572][T12560] (null): rxe_set_mtu: Set mtu to 1024 [ 1075.885541][T12560] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1076.744980][T12563] loop5: detected capacity change from 0 to 32768 [ 1076.764685][T12563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1585 (12563) [ 1076.811944][T12563] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1076.822152][T12563] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1076.830963][T12563] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1076.839026][T12563] BTRFS info (device loop5): enabling auto defrag [ 1076.845677][T12563] BTRFS info (device loop5): max_inline at 0 [ 1076.851707][T12563] BTRFS info (device loop5): using free space tree [ 1077.009972][T12563] BTRFS info (device loop5): auto enabling async discard [ 1077.105735][T12584] trusted_key: encrypted_key: insufficient parameters specified [ 1078.915662][T12592] trusted_key: encrypted_key: insufficient parameters specified [ 1079.504903][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1079.840766][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1591'. [ 1079.907394][T12605] (null): rxe_set_mtu: Set mtu to 1024 [ 1079.914268][T12605] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1082.278888][T12621] loop1: detected capacity change from 0 to 32768 [ 1082.302488][T12621] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1596 (12621) [ 1082.320024][T12621] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1082.330206][T12621] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1082.339025][T12621] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1082.347231][T12621] BTRFS info (device loop1): enabling auto defrag [ 1082.353677][T12621] BTRFS info (device loop1): max_inline at 0 [ 1082.359689][T12621] BTRFS info (device loop1): using free space tree [ 1082.426543][T12621] BTRFS info (device loop1): auto enabling async discard [ 1083.718368][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1083.905698][T12645] loop5: detected capacity change from 0 to 32768 [ 1083.927319][T12645] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1599 (12645) [ 1084.265228][T12650] trusted_key: encrypted_key: insufficient parameters specified [ 1085.056595][ T9031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (9031) [ 1085.237908][T12660] trusted_key: encrypted_key: insufficient parameters specified [ 1088.354430][T12679] trusted_key: encrypted_key: insufficient parameters specified [ 1089.451695][T12682] trusted_key: encrypted_key: insufficient parameters specified [ 1090.183510][T12693] (null): rxe_set_mtu: Set mtu to 256 [ 1090.190271][T12693] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1091.048401][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 1091.493849][T12706] (null): rxe_set_mtu: Set mtu to 1024 [ 1091.500662][T12706] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1092.229897][T12714] trusted_key: encrypted_key: insufficient parameters specified [ 1092.793355][ T28] audit: type=1326 audit(1769584641.976:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.1.1616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5249d9aeb9 code=0x0 [ 1093.672091][T12724] trusted_key: encrypted_key: insufficient parameters specified [ 1093.884597][T12727] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1093.891253][T12727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1093.923296][T12727] vhci_hcd vhci_hcd.0: Device attached [ 1094.857821][T12733] loop5: detected capacity change from 0 to 32768 [ 1094.881223][T12728] vhci_hcd: connection closed [ 1095.073569][ T8180] usb 35-1: new high-speed USB device number 7 using vhci_hcd [ 1095.100408][ T49] vhci_hcd: stop threads [ 1095.108060][T12733] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1095.118423][T12733] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1095.127179][T12733] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1095.135361][T12733] BTRFS info (device loop5): enabling auto defrag [ 1095.141847][T12733] BTRFS info (device loop5): max_inline at 0 [ 1095.147818][T12733] BTRFS info (device loop5): using free space tree [ 1095.179558][ T49] vhci_hcd: release socket [ 1095.209949][T12733] BTRFS info (device loop5): auto enabling async discard [ 1095.230714][ T49] vhci_hcd: disconnect device [ 1095.986540][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1096.072976][T12751] bond3: entered promiscuous mode [ 1096.205791][T12763] trusted_key: encrypted_key: insufficient parameters specified [ 1097.983475][T12768] (null): rxe_set_mtu: Set mtu to 256 [ 1097.990383][T12768] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1099.120244][T12775] (null): rxe_set_mtu: Set mtu to 256 [ 1099.127026][T12775] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1100.564766][ T8180] vhci_hcd: vhci_device speed not set [ 1100.821096][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1628'. [ 1101.013045][T12797] loop5: detected capacity change from 0 to 32768 [ 1101.054138][T12797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1629 (12797) [ 1101.081968][T12797] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1101.092166][T12797] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1101.100916][T12797] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1101.109031][T12797] BTRFS info (device loop5): enabling auto defrag [ 1101.115466][T12797] BTRFS info (device loop5): max_inline at 0 [ 1101.121477][T12797] BTRFS info (device loop5): using free space tree [ 1101.877479][T12797] BTRFS info (device loop5): auto enabling async discard [ 1103.084487][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1103.158395][T12827] trusted_key: encrypted_key: insufficient parameters specified [ 1106.824121][T12847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1637'. [ 1106.963721][T12831] loop2: detected capacity change from 0 to 32768 [ 1107.649332][T12851] (null): rxe_set_mtu: Set mtu to 1024 [ 1107.655233][T12851] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1107.749878][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (9022) [ 1108.102072][T12863] (null): rxe_set_mtu: Set mtu to 1024 [ 1108.108952][T12863] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1109.492646][T12874] (null): rxe_set_mtu: Set mtu to 1024 [ 1109.498522][T12874] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1110.225743][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1645'. [ 1110.952949][T12885] loop2: detected capacity change from 0 to 1024 [ 1110.968767][T12885] hfsplus: unable to parse mount options [ 1111.939243][T12895] (null): rxe_set_mtu: Set mtu to 1024 [ 1111.946171][T12895] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1112.833920][T12897] loop5: detected capacity change from 0 to 32768 [ 1112.998828][T12899] loop2: detected capacity change from 0 to 32768 [ 1113.013949][T12897] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1113.014118][T12899] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1650 (12899) [ 1113.036464][T12897] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1113.045535][T12897] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1113.053727][T12897] BTRFS info (device loop5): enabling auto defrag [ 1113.060191][T12897] BTRFS info (device loop5): max_inline at 0 [ 1113.066288][T12897] BTRFS info (device loop5): using free space tree [ 1113.237227][ T9031] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1113.309500][T12897] BTRFS info (device loop5): auto enabling async discard [ 1113.562348][T12918] loop2: detected capacity change from 0 to 1024 [ 1113.572268][T12918] hfsplus: unable to parse mount options [ 1114.791757][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1115.225539][T12925] loop5: detected capacity change from 0 to 32768 [ 1115.281265][T12925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1653 (12925) [ 1115.327963][T12925] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1115.338303][T12925] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1115.347192][T12925] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1115.355499][T12925] BTRFS info (device loop5): enabling auto defrag [ 1115.362437][T12925] BTRFS info (device loop5): max_inline at 0 [ 1115.368416][T12925] BTRFS info (device loop5): using free space tree [ 1115.452880][T12925] BTRFS info (device loop5): auto enabling async discard [ 1116.017156][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.035821][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.355624][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1117.798460][T12958] trusted_key: encrypted_key: insufficient parameters specified [ 1119.229910][T12956] loop1: detected capacity change from 0 to 32768 [ 1119.246945][T12956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1659 (12956) [ 1119.315872][T12956] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1119.339432][T12956] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1119.359301][T12956] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1119.381153][T12956] BTRFS info (device loop1): enabling auto defrag [ 1119.393481][T12956] BTRFS info (device loop1): max_inline at 0 [ 1119.401680][T12956] BTRFS info (device loop1): using free space tree [ 1119.449383][T12956] BTRFS info (device loop1): auto enabling async discard [ 1120.161531][T12986] loop5: detected capacity change from 0 to 32768 [ 1120.190243][T12986] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1662 (12986) [ 1120.554920][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1122.474134][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (9022) [ 1122.861155][T13004] loop1: detected capacity change from 0 to 32768 [ 1122.915665][T13004] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1122.925906][T13004] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1122.934698][T13004] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1122.942800][T13004] BTRFS info (device loop1): enabling auto defrag [ 1122.949293][T13004] BTRFS info (device loop1): max_inline at 0 [ 1122.955385][T13004] BTRFS info (device loop1): using free space tree [ 1123.095488][T13004] BTRFS info (device loop1): auto enabling async discard [ 1124.033390][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1124.175120][T13027] trusted_key: encrypted_key: insufficient parameters specified [ 1125.257435][T13035] loop1: detected capacity change from 0 to 22 [ 1125.267569][T13035] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1125.393848][T13035] romfs: bad initial checksum on dev loop1. [ 1125.565981][T13038] loop1: detected capacity change from 0 to 1024 [ 1125.575031][T13038] EXT4-fs: Ignoring removed oldalloc option [ 1125.638558][T13038] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 1127.769933][T13044] loop1: detected capacity change from 0 to 32768 [ 1127.782832][T13044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1676 (13044) [ 1127.798597][T13044] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1127.809013][T13044] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1127.817816][T13044] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1127.825974][T13044] BTRFS info (device loop1): enabling auto defrag [ 1127.832580][T13044] BTRFS info (device loop1): max_inline at 0 [ 1127.838826][T13044] BTRFS info (device loop1): using free space tree [ 1128.195605][T13044] BTRFS info (device loop1): auto enabling async discard [ 1129.499419][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1129.642301][T13074] (null): rxe_set_mtu: Set mtu to 1024 [ 1129.648283][T13074] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1132.260774][T13097] trusted_key: encrypted_key: insufficient parameters specified [ 1134.453009][T13110] trusted_key: encrypted_key: insufficient parameters specified [ 1135.686090][T13115] loop5: detected capacity change from 0 to 32768 [ 1135.709706][T13115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1690 (13115) [ 1135.733766][T13115] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1135.744361][T13115] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1135.753463][T13115] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1135.761959][T13115] BTRFS info (device loop5): enabling auto defrag [ 1135.768489][T13115] BTRFS info (device loop5): max_inline at 0 [ 1135.774868][T13115] BTRFS info (device loop5): using free space tree [ 1135.879250][T13115] BTRFS info (device loop5): auto enabling async discard [ 1136.980867][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1139.403640][T13166] loop5: detected capacity change from 0 to 32768 [ 1139.490466][T13166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1702 (13166) [ 1140.163725][T13166] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1140.174349][T13166] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1140.183327][T13166] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1140.191591][T13166] BTRFS info (device loop5): enabling auto defrag [ 1140.198104][T13166] BTRFS info (device loop5): max_inline at 0 [ 1140.204296][T13166] BTRFS info (device loop5): using free space tree [ 1140.788190][T13166] BTRFS info (device loop5): auto enabling async discard [ 1143.073487][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1143.912329][T13206] loop1: detected capacity change from 0 to 32768 [ 1143.925171][T13206] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1708 (13206) [ 1144.678371][T13214] (null): rxe_set_mtu: Set mtu to 1024 [ 1144.687272][T13214] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1145.160709][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (9022) [ 1146.588193][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1705'. [ 1149.300238][T13251] (null): rxe_set_mtu: Set mtu to 1024 [ 1149.306214][T13251] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1149.629173][T13259] trusted_key: encrypted_key: insufficient parameters specified [ 1150.907556][T13278] 9pnet_virtio: no channels available for device [ 1150.907556][T13278] [ 1152.588311][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1728'. [ 1155.218810][T13309] loop2: detected capacity change from 0 to 32768 [ 1155.231487][T13309] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1155.441107][T13313] loop2: detected capacity change from 0 to 1024 [ 1155.450741][T13313] hfsplus: unable to parse mount options [ 1155.713361][T13319] trusted_key: encrypted_key: insufficient parameters specified [ 1157.417943][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 1158.640962][T13336] ip6t_srh: unknown srh invflags 7F00 [ 1159.094475][T13352] (null): rxe_set_mtu: Set mtu to 1024 [ 1159.101556][T13352] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1162.364850][T13374] loop5: detected capacity change from 0 to 32768 [ 1162.401673][T13374] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1162.412071][T13374] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1162.420955][T13374] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1162.429116][T13374] BTRFS info (device loop5): enabling auto defrag [ 1162.435607][T13374] BTRFS info (device loop5): max_inline at 0 [ 1162.441685][T13374] BTRFS info (device loop5): using free space tree [ 1162.559474][T13374] BTRFS info (device loop5): auto enabling async discard [ 1163.129215][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1164.103859][T13408] (null): rxe_set_mtu: Set mtu to 1024 [ 1164.110884][T13408] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1168.371644][T13447] loop2: detected capacity change from 0 to 32768 [ 1168.533340][T13448] loop5: detected capacity change from 0 to 32768 [ 1168.548370][T13447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1767 (13447) [ 1168.566310][T13448] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1766 (13448) [ 1168.577487][T13447] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1168.587734][T13447] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1168.596480][T13447] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1168.604702][T13447] BTRFS info (device loop2): enabling auto defrag [ 1168.611208][T13447] BTRFS info (device loop2): max_inline at 0 [ 1168.617328][T13447] BTRFS info (device loop2): using free space tree [ 1168.646712][T13447] BTRFS info (device loop2): auto enabling async discard [ 1168.746079][ T9031] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1169.930600][T13471] loop5: detected capacity change from 0 to 1024 [ 1169.938832][T13471] hfsplus: unable to parse mount options [ 1170.530355][ T5761] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1170.786329][T13476] loop1: detected capacity change from 0 to 32768 [ 1170.799299][T13476] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1770 (13476) [ 1170.938871][ T9380] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1171.123099][T13482] loop1: detected capacity change from 0 to 1024 [ 1171.132888][T13482] hfsplus: unable to parse mount options [ 1172.066466][T13486] 9pnet_virtio: no channels available for device [ 1172.066466][T13486] [ 1174.175472][T13502] (null): rxe_set_mtu: Set mtu to 1024 [ 1174.182488][T13502] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1174.701086][T13493] Bluetooth: hci4: command 0x0406 tx timeout [ 1175.287399][T13510] ip6t_srh: unknown srh invflags 7F00 [ 1175.806973][T13516] trusted_key: encrypted_key: insufficient parameters specified [ 1176.582557][T13522] loop2: detected capacity change from 0 to 22 [ 1176.589750][T13522] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1176.779388][T13522] romfs: bad initial checksum on dev loop2. [ 1176.936365][T13521] loop5: detected capacity change from 0 to 32768 [ 1176.951937][T13521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1783 (13521) [ 1176.983399][ T9031] udevd[9031]: incorrect romfs checksum on /dev/loop2 [ 1177.042255][T13521] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1177.053596][T13521] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1177.062544][T13521] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1177.070804][T13521] BTRFS info (device loop5): enabling auto defrag [ 1177.077412][T13521] BTRFS info (device loop5): max_inline at 0 [ 1177.083474][T13521] BTRFS info (device loop5): using free space tree [ 1177.185758][T13521] BTRFS info (device loop5): auto enabling async discard [ 1177.831684][T13544] trusted_key: encrypted_key: insufficient parameters specified [ 1177.954511][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.961019][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.096016][T13545] loop1: detected capacity change from 0 to 1024 [ 1178.106256][T13545] hfsplus: unable to parse mount options [ 1179.172178][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1181.401999][ T9031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (9031) [ 1181.789598][T13573] trusted_key: encrypted_key: insufficient parameters specified [ 1181.813899][T13568] (null): rxe_set_mtu: Set mtu to 1024 [ 1181.819776][T13568] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1183.756625][T13591] loop2: detected capacity change from 0 to 22 [ 1183.763990][T13591] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1183.838424][T13593] trusted_key: encrypted_key: insufficient parameters specified [ 1184.684578][T13591] romfs: bad initial checksum on dev loop2. [ 1184.835475][ T9022] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1184.909081][T13591] loop2: detected capacity change from 0 to 1024 [ 1184.916114][T13591] EXT4-fs: Ignoring removed oldalloc option [ 1184.971532][T13591] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1186.560646][T13620] (null): rxe_set_mtu: Set mtu to 256 [ 1186.567499][T13620] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1188.073059][T13638] loop1: detected capacity change from 0 to 22 [ 1188.080213][T13638] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1188.090936][T13638] romfs: bad initial checksum on dev loop1. [ 1188.212342][T13640] loop1: detected capacity change from 0 to 1024 [ 1188.215060][ T9022] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1188.219586][T13640] EXT4-fs: Ignoring removed oldalloc option [ 1188.243037][T13640] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 1189.026762][T13649] loop1: detected capacity change from 0 to 32768 [ 1189.041441][T13649] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1189.209854][ T9022] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1189.476893][T13652] loop5: detected capacity change from 0 to 32768 [ 1189.571087][T13656] (null): rxe_set_mtu: Set mtu to 256 [ 1189.577838][T13656] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1190.175994][T13652] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1190.187453][T13652] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1190.196462][T13652] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1190.205047][T13652] BTRFS info (device loop5): enabling auto defrag [ 1190.211672][T13652] BTRFS info (device loop5): max_inline at 0 [ 1190.217763][T13652] BTRFS info (device loop5): using free space tree [ 1190.366610][T13652] BTRFS info (device loop5): auto enabling async discard [ 1190.918114][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1192.608639][T13713] (null): rxe_set_mtu: Set mtu to 1024 [ 1192.615438][T13713] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1193.585365][T13721] loop2: detected capacity change from 0 to 32768 [ 1193.598380][T13721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1828 (13721) [ 1193.644662][T13721] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1193.655177][T13721] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1193.663938][T13721] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1193.672114][T13721] BTRFS info (device loop2): enabling auto defrag [ 1193.678661][T13721] BTRFS info (device loop2): max_inline at 0 [ 1193.684971][T13721] BTRFS info (device loop2): using free space tree [ 1193.773970][T13721] BTRFS info (device loop2): auto enabling async discard [ 1194.140063][T13742] fuse: Bad value for 'user_id' [ 1194.331731][ T5761] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1194.629759][T13749] ip6t_srh: unknown srh invflags 7F00 [ 1196.926746][T13771] trusted_key: encrypted_key: insufficient parameters specified [ 1197.878953][T13780] bond4: entered promiscuous mode [ 1197.918065][T13785] ip6t_srh: unknown srh invflags 7F00 [ 1198.158513][T13789] loop5: detected capacity change from 0 to 32768 [ 1198.170993][T13789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1843 (13789) [ 1198.200762][T13789] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1198.211057][T13789] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1198.219899][T13789] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1198.228058][T13789] BTRFS info (device loop5): enabling auto defrag [ 1198.234596][T13789] BTRFS info (device loop5): max_inline at 0 [ 1198.240660][T13789] BTRFS info (device loop5): using free space tree [ 1198.280647][T13790] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 1198.333849][T13789] BTRFS info (device loop5): auto enabling async discard [ 1199.824165][T13818] loop2: detected capacity change from 0 to 22 [ 1199.831869][T13818] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1199.995873][T13818] romfs: bad initial checksum on dev loop2. [ 1200.005897][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1200.099717][T13817] loop2: detected capacity change from 0 to 1024 [ 1200.107622][T13817] EXT4-fs: Ignoring removed oldalloc option [ 1200.128499][T13817] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1200.214583][ T9031] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1200.227704][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (9022) [ 1201.903169][T13822] loop5: detected capacity change from 0 to 32768 [ 1201.990806][T13822] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1202.019607][T13822] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1202.064661][T13822] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1202.093345][T13822] BTRFS info (device loop5): enabling auto defrag [ 1202.113430][T13822] BTRFS info (device loop5): max_inline at 0 [ 1202.131260][T13822] BTRFS info (device loop5): using free space tree [ 1202.157840][T13836] trusted_key: encrypted_key: insufficient parameters specified [ 1202.261385][T13822] BTRFS info (device loop5): auto enabling async discard [ 1202.585881][T13857] ip6t_srh: unknown srh invflags 7F00 [ 1203.538575][T13863] 9pnet_virtio: no channels available for device [ 1203.538575][T13863] [ 1203.571214][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1203.996520][T13870] trusted_key: encrypted_key: insufficient parameters specified [ 1205.070092][T13879] trusted_key: encrypted_key: insufficient parameters specified [ 1207.359775][T13898] ip6t_srh: unknown srh invflags 7F00 [ 1208.116068][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1208.290219][T13904] 9pnet_virtio: no channels available for device [ 1208.290219][T13904] [ 1208.368852][T13907] loop2: detected capacity change from 0 to 22 [ 1208.376387][T13907] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1208.389287][T13907] romfs: bad initial checksum on dev loop2. [ 1208.413577][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop2 [ 1208.457757][T13908] loop2: detected capacity change from 0 to 1024 [ 1208.464742][T13908] EXT4-fs: Ignoring removed oldalloc option [ 1208.471388][T13908] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1211.336989][T13917] sctp: failed to load transform for md5: -2 [ 1211.404080][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1867'. [ 1211.831290][T13929] loop1: detected capacity change from 0 to 32768 [ 1211.852040][T13929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1871 (13929) [ 1211.868463][T13929] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1211.878841][T13929] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1211.887632][T13929] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1211.895826][T13929] BTRFS info (device loop1): enabling auto defrag [ 1211.902341][T13929] BTRFS info (device loop1): max_inline at 0 [ 1211.908357][T13929] BTRFS info (device loop1): using free space tree [ 1211.987844][T13929] BTRFS info (device loop1): auto enabling async discard [ 1212.563258][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1213.094542][T13962] (null): rxe_set_mtu: Set mtu to 1024 [ 1213.101418][T13962] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1213.736954][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (9022) [ 1214.106798][T13971] ip6t_srh: unknown srh invflags 7F00 [ 1218.484900][T14004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1879'. [ 1218.569892][T14006] loop5: detected capacity change from 0 to 22 [ 1218.580120][T14006] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1218.903660][T14006] romfs: bad initial checksum on dev loop5. [ 1219.116922][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop5 [ 1223.739239][T14025] (null): rxe_set_mtu: Set mtu to 1024 [ 1223.746074][T14025] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1224.678980][T14029] trusted_key: encrypted_key: insufficient parameters specified [ 1225.620857][T14034] loop2: detected capacity change from 0 to 22 [ 1225.628629][T14034] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1225.698891][T14036] trusted_key: encrypted_key: insufficient parameters specified [ 1226.375656][T14034] romfs: bad initial checksum on dev loop2. [ 1226.484282][ T9031] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1226.553966][T14040] loop2: detected capacity change from 0 to 1024 [ 1226.561193][T14040] EXT4-fs: Ignoring removed oldalloc option [ 1226.568907][T14040] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1226.834662][T14048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1229.972166][T14073] (null): rxe_set_mtu: Set mtu to 1024 [ 1229.981129][T14073] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1230.826522][T14077] loop2: detected capacity change from 0 to 32768 [ 1230.840995][T14077] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1231.074090][T14082] trusted_key: encrypted_key: insufficient parameters specified [ 1231.909139][T14083] loop2: detected capacity change from 0 to 1024 [ 1231.954844][T14086] loop1: detected capacity change from 0 to 22 [ 1231.961743][T14086] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1231.983080][T14083] hfsplus: unable to parse mount options [ 1231.993635][T14086] romfs: bad initial checksum on dev loop1. [ 1232.048931][ T9022] udevd[9022]: incorrect romfs checksum on /dev/loop1 [ 1232.311569][T14090] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1903'. [ 1234.014748][T14105] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1906'. [ 1235.337250][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 1235.380328][T14113] gtp0: entered promiscuous mode [ 1235.385495][T14113] gtp0: entered allmulticast mode [ 1238.825033][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.831630][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.780984][T14131] trusted_key: encrypted_key: insufficient parameters specified [ 1241.433274][T14140] 9pnet_virtio: no channels available for device [ 1246.926374][T14157] loop5: detected capacity change from 0 to 22 [ 1246.936088][T14157] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1246.950763][T14157] romfs: bad initial checksum on dev loop5. [ 1248.802237][ T9022] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1248.852939][T14159] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1919'. [ 1249.149863][T14157] loop5: detected capacity change from 0 to 1024 [ 1249.157173][T14157] EXT4-fs: Ignoring removed oldalloc option [ 1249.204857][T14157] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 1251.080118][T14168] loop1: detected capacity change from 0 to 32768 [ 1251.102572][T14168] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1251.112840][T14168] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1251.121538][T14168] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1251.129675][T14168] BTRFS info (device loop1): enabling auto defrag [ 1251.136173][T14168] BTRFS info (device loop1): max_inline at 0 [ 1251.142200][T14168] BTRFS info (device loop1): using free space tree [ 1251.517505][T14185] 9pnet_virtio: no channels available for device [ 1252.014847][T14168] BTRFS info (device loop1): auto enabling async discard [ 1254.703407][ T5763] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1256.459934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.177453][T14213] loop2: detected capacity change from 0 to 22 [ 1257.187149][T14213] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1258.383311][T14213] romfs: bad initial checksum on dev loop2. [ 1258.435928][ T9022] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1258.508172][T14213] loop2: detected capacity change from 0 to 1024 [ 1258.515303][T14213] EXT4-fs: Ignoring removed oldalloc option [ 1258.529909][T14213] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1258.607850][T14216] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1933'. [ 1260.484050][T14228] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1936'. [ 1260.821934][T14230] trusted_key: encrypted_key: insufficient parameters specified [ 1262.827520][T14240] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1945'. [ 1264.406455][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1265.049631][T14251] loop5: detected capacity change from 0 to 32768 [ 1265.068403][T14251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1940 (14251) [ 1265.084969][T14251] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1265.095284][T14251] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1265.104087][T14251] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1265.112655][T14251] BTRFS info (device loop5): enabling auto defrag [ 1265.119320][T14251] BTRFS info (device loop5): max_inline at 0 [ 1265.125349][T14251] BTRFS info (device loop5): using free space tree [ 1265.258380][T14251] BTRFS info (device loop5): auto enabling async discard [ 1265.349021][T14270] trusted_key: encrypted_key: insufficient parameters specified [ 1268.744340][T12322] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1269.401547][T14292] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1948'. [ 1269.537913][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1275.334389][T14328] trusted_key: encrypted_key: insufficient parameters specified [ 1276.349324][T14332] loop2: detected capacity change from 0 to 32768 [ 1276.374142][T14332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1957 (14332) [ 1276.393292][T14332] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1276.403542][T14332] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1276.412278][T14332] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1276.420407][T14332] BTRFS info (device loop2): enabling auto defrag [ 1276.426884][T14332] BTRFS info (device loop2): max_inline at 0 [ 1276.432916][T14332] BTRFS info (device loop2): using free space tree [ 1277.819418][T14332] BTRFS info (device loop2): auto enabling async discard [ 1278.035424][T14356] trusted_key: encrypted_key: insufficient parameters specified [ 1278.527808][ T5761] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1278.633266][T14361] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1960'. [ 1279.152682][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (9022) [ 1281.032077][T14381] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1964'. [ 1281.309163][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de5d000: rx timeout, send abort [ 1281.321049][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e438000: rx timeout, send abort [ 1281.819508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de5d000: abort rx timeout. Force session deactivation [ 1281.834763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e438000: abort rx timeout. Force session deactivation [ 1282.424627][T14394] (null): rxe_set_mtu: Set mtu to 1024 [ 1282.431556][T14394] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1283.122398][T14401] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1970'. [ 1283.607698][T14410] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1971'. [ 1286.991819][T14430] overlayfs: missing 'lowerdir' [ 1288.295362][T14436] (null): rxe_set_mtu: Set mtu to 1024 [ 1288.301160][T14436] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1288.316282][T14438] trusted_key: encrypted_key: insufficient parameters specified [ 1291.487367][T14453] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1974'. [ 1294.005294][T14465] trusted_key: encrypted_key: insufficient parameters specified [ 1294.905033][T14470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1987'. [ 1295.064942][T14472] fuse: Bad value for 'fd' [ 1295.745667][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1985'. [ 1295.779649][T14478] gtp0: entered promiscuous mode [ 1295.784737][T14478] gtp0: entered allmulticast mode [ 1298.023695][T14486] (null): rxe_set_mtu: Set mtu to 1024 [ 1298.029587][T14486] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1300.845653][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.852461][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.565621][T14528] (null): rxe_set_mtu: Set mtu to 1024 [ 1304.571603][T14528] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1306.542494][T14541] (null): rxe_set_mtu: Set mtu to 1024 [ 1306.548783][T14541] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1309.354700][T14559] trusted_key: encrypted_key: insufficient parameters specified [ 1310.543810][T14573] (null): rxe_set_mtu: Set mtu to 1024 [ 1310.549544][T14573] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1310.776391][T14575] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2014'. [ 1311.536768][ C1] vcan0: j1939_tp_txtimer: 0xffff888075c5f800: tx aborted with unknown reason: -2 [ 1311.985743][T14588] loop1: detected capacity change from 0 to 32768 [ 1312.018715][T14588] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1312.045822][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075c5f800: abort rx timeout. Force session deactivation [ 1312.329869][ T9022] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1312.447013][T14593] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2018'. [ 1312.718412][T14595] loop1: detected capacity change from 0 to 1024 [ 1312.786122][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075c5e000: rx timeout, send abort [ 1312.864588][T14595] hfsplus: unable to parse mount options [ 1312.931291][ T9022] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1313.294185][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075c5e000: abort rx timeout. Force session deactivation [ 1313.374745][T14604] loop1: detected capacity change from 0 to 32768 [ 1313.389738][T14604] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1313.514631][ T9022] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1313.750282][T14609] loop5: detected capacity change from 0 to 22 [ 1313.760030][T14609] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1313.874517][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e439c00: rx timeout, send abort [ 1313.883272][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e439800: rx timeout, send abort [ 1314.382929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e439c00: abort rx timeout. Force session deactivation [ 1314.401244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e439800: abort rx timeout. Force session deactivation [ 1314.810984][T14609] romfs: bad initial checksum on dev loop5. [ 1315.117985][T14607] loop1: detected capacity change from 0 to 1024 [ 1315.146849][ T9031] udevd[9031]: incorrect romfs checksum on /dev/loop5 [ 1315.161823][T14607] hfsplus: unable to parse mount options [ 1318.074383][T14641] trusted_key: encrypted_key: insufficient parameters specified [ 1318.134257][T14639] trusted_key: encrypted_key: insufficient parameters specified [ 1318.229402][T14650] fuse: Unknown parameter 'grou00000000000000000000' [ 1321.041665][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 1321.072166][T14681] gtp0: entered promiscuous mode [ 1321.077214][T14681] gtp0: entered allmulticast mode [ 1323.688375][T14700] trusted_key: encrypted_key: insufficient parameters specified [ 1326.491520][T14718] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2048'. [ 1326.945868][T14729] ip6t_srh: unknown srh invflags 7F00 [ 1328.119052][T14742] loop1: detected capacity change from 0 to 22 [ 1328.129278][T14742] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1328.145044][T14742] romfs: bad initial checksum on dev loop1. [ 1328.213192][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e3f5800: rx timeout, send abort [ 1328.673314][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e3f6800: rx timeout, send abort [ 1328.721282][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e3f5800: abort rx timeout. Force session deactivation [ 1329.181378][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e3f6800: abort rx timeout. Force session deactivation [ 1329.859132][ T9022] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1329.910856][T14742] loop1: detected capacity change from 0 to 1024 [ 1329.918598][T14742] EXT4-fs: Ignoring removed oldalloc option [ 1329.979631][T14746] trusted_key: encrypted_key: insufficient parameters specified [ 1330.292550][T14742] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 1330.701384][ T9022] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1332.027468][T14770] trusted_key: encrypted_key: insufficient parameters specified [ 1332.648627][T14776] trusted_key: encrypted_key: insufficient parameters specified [ 1333.199712][T14767] loop5: detected capacity change from 0 to 32768 [ 1333.262375][T14767] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 1333.623082][T14778] loop1: detected capacity change from 0 to 32768 [ 1333.631290][ T9022] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1333.643172][T14778] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1333.739377][T14780] loop1: detected capacity change from 0 to 1024 [ 1333.762015][T14780] hfsplus: unable to parse mount options [ 1333.856043][T14783] loop5: detected capacity change from 0 to 1024 [ 1333.867411][T14783] hfsplus: unable to parse mount options [ 1334.133602][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dc08000: rx timeout, send abort [ 1334.142218][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dc0b000: rx timeout, send abort [ 1334.641824][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dc08000: abort rx timeout. Force session deactivation [ 1334.654763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dc0b000: abort rx timeout. Force session deactivation [ 1334.925354][T14792] loop5: detected capacity change from 0 to 22 [ 1334.932606][T14792] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1336.193939][T14792] romfs: bad initial checksum on dev loop5. [ 1336.251617][ T9022] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1337.310298][T14792] loop5: detected capacity change from 0 to 1024 [ 1337.318188][T14792] EXT4-fs: Ignoring removed oldalloc option [ 1337.330122][T14792] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 1338.275594][T14819] (null): rxe_set_mtu: Set mtu to 256 [ 1338.281449][T14819] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1339.647549][T14829] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2076'. [ 1343.926355][T14862] (null): rxe_set_mtu: Set mtu to 1024 [ 1343.934234][T14862] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1345.966281][T14892] loop1: detected capacity change from 0 to 8 [ 1346.032190][T14892] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1346.040865][T14892] SQUASHFS error: Failed to read block 0x144: -5 [ 1346.047385][T14892] SQUASHFS error: Unable to read metadata cache entry [142] [ 1346.054763][T14892] SQUASHFS error: Unable to read inode 0x11f [ 1346.573520][T14895] fuse: Unknown parameter 'user_id00000000000000000000' [ 1346.708954][T14901] loop5: detected capacity change from 0 to 22 [ 1346.718693][T14901] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1346.727335][T14901] romfs: bad initial checksum on dev loop5. [ 1347.919272][T14903] loop5: detected capacity change from 0 to 1024 [ 1347.928411][T14903] EXT4-fs: Ignoring removed oldalloc option [ 1348.039537][T14903] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 1348.507317][T14906] (null): rxe_set_mtu: Set mtu to 1024 [ 1348.513044][T14906] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1356.222348][T14946] loop2: detected capacity change from 0 to 22 [ 1356.231929][T14946] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1356.249418][T14946] romfs: bad initial checksum on dev loop2. [ 1356.419337][T14951] loop2: detected capacity change from 0 to 1024 [ 1356.427989][T14951] EXT4-fs: Ignoring removed oldalloc option [ 1356.436898][T14951] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 1357.999484][T14950] loop5: detected capacity change from 0 to 32768 [ 1358.020873][T14950] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 1358.169002][ T9031] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1360.397389][T14965] loop5: detected capacity change from 0 to 1024 [ 1360.572013][T14965] hfsplus: unable to parse mount options [ 1360.964475][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1360.978821][T14979] gtp1: entered promiscuous mode [ 1360.983895][T14979] gtp1: entered allmulticast mode [ 1361.662536][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.669604][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.876863][T15025] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2124'. [ 1370.307792][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'. [ 1370.344832][T15048] gtp2: entered promiscuous mode [ 1370.349990][T15048] gtp2: entered allmulticast mode [ 1373.368109][T15072] ip6t_srh: unknown srh invflags 7F00 [ 1379.397728][T15125] loop5: detected capacity change from 0 to 22 [ 1379.408154][T15125] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1379.426388][T15125] romfs: bad initial checksum on dev loop5. [ 1381.247766][T15106] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1381.326705][T15125] loop5: detected capacity change from 0 to 1024 [ 1381.333679][T15125] EXT4-fs: Ignoring removed oldalloc option [ 1381.344812][T15125] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 1383.832955][T15161] loop1: detected capacity change from 0 to 22 [ 1383.843713][T15161] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1384.777724][T15161] romfs: bad initial checksum on dev loop1. [ 1385.166116][T15106] udevd[15106]: incorrect romfs checksum on /dev/loop1 [ 1386.675403][T15172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1391.227995][T15194] loop1: detected capacity change from 0 to 8 [ 1392.382941][T15194] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1392.391157][T15194] SQUASHFS error: Failed to read block 0x144: -5 [ 1392.397811][T15194] SQUASHFS error: Unable to read metadata cache entry [142] [ 1392.405364][T15194] SQUASHFS error: Unable to read inode 0x11f [ 1392.523304][T15106] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1395.231473][T15220] loop2: detected capacity change from 0 to 22 [ 1395.238294][T15220] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1395.264355][T15220] romfs: bad initial checksum on dev loop2. [ 1395.296852][T15106] udevd[15106]: incorrect romfs checksum on /dev/loop2 [ 1400.272708][T15236] loop2: detected capacity change from 0 to 8 [ 1400.328572][T15236] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1400.337415][T15236] SQUASHFS error: Failed to read block 0x144: -5 [ 1400.344249][T15236] SQUASHFS error: Unable to read metadata cache entry [142] [ 1400.351893][T15236] SQUASHFS error: Unable to read inode 0x11f [ 1405.452132][T15264] loop5: detected capacity change from 0 to 8 [ 1405.761052][T15264] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1405.769526][T15264] SQUASHFS error: Failed to read block 0x144: -5 [ 1405.776856][T15264] SQUASHFS error: Unable to read metadata cache entry [142] [ 1405.784696][T15264] SQUASHFS error: Unable to read inode 0x11f [ 1409.514253][T15282] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2189'. [ 1414.982576][T15307] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2194'. [ 1415.187513][T15313] fuse: Unknown parameter 'group_id00000000000000000000' [ 1415.376575][T15316] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2192'. [ 1418.820103][T15346] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2200'. [ 1418.852255][T15347] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2202'. [ 1419.210280][T15352] fuse: Unknown parameter 'grou00000000000000000000' [ 1419.233542][T15353] fuse: Unknown parameter 'group_i00000000000000000000' [ 1419.539378][T15355] loop2: detected capacity change from 0 to 8 [ 1420.732421][T15355] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1420.740860][T15355] SQUASHFS error: Failed to read block 0x144: -5 [ 1420.748062][T15355] SQUASHFS error: Unable to read metadata cache entry [142] [ 1420.755608][T15355] SQUASHFS error: Unable to read inode 0x11f [ 1421.531108][T15367] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2199'. [ 1421.787905][T15370] fuse: Unknown parameter 'grou00000000000000000000' [ 1423.332460][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.342270][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.152636][T15408] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2211'. [ 1426.353133][T15411] fuse: Unknown parameter 'user_i00000000000000000000' [ 1428.046866][T15422] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1428.254856][T15427] (null): rxe_set_mtu: Set mtu to 1024 [ 1428.261967][T15427] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1430.457189][T15443] cgroup: fork rejected by pids controller in /syz1 [ 1433.345642][T15565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2226'. [ 1433.517195][T15566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2225'. [ 1433.771320][T15569] fuse: Unknown parameter 'use00000000000000000000' [ 1434.163247][T15573] fuse: Unknown parameter 'use00000000000000000000' [ 1437.147637][T15697] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2233'. [ 1437.252629][T15701] fuse: Unknown parameter 'grou00000000000000000000' [ 1443.891855][T15935] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2242'. [ 1445.048451][T15949] fuse: Bad value for 'group_id' [ 1447.178858][T16062] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2250'. [ 1447.301908][T16061] cgroup: fork rejected by pids controller in /syz4 [ 1448.795664][T16179] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2253'. [ 1450.100852][T16248] loop5: detected capacity change from 0 to 8 [ 1451.745475][T16248] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1451.753617][T16248] SQUASHFS error: Failed to read block 0x144: -5 [ 1451.760369][T16248] SQUASHFS error: Unable to read metadata cache entry [142] [ 1451.768030][T16248] SQUASHFS error: Unable to read inode 0x11f [ 1451.957531][T16255] cgroup: fork rejected by pids controller in /syz2 [ 1453.481231][T15106] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1453.749309][T16364] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2259'. [ 1453.805635][T16368] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1453.965620][T16371] fuse: Unknown parameter 'grou00000000000000000000' [ 1454.015924][T16372] fuse: Unknown parameter 'group_id00000000000000000000' [ 1456.134842][T16600] bond3: entered promiscuous mode [ 1456.477253][T16664] loop5: detected capacity change from 0 to 8 [ 1456.815939][T16664] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1456.824422][T16664] SQUASHFS error: Failed to read block 0x144: -5 [ 1456.831095][T16664] SQUASHFS error: Unable to read metadata cache entry [142] [ 1456.838706][T16664] SQUASHFS error: Unable to read inode 0x11f [ 1461.117552][T17182] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2282'. [ 1461.726136][T17396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1462.586696][T17708] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2289'. [ 1463.261646][T18061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2294'. [ 1464.359016][T18659] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1464.761160][T18886] fuse: Unknown parameter 'gro00000000000000000000' [ 1465.803478][T19163] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2310'. [ 1466.109639][T19332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2311'. [ 1466.297706][T19369] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1467.110346][T19576] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1467.181005][T19683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2316'. [ 1467.207969][T19684] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1467.218565][T19684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1467.407768][T19777] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2317'. [ 1469.115160][T20202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2323'. [ 1469.401506][T20204] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2324'. [ 1469.594914][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2325'. [ 1469.608734][T20392] gtp1: entered promiscuous mode [ 1469.613977][T20392] gtp1: entered allmulticast mode [ 1469.874309][T20411] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2326'. [ 1470.202972][T20513] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2327'. [ 1471.559727][T20827] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2332'. [ 1472.374610][T21033] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2334'. [ 1476.433202][T21963] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2346'. [ 1476.658562][T22106] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2348'. [ 1478.800099][T22692] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2355'. [ 1479.446935][T22701] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2357'. [ 1483.010333][T23225] tty tty24: ldisc open failed (-12), clearing slot 23 [ 1483.267701][T23327] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1484.460614][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.467584][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.836729][T23748] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2371'. [ 1489.469451][T24270] tty tty22: ldisc open failed (-12), clearing slot 21 [ 1490.393525][T24473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1491.699092][T24585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1498.899910][T25060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1501.481526][T25591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1513.061134][T27462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1515.563139][ C0] ------------[ cut here ]------------ [ 1515.573623][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1515.584431][ C0] Modules linked in: [ 1515.591464][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1515.600390][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1515.611047][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1515.617805][ C0] Code: 24 4c 89 e7 e8 5e 86 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 ce 84 f7 0f 0b e9 f6 f7 ff ff e8 4d ce 84 f7 <0f> 0b e9 48 fb ff ff e8 41 ce 84 f7 48 c7 c7 e0 4c 64 8e 4c 89 e6 [ 1515.638715][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1515.645684][ C0] RAX: ffffffff8a0244d3 RBX: ffffffff8a0232d6 RCX: ffffffff8ce93440 [ 1515.659942][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.669774][ C0] RBP: 0000000000000000 R08: ffffffff8ce93440 R09: 0000000000000003 [ 1515.678507][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805fd423c0 [ 1515.688996][ C0] R13: dffffc0000000000 R14: ffff88805fd428b0 R15: ffff888045349424 [ 1515.697294][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1515.707489][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1515.715391][ C0] CR2: 00007f24225e8600 CR3: 000000002e090000 CR4: 00000000003506f0 [ 1515.724614][ C0] Call Trace: [ 1515.731619][ C0] [ 1515.736468][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1515.742800][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1515.749373][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1515.756513][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1515.762465][ C0] __iterate_interfaces+0x243/0x500 [ 1515.768071][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1515.774927][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1515.785490][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1515.792427][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1515.800416][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1515.810421][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 1515.816451][ C0] ? hw_scan_work+0xf60/0xf60 [ 1515.824379][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1515.829880][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1515.836389][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1515.844430][ C0] handle_softirqs+0x280/0x820 [ 1515.850378][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1515.860631][ C0] ? do_softirq+0x1a0/0x1a0 [ 1515.866062][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1515.872424][ C0] __irq_exit_rcu+0xd3/0x190 [ 1515.878222][ C0] ? irq_exit_rcu+0x20/0x20 [ 1515.883142][ C0] irq_exit_rcu+0x9/0x20 [ 1515.889424][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1515.897014][ C0] [ 1515.900339][ C0] [ 1515.904413][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1515.920507][ C0] RIP: 0010:sched_core_balance+0x148/0xff0 [ 1515.933503][ C0] Code: 14 03 00 00 48 c7 c2 e0 7a ca 8a e8 72 fa 09 00 e9 3e 0e 00 00 48 8b 7c 24 38 e8 b3 d6 2e 09 e8 6e a5 2e 00 fb 4c 8b 74 24 50 <41> 83 fe 08 0f 83 06 0e 00 00 48 89 9c 24 80 00 00 00 4c 8d 3c dd [ 1515.960347][ C0] RSP: 0018:ffffffff8ce07960 EFLAGS: 00000286 [ 1515.969162][ C0] RAX: 1fc8359dc3365b00 RBX: 0000000000000000 RCX: 1fc8359dc3365b00 [ 1515.977465][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c80e0 [ 1515.987173][ C0] RBP: ffffffff8ce07ae8 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 1515.996170][ C0] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: ffff8880b8e3c000 [ 1516.005001][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.013546][ C0] ? sched_core_balance+0xc3/0xff0 [ 1516.020720][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1516.026495][ C0] ? put_prev_task_balance+0x110/0x110 [ 1516.036615][ C0] ? put_prev_task_balance+0x110/0x110 [ 1516.042482][ C0] finish_task_switch+0x395/0x8f0 [ 1516.048729][ C0] __schedule+0x155b/0x45a0 [ 1516.054729][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1516.061600][ C0] ? asan.module_dtor+0x20/0x20 [ 1516.069719][ C0] ? flush_smp_call_function_queue+0x11e/0x250 [ 1516.077868][ C0] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 1516.084366][ C0] schedule_idle+0x4e/0x80 [ 1516.089105][ C0] do_idle+0x48a/0x4e0 [ 1516.100416][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1516.110369][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1516.117662][ C0] cpu_startup_entry+0x43/0x60 [ 1516.125264][ C0] rest_init+0x2e2/0x300 [ 1516.130365][ C0] ? time_init+0x40/0x40 [ 1516.135529][ C0] arch_call_rest_init+0xe/0x10 [ 1516.143711][ C0] start_kernel+0x459/0x4e0 [ 1516.150221][ C0] x86_64_start_reservations+0x2a/0x30 [ 1516.156248][ C0] x86_64_start_kernel+0x60/0x60 [ 1516.162358][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1516.169746][ C0] [ 1516.173076][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1516.180468][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1516.187693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1516.197803][ C0] Call Trace: [ 1516.201105][ C0] [ 1516.203964][ C0] dump_stack_lvl+0x18c/0x250 [ 1516.208673][ C0] ? show_regs_print_info+0x20/0x20 [ 1516.213894][ C0] ? load_image+0x400/0x400 [ 1516.218437][ C0] panic+0x2dc/0x730 [ 1516.222918][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1516.227469][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1516.234097][ C0] __warn+0x2e0/0x470 [ 1516.238203][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1516.244272][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1516.250042][ C0] report_bug+0x2be/0x4f0 [ 1516.254399][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1516.260137][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1516.266526][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1516.272400][ C0] handle_bug+0xcf/0x120 [ 1516.276670][ C0] exc_invalid_op+0x1a/0x50 [ 1516.281199][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1516.286072][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1516.292623][ C0] Code: 24 4c 89 e7 e8 5e 86 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 ce 84 f7 0f 0b e9 f6 f7 ff ff e8 4d ce 84 f7 <0f> 0b e9 48 fb ff ff e8 41 ce 84 f7 48 c7 c7 e0 4c 64 8e 4c 89 e6 [ 1516.312365][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1516.318550][ C0] RAX: ffffffff8a0244d3 RBX: ffffffff8a0232d6 RCX: ffffffff8ce93440 [ 1516.326552][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.334560][ C0] RBP: 0000000000000000 R08: ffffffff8ce93440 R09: 0000000000000003 [ 1516.342552][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805fd423c0 [ 1516.350564][ C0] R13: dffffc0000000000 R14: ffff88805fd428b0 R15: ffff888045349424 [ 1516.358564][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1516.364161][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1516.370009][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1516.375747][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1516.381326][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1516.386822][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1516.393646][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1516.399412][ C0] __iterate_interfaces+0x243/0x500 [ 1516.404650][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1516.411043][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1516.418277][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1516.424556][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1516.431699][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1516.436920][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 1516.442171][ C0] ? hw_scan_work+0xf60/0xf60 [ 1516.446875][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1516.452003][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1516.458101][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1516.463236][ C0] handle_softirqs+0x280/0x820 [ 1516.468108][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1516.472899][ C0] ? do_softirq+0x1a0/0x1a0 [ 1516.477556][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1516.482791][ C0] __irq_exit_rcu+0xd3/0x190 [ 1516.487421][ C0] ? irq_exit_rcu+0x20/0x20 [ 1516.491954][ C0] irq_exit_rcu+0x9/0x20 [ 1516.496217][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1516.501872][ C0] [ 1516.504815][ C0] [ 1516.507946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1516.514647][ C0] RIP: 0010:sched_core_balance+0x148/0xff0 [ 1516.520479][ C0] Code: 14 03 00 00 48 c7 c2 e0 7a ca 8a e8 72 fa 09 00 e9 3e 0e 00 00 48 8b 7c 24 38 e8 b3 d6 2e 09 e8 6e a5 2e 00 fb 4c 8b 74 24 50 <41> 83 fe 08 0f 83 06 0e 00 00 48 89 9c 24 80 00 00 00 4c 8d 3c dd [ 1516.540214][ C0] RSP: 0018:ffffffff8ce07960 EFLAGS: 00000286 [ 1516.546389][ C0] RAX: 1fc8359dc3365b00 RBX: 0000000000000000 RCX: 1fc8359dc3365b00 [ 1516.554472][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c80e0 [ 1516.562456][ C0] RBP: ffffffff8ce07ae8 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 1516.570542][ C0] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: ffff8880b8e3c000 [ 1516.578540][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.586582][ C0] ? sched_core_balance+0xc3/0xff0 [ 1516.591757][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1516.597180][ C0] ? put_prev_task_balance+0x110/0x110 [ 1516.602714][ C0] ? put_prev_task_balance+0x110/0x110 [ 1516.608296][ C0] finish_task_switch+0x395/0x8f0 [ 1516.613608][ C0] __schedule+0x155b/0x45a0 [ 1516.618663][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1516.623820][ C0] ? asan.module_dtor+0x20/0x20 [ 1516.629064][ C0] ? flush_smp_call_function_queue+0x11e/0x250 [ 1516.635250][ C0] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 1516.641441][ C0] schedule_idle+0x4e/0x80 [ 1516.645972][ C0] do_idle+0x48a/0x4e0 [ 1516.650064][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1516.655286][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1516.660963][ C0] cpu_startup_entry+0x43/0x60 [ 1516.665812][ C0] rest_init+0x2e2/0x300 [ 1516.670074][ C0] ? time_init+0x40/0x40 [ 1516.674450][ C0] arch_call_rest_init+0xe/0x10 [ 1516.679405][ C0] start_kernel+0x459/0x4e0 [ 1516.683932][ C0] x86_64_start_reservations+0x2a/0x30 [ 1516.689661][ C0] x86_64_start_kernel+0x60/0x60 [ 1516.694682][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1516.700784][ C0] [ 1516.704387][ C0] Kernel Offset: disabled [ 1516.708851][ C0] Rebooting in 86400 seconds..