last executing test programs: 2m16.233365153s ago: executing program 2 (id=1623): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 2m14.341861849s ago: executing program 2 (id=1632): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|', @ANYRES16=r0, @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f16"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) 2m12.529535909s ago: executing program 2 (id=1634): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x66}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x6, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xde, 0xa0, 0x1, 0xfffffff8}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x1a, 0x0, &(0x7f0000001080)="f6f6dca1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc19088", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d00010000"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m12.356090434s ago: executing program 2 (id=1637): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daff", 0x80}], 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {0x0}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m11.798310894s ago: executing program 2 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 2m10.853004646s ago: executing program 2 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f0000f689818be4f1f88a2c189b3b91e2796b950e793ddb58718d1ba935ff8860587e9f07c3abe868950b2485e39445770416d49e4be834725635a428437572938e27bbec515893127920a80f"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1m55.721061948s ago: executing program 32 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f0000f689818be4f1f88a2c189b3b91e2796b950e793ddb58718d1ba935ff8860587e9f07c3abe868950b2485e39445770416d49e4be834725635a428437572938e27bbec515893127920a80f"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1m52.802073675s ago: executing program 1 (id=1710): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|', @ANYRES16=r0, @ANYBLOB="010829bd7000000000", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f16"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) 1m51.733140309s ago: executing program 1 (id=1712): syz_open_dev$sg(0x0, 0x0, 0x8002) socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m51.548838545s ago: executing program 1 (id=1714): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) 1m51.38324281s ago: executing program 1 (id=1716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x400) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1m51.112854923s ago: executing program 1 (id=1718): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 1m49.632875444s ago: executing program 1 (id=1721): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 1m33.825641255s ago: executing program 33 (id=1721): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 16.321293094s ago: executing program 0 (id=1969): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f16"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x80000) 15.503414696s ago: executing program 6 (id=1972): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x50000048) inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x9600006f) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 13.959786811s ago: executing program 6 (id=1973): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 12.83924318s ago: executing program 6 (id=1974): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket(0x10, 0x80002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 12.004852433s ago: executing program 3 (id=1978): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4018045}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x63, 0x4, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r8, 0x0, 0xc0) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r9 = syz_open_dev$loop(0x0, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000240), 0x10) fadvise64(r9, 0x4, 0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 11.079924645s ago: executing program 3 (id=1979): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x66}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x7, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xdf, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d00010000"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.786245531s ago: executing program 3 (id=1981): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000380), 0x2, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, 0x0, &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20f", 0x86}, {&(0x7f0000002700)="d6f4de", 0x3}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9.901747438s ago: executing program 5 (id=1982): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r7}) close_range(r4, r6, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt(r8, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) sendmsg$key(r0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) 8.651743918s ago: executing program 3 (id=1983): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_setup(0x651d, &(0x7f0000000640)={0x0, 0x4833, 0x4000, 0x2, 0x2f2, 0x0, r0}, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0xb0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0b0105000009000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r6, 0x5, 0x0, &(0x7f0000000140)) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="da90326376b1e75cfdb9d6fdcefda90dac1e68a89f7730653a1e377f1f14ca7596a02beb483c7b25ae47b424fa3bcd9b9b3c6e9cff42cdf49e2ff80ca0d39b3b1238f4ea49d8bef8ec610dcd430812", 0x4f, 0xc000, 0x0, {0x0, r8}}) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, &(0x7f00000000c0)='2\x00', 0x2) io_uring_enter(r0, 0x3498, 0x969, 0x0, 0x0, 0x0) 8.622119741s ago: executing program 5 (id=1984): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$null(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.61347955s ago: executing program 5 (id=1986): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) fanotify_init(0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x91, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.179879948s ago: executing program 0 (id=1988): syz_emit_ethernet(0x16, &(0x7f0000000380)={@multicast, @broadcast, @void, {@llc_tr={0x11, {@snap={0x0, 0xaa, "c5", '`z8', 0x8884}}}}}, 0x0) open(0x0, 0x80ff, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4f, &(0x7f00000002c0)=@string={0x4f, 0x3, "b4cedeec45d14be1eaf72909c29986ae4ec40880be40b4e921a783fb00e917b25e35ce5eed425a77b74d9b097cc3d8afbbd6216779e572fe7f369ab099234ac9ff6a4cac90f92bd1568baa87c1"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 6.317484344s ago: executing program 5 (id=1990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x44c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x41c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xf9}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x3, 0x1, 0xffff, 0xfffff000, 0x2, 0x3ff, 0x40, 0x101, 0xbe, 0x1ff, 0x2, 0x7, 0x7, 0xe0, 0x6, 0x1, 0x34, 0x401, 0x8001, 0x5, 0x9, 0xfffffffc, 0x8001, 0x7f, 0x2, 0x7, 0x7, 0x2, 0x6, 0x7, 0x28c, 0xffffffff, 0x6840, 0x101, 0xb, 0x3, 0x9, 0x10, 0x7ff, 0x97, 0xe524, 0x7, 0xdf5b, 0x5001, 0x60a5, 0x7, 0x2, 0xfffffffb, 0x48, 0x7, 0x8, 0x3f9, 0x357, 0x8000, 0x80000000, 0x4, 0x8d9, 0x2, 0x3, 0x3, 0xd0, 0x1, 0x7f, 0x6, 0x6, 0x4, 0x1, 0xfffffffc, 0x61, 0x6, 0x80000001, 0xc, 0x70acd9fc, 0x7, 0xffffff57, 0x2, 0x7e, 0x3, 0xeb6, 0x40, 0x4f9a, 0xffffff01, 0x9, 0x8, 0xec8, 0x10001, 0xffffff16, 0x7ff, 0x873, 0xa86, 0x5, 0x7, 0x3, 0xb00, 0x6, 0x1, 0x8, 0xf180, 0xf67a, 0x9, 0x5, 0x9, 0x7, 0xf20, 0x8, 0x10000, 0xfffffffd, 0x5, 0x6, 0x10000, 0x7, 0x361, 0x42c, 0xffff8001, 0x3, 0xd8dd7293, 0x4fe4, 0xf63, 0x394, 0xfffffffe, 0x3, 0xa64, 0x0, 0x1, 0x0, 0x9, 0xffffffff, 0xfffffff9, 0x7f, 0xfe0, 0xfff, 0x8, 0x8f, 0x9, 0x6, 0x1, 0x9, 0x4, 0x7fff, 0x1e, 0x52, 0x5353, 0x4, 0xfffffffc, 0x9da4, 0x0, 0x0, 0xa098, 0x1, 0xfff, 0x1c1c9921, 0x9, 0xfffffffe, 0xf01, 0xa, 0x3, 0x7, 0x3, 0x437, 0x0, 0x0, 0x40, 0xfd3, 0x8, 0x1, 0x3, 0xd, 0x200, 0x4, 0x1, 0x0, 0x3, 0x8, 0x4, 0xf, 0x6, 0x1, 0x3, 0x2, 0x6, 0x8, 0x4359, 0x3223, 0x3, 0x9, 0x200, 0x0, 0x0, 0x7, 0x80, 0x4, 0x10, 0x73, 0x8, 0xc, 0x6, 0xd0d1, 0x5, 0x10, 0x7ff, 0x100, 0x401, 0x7, 0x1, 0x2, 0x3ff, 0x10000000, 0x7, 0x6, 0x7, 0x4, 0x6, 0xfffffffe, 0x100, 0x3ff, 0x8, 0x0, 0x3, 0x101, 0x6, 0xfffffffa, 0x5d08563b, 0x8, 0xa, 0xe, 0x1, 0x94, 0x1, 0xda, 0x3, 0x820, 0x70, 0x4, 0x401, 0xb, 0x8, 0x24e92f0b, 0x80000001, 0x7, 0xffffffaa, 0x8, 0x0, 0x5, 0xa, 0xd, 0x94bc, 0x3, 0x9, 0x1000000, 0x2, 0x1000, 0x0, 0x2, 0x7]}]}]}}]}, 0x44c}, 0x1, 0x4000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 5.998102992s ago: executing program 5 (id=1993): syz_open_dev$sg(0x0, 0x0, 0x8002) socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.599898377s ago: executing program 0 (id=1994): socket(0x22, 0x80003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="804df1b42783e980f6c5c859a53740352fc4db5c97dcdd2dda29f5b8cc9f25782cf31101d6a6e54c33dd0b2125520fba3b48"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 5.016384488s ago: executing program 4 (id=1995): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.844260763s ago: executing program 0 (id=1996): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r7, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r8}], 0x1, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt(r9, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) sendmsg$key(r0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) 4.555789379s ago: executing program 4 (id=1997): syz_open_dev$sg(0x0, 0x0, 0x8002) socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.712669113s ago: executing program 3 (id=1998): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f16"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x80000) 3.698197494s ago: executing program 4 (id=1999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0xc125a080, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x400000000, 0x0, 0x2f}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc4542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) 3.668388387s ago: executing program 6 (id=2000): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='/dev/kvm\x00', 0x400, 0x0, 0x8, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000005010400000000000006000200000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x26000, 0x14000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.212508375s ago: executing program 4 (id=2001): fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r3, 0x1, 0x0, 0xeffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r4 = syz_clone(0x21200600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 1.481512199s ago: executing program 0 (id=2002): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x66}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x7, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xdf, 0xa0, 0x1, 0xfffffff8}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d00010000"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.419850154s ago: executing program 4 (id=2003): syz_open_dev$sg(0x0, 0x0, 0x8002) socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.352263341s ago: executing program 3 (id=2004): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.312990204s ago: executing program 5 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r1, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) syz_pidfd_open(r2, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe9, 0x5b, 0x17, 0x10, 0x572, 0xcb00, 0xbbc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xfb, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x1, 0x3, 0x38, 0xe8, 0x80, 0x6, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x2, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xf8, 0x3, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1c, 0xd, 0x9, [@generic={0x7, 0x5, "c17a783557"}]}}]}}]}}]}}, 0x0) 1.102810583s ago: executing program 6 (id=2006): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r7, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r8}], 0x1, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt(r9, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) sendmsg$key(r0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) 46.678665ms ago: executing program 0 (id=2007): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.3763ms ago: executing program 6 (id=2008): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_setup(0x651d, &(0x7f0000000640)={0x0, 0x4833, 0x4000, 0x2, 0x2f2, 0x0, r0}, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0xb0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0b0105000009000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r6, 0x5, 0x0, &(0x7f0000000140)) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="da90326376b1e75cfdb9d6fdcefda90dac1e68a89f7730653a1e377f1f14ca7596a02beb483c7b25ae47b424fa3bcd9b9b3c6e9cff42cdf49e2ff80ca0d39b3b1238f4ea49d8bef8ec610dcd430812", 0x4f, 0xc000, 0x0, {0x0, r8}}) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, &(0x7f00000000c0)='2\x00', 0x2) io_uring_enter(r0, 0x3498, 0x969, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2009): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x50000048) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x9600006f) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): invalid cluster chain (i_pos 1046) [ 186.873786][ T5394] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.935289][ T5394] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 187.019192][ T5404] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 187.052188][ T5394] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 187.546949][ T5426] loop4: detected capacity change from 0 to 1024 [ 188.316654][ T5426] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 188.352565][ T5426] EXT4-fs (loop4): orphan cleanup on readonly fs [ 188.363909][ T5426] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.332: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.404403][ T5426] EXT4-fs (loop4): 1 orphan inode deleted [ 188.474589][ T5426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.916770][ T5458] hub 8-0:1.0: USB hub found [ 189.925006][ T5458] hub 8-0:1.0: 1 port detected [ 190.700587][ T5453] device syzkaller0 entered promiscuous mode [ 192.084510][ T5480] loop4: detected capacity change from 0 to 2048 [ 193.165103][ T5480] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 193.849871][ T5510] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 194.099157][ T5512] device syzkaller0 entered promiscuous mode [ 194.293722][ T5521] loop2: detected capacity change from 0 to 2048 [ 195.101705][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.591268][ T5521] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 195.609795][ T5534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.283513][ T5536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.350702][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 197.364881][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 197.375057][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 197.714048][ T5556] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 197.881862][ T5560] device syzkaller0 entered promiscuous mode [ 198.188769][ T5565] loop_set_status: loop7 () has still dirty pages (nrpages=96) [ 200.037535][ T5591] tipc: Started in network mode [ 200.038174][ T5591] tipc: Node identity 862c21476088, cluster identity 4711 [ 200.041590][ T5591] tipc: Enabled bearer , priority 0 [ 200.091659][ T5591] device syzkaller0 entered promiscuous mode [ 200.466384][ T5591] tipc: Resetting bearer [ 200.630783][ T5586] tipc: Resetting bearer [ 200.673483][ T5586] tipc: Disabling bearer [ 200.808053][ T5602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.918415][ T5606] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 200.950624][ T5603] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.850930][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 203.670747][ T5623] netlink: 'syz.4.385': attribute type 4 has an invalid length. [ 204.111819][ T5638] device syzkaller0 entered promiscuous mode [ 204.223705][ T5640] hub 8-0:1.0: USB hub found [ 204.229505][ T5640] hub 8-0:1.0: 1 port detected [ 205.334445][ T5648] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 210.154931][ T5677] loop_set_status: loop7 () has still dirty pages (nrpages=160) [ 212.960910][ T5710] hub 8-0:1.0: USB hub found [ 213.002188][ T5710] hub 8-0:1.0: 1 port detected [ 214.254894][ T5722] loop1: detected capacity change from 0 to 2048 [ 215.299029][ T5722] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 216.325084][ T5742] hub 8-0:1.0: USB hub found [ 216.332492][ T5742] hub 8-0:1.0: 1 port detected [ 221.169825][ T5772] hub 8-0:1.0: USB hub found [ 221.175738][ T5772] hub 8-0:1.0: 1 port detected [ 223.320876][ T5784] netlink: 'syz.4.434': attribute type 6 has an invalid length. [ 223.486886][ T5788] hub 8-0:1.0: USB hub found [ 223.508646][ T5788] hub 8-0:1.0: 1 port detected [ 225.812396][ T5791] hub 8-0:1.0: USB hub found [ 225.817857][ T5791] hub 8-0:1.0: 1 port detected [ 227.944170][ T5822] netlink: 'syz.2.449': attribute type 6 has an invalid length. [ 228.114140][ T5818] device syzkaller0 entered promiscuous mode [ 229.048332][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 229.100107][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 229.132622][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 229.162899][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 229.183482][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 229.209678][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 229.321314][ T5840] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 230.192693][ T5860] netlink: 'syz.1.460': attribute type 6 has an invalid length. [ 230.744885][ T5853] loop_set_status: loop7 () has still dirty pages (nrpages=268) [ 232.272243][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 232.350111][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 232.413876][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 232.461890][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 232.472282][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 232.486699][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 233.632097][ T5904] loop3: detected capacity change from 0 to 1024 [ 238.122406][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 238.484319][ T5938] hub 8-0:1.0: USB hub found [ 238.491275][ T5938] hub 8-0:1.0: 1 port detected [ 239.337723][ T5935] device syzkaller0 entered promiscuous mode [ 239.507626][ T5950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.887152][ T5961] hub 8-0:1.0: USB hub found [ 239.892728][ T5961] hub 8-0:1.0: 1 port detected [ 240.897806][ T5968] hub 8-0:1.0: USB hub found [ 240.903292][ T5968] hub 8-0:1.0: 1 port detected [ 241.141303][ T5953] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.843075][ T5957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.316258][ T5985] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 245.213496][ T6006] hub 8-0:1.0: USB hub found [ 245.223098][ T6006] hub 8-0:1.0: 1 port detected [ 246.750530][ T6016] hub 8-0:1.0: USB hub found [ 246.756011][ T6016] hub 8-0:1.0: 1 port detected [ 247.948642][ T6022] loop3: detected capacity change from 0 to 1024 [ 248.067135][ T6022] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 248.100957][ T6022] hfsplus: xattr search failed [ 248.133142][ T6022] netlink: 'syz.3.510': attribute type 21 has an invalid length. [ 248.177601][ T6022] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.227490][ T6022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.235290][ T6022] IPv6: NLM_F_CREATE should be set when creating new route [ 248.242593][ T6022] IPv6: NLM_F_CREATE should be set when creating new route [ 248.249864][ T6022] IPv6: NLM_F_CREATE should be set when creating new route [ 248.396766][ T6022] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 248.518775][ T4303] hfsplus: b-tree write err: -5, ino 4 [ 250.800123][ T6045] device syzkaller0 entered promiscuous mode [ 251.504924][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 252.495812][ T6064] netlink: 'syz.1.523': attribute type 4 has an invalid length. [ 252.544880][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 252.665218][ T13] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 252.669836][ T6071] loop1: detected capacity change from 0 to 1024 [ 252.683642][ T13] usb 4-1: config 251 has no interface number 0 [ 252.707317][ T13] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.749475][ T13] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 252.794329][ T6072] loop2: detected capacity change from 0 to 8192 [ 252.841975][ T6071] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 252.881826][ T6072] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 252.901709][ T6071] hfsplus: xattr search failed [ 252.946914][ T6072] REISERFS (device loop2): using ordered data mode [ 252.981101][ T6071] netlink: 'syz.1.526': attribute type 21 has an invalid length. [ 253.006262][ T6072] reiserfs: using flush barriers [ 253.045890][ T4331] Bluetooth: hci4: command 0x0406 tx timeout [ 253.056887][ T6071] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.084978][ T6080] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 253.132311][ T6072] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.209427][ T6071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.216908][ T6071] IPv6: NLM_F_CREATE should be set when creating new route [ 253.224187][ T6071] IPv6: NLM_F_CREATE should be set when creating new route [ 253.231610][ T6071] IPv6: NLM_F_CREATE should be set when creating new route [ 253.271821][ T6072] REISERFS (device loop2): checking transaction log (loop2) [ 253.332434][ T6072] REISERFS (device loop2): Using r5 hash to sort names [ 253.376803][ T6072] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 253.461912][ T6072] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 253.596601][ T6072] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 254.071140][ T4240] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 254.172312][ T6085] loop3: detected capacity change from 0 to 736 [ 254.455062][ T4240] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 254.473885][ T4240] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 254.492379][ T4240] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 254.512506][ T4240] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.519678][ T4240] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 254.535569][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.559063][ T4240] usb 3-1: config 0 descriptor?? [ 254.585354][ T6072] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 255.039165][ T4240] wacom 0003:056A:0325.0004: unknown main item tag 0x3 [ 255.057529][ T4240] wacom 0003:056A:0325.0004: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.2-1/input0 [ 255.267236][ T6072] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 255.294106][ T4240] usb 3-1: USB disconnect, device number 7 [ 255.315157][ T13] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 255.326524][ T13] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 255.337790][ T13] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.351466][ T13] usb 4-1: config 251 interface 202 has no altsetting 0 [ 255.371924][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 255.394926][ T13] usb 4-1: string descriptor 0 read error: -71 [ 255.401384][ T13] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 255.415000][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.448547][ T13] usb 4-1: can't set config #251, error -71 [ 255.461934][ T13] usb 4-1: USB disconnect, device number 8 [ 255.807286][ T6101] netlink: 'syz.4.533': attribute type 6 has an invalid length. [ 256.006917][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.291821][ T6108] device syzkaller0 entered promiscuous mode [ 256.444988][ T6095] loop_set_status: loop7 () has still dirty pages (nrpages=1140) [ 256.483987][ T6114] fuse: Unknown parameter 'group_id00000000000000000000' [ 256.724073][ T6117] loop4: detected capacity change from 0 to 736 [ 257.542463][ T6126] hub 8-0:1.0: USB hub found [ 257.548454][ T6126] hub 8-0:1.0: 1 port detected [ 258.549956][ T6131] netlink: 'syz.2.545': attribute type 6 has an invalid length. [ 258.782312][ T6132] loop0: detected capacity change from 0 to 8192 [ 259.067172][ T6132] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 259.107792][ T6132] REISERFS (device loop0): using ordered data mode [ 259.114367][ T6132] reiserfs: using flush barriers [ 259.231471][ T6132] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.338252][ T6132] REISERFS (device loop0): checking transaction log (loop0) [ 259.405026][ T4331] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 259.429309][ T6132] REISERFS (device loop0): Using r5 hash to sort names [ 259.468983][ T6132] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 259.475232][ T6085] ODEBUG: Out of memory. ODEBUG disabled [ 259.572921][ T6149] fuse: Unknown parameter 'group_id00000000000000000000' [ 259.580339][ T6140] loop_set_status: loop7 () has still dirty pages (nrpages=864) [ 259.591447][ T6132] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 259.637312][ T6132] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 259.676332][ T4331] usb 2-1: Using ep0 maxpacket: 16 [ 260.144868][ T13] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 260.505111][ T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 260.546885][ T13] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 260.576836][ T13] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 260.664834][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 260.671517][ T13] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 260.718819][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.743033][ T6165] loop4: detected capacity change from 0 to 2048 [ 260.756123][ T13] usb 1-1: config 0 descriptor?? [ 260.790334][ T6132] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 260.859990][ T6165] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 260.914879][ T4331] usb 2-1: unable to read config index 0 descriptor/all [ 260.930314][ T4331] usb 2-1: can't read configurations, error -71 [ 261.060566][ T6173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.558'. [ 261.190924][ T6178] loop1: detected capacity change from 0 to 736 [ 261.900257][ T13] wacom 0003:056A:0325.0005: unknown main item tag 0x3 [ 261.954367][ T13] wacom 0003:056A:0325.0005: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.0-1/input0 [ 261.964141][ T6085] Set syz1 is full, maxelem 65536 reached [ 262.124214][ T6132] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 262.196064][ T13] usb 1-1: USB disconnect, device number 8 [ 262.447311][ T6193] hub 8-0:1.0: USB hub found [ 262.453873][ T6193] hub 8-0:1.0: 1 port detected [ 262.795815][ T6188] fido_id[6188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.448996][ T6198] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 263.837494][ T6204] loop4: detected capacity change from 0 to 8192 [ 263.931569][ T6204] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.981616][ T26] audit: type=1800 audit(1771914013.158:8): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.566" name="file2" dev="loop4" ino=1048596 res=0 errno=0 [ 264.026856][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.070956][ T6204] FAT-fs (loop4): Filesystem has been set read-only [ 264.098182][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.183400][ T6216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.569'. [ 264.235106][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.252357][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.301254][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.415158][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.510789][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.688337][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.827703][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.989779][ T6221] netlink: 'syz.2.571': attribute type 4 has an invalid length. [ 264.997673][ T6204] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 265.658711][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 265.914842][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 266.035161][ T13] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 266.062195][ T13] usb 4-1: config 251 has no interface number 0 [ 266.083763][ T13] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 266.127927][ T13] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 266.222879][ T13] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 266.326461][ T13] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 266.381783][ T13] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.402373][ T13] usb 4-1: config 251 interface 202 has no altsetting 0 [ 266.637647][ T13] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 266.653264][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.662496][ T13] usb 4-1: Product: syz [ 266.667429][ T13] usb 4-1: Manufacturer: syz [ 266.672228][ T13] usb 4-1: SerialNumber: syz [ 268.704953][ T13] usb 4-1: can't set config #251, error -71 [ 268.738539][ T13] usb 4-1: USB disconnect, device number 9 [ 269.762402][ T6272] loop3: detected capacity change from 0 to 2048 [ 269.907644][ T6272] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 270.256756][ T6271] loop4: detected capacity change from 0 to 8192 [ 270.292708][ T6271] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.038419][ T26] audit: type=1800 audit(1771914020.218:9): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.586" name="file2" dev="loop4" ino=1048597 res=0 errno=0 [ 271.070463][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.113340][ T6271] FAT-fs (loop4): Filesystem has been set read-only [ 271.127967][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.191654][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.254947][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.263977][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.418452][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.439374][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.464235][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.529146][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 271.555216][ T6271] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 272.669967][ T6178] Set syz1 is full, maxelem 65536 reached [ 272.780939][ T6301] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.924346][ T6304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.934126][ T6299] loop2: detected capacity change from 0 to 8192 [ 272.994600][ T6299] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.032991][ T26] audit: type=1800 audit(1771914022.208:10): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.593" name="file2" dev="loop2" ino=1048598 res=0 errno=0 [ 273.066339][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.081955][ T6299] FAT-fs (loop2): Filesystem has been set read-only [ 273.090872][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.108856][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.153594][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.231825][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.351547][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.508070][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.700157][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.869798][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 273.910475][ T6299] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 274.259800][ T6319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.325322][ T6320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.419829][ T6324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.459150][ T6329] loop1: detected capacity change from 0 to 2048 [ 274.489682][ T6325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.616672][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.696043][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 275.174788][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 275.339711][ T21] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 275.373034][ T21] usb 4-1: config 251 has no interface number 0 [ 275.401368][ T21] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 275.414290][ T6342] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.479745][ T21] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 275.505404][ T6347] loop2: detected capacity change from 0 to 736 [ 275.512069][ T21] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 275.525744][ T21] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 275.537361][ T21] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.551465][ T21] usb 4-1: config 251 interface 202 has no altsetting 0 [ 276.865183][ T21] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 276.887104][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.939562][ T21] usb 4-1: Product: syz [ 276.948166][ T21] usb 4-1: Manufacturer: syz [ 276.994912][ T21] usb 4-1: can't set config #251, error -71 [ 277.026984][ T21] usb 4-1: USB disconnect, device number 10 [ 277.146440][ T6368] loop3: detected capacity change from 0 to 2048 [ 277.277510][ T6372] hub 8-0:1.0: USB hub found [ 277.283323][ T6372] hub 8-0:1.0: 1 port detected [ 277.535503][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 279.607047][ T6390] hub 8-0:1.0: USB hub found [ 279.612676][ T6390] hub 8-0:1.0: 1 port detected [ 281.711610][ T6401] loop3: detected capacity change from 0 to 8192 [ 281.882002][ T6401] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.951503][ T26] audit: type=1800 audit(1771914031.128:11): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.620" name="file2" dev="loop3" ino=1048599 res=0 errno=0 [ 281.987423][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.025604][ T6398] FAT-fs (loop3): Filesystem has been set read-only [ 282.035186][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.080895][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.116598][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.135540][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.173308][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.210011][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.226250][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.261514][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.274765][ T6398] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 282.364873][ T4331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 282.634906][ T4331] usb 1-1: Using ep0 maxpacket: 16 [ 282.791065][ T4331] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 282.825155][ T4331] usb 1-1: config 251 has no interface number 0 [ 282.854846][ T4331] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 282.891393][ T4331] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 282.923802][ T4331] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 282.944978][ T4331] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 282.966504][ T4331] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.002083][ T4331] usb 1-1: config 251 interface 202 has no altsetting 0 [ 283.198321][ T6347] Set syz1 is full, maxelem 65536 reached [ 283.205473][ T6420] loop3: detected capacity change from 0 to 2048 [ 283.215177][ T4331] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 283.232634][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.254804][ T4331] usb 1-1: Product: syz [ 283.264834][ T4331] usb 1-1: Manufacturer: syz [ 283.269564][ T4331] usb 1-1: SerialNumber: syz [ 283.320434][ T6420] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 283.325070][ T6408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 283.343852][ T6408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 283.855173][ T4331] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 283.868862][ T4331] usb 1-1: USB disconnect, device number 9 [ 286.706283][ T6459] hub 8-0:1.0: USB hub found [ 286.711671][ T6459] hub 8-0:1.0: 1 port detected [ 291.654760][ T6503] netlink: 'syz.2.651': attribute type 6 has an invalid length. [ 291.789716][ T6506] misc userio: No port type given on /dev/userio [ 293.024815][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 293.284973][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 293.495049][ T13] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 293.521878][ T13] usb 4-1: config 251 has no interface number 0 [ 293.564458][ T13] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 293.630810][ T13] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 293.668348][ T6524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.704080][ T13] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 293.750158][ T13] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 293.782078][ T13] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.826075][ T13] usb 4-1: config 251 interface 202 has no altsetting 0 [ 294.001603][ T6525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.389916][ T6538] netlink: 'syz.2.662': attribute type 6 has an invalid length. [ 294.575032][ T13] usb 4-1: string descriptor 0 read error: -71 [ 294.581368][ T13] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 294.667127][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.679938][ T6546] loop4: detected capacity change from 0 to 128 [ 294.864534][ T6546] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 294.875715][ T6546] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.094652][ T13] usb 4-1: can't set config #251, error -71 [ 295.512544][ T13] usb 4-1: USB disconnect, device number 11 [ 296.313496][ T6558] misc userio: No port type given on /dev/userio [ 298.689202][ T6567] tipc: Started in network mode [ 298.723330][ T6567] tipc: Node identity bab38f4add51, cluster identity 4711 [ 298.758713][ T6567] tipc: Enabled bearer , priority 0 [ 298.818211][ T6561] tipc: Disabling bearer [ 298.829579][ T6565] loop0: detected capacity change from 0 to 8192 [ 298.907591][ T6565] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.942306][ T26] audit: type=1800 audit(1771914048.118:12): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.668" name="file2" dev="loop0" ino=1048600 res=0 errno=0 [ 298.943372][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 298.972766][ T6565] FAT-fs (loop0): Filesystem has been set read-only [ 298.979639][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.510954][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.520252][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.530725][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.539955][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.549152][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.558030][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.576352][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.593853][ T6565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 299.678204][ T6592] netlink: 'syz.1.673': attribute type 6 has an invalid length. [ 299.908593][ T6597] loop4: detected capacity change from 0 to 736 [ 300.231184][ T1325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 300.341986][ T6609] hub 8-0:1.0: USB hub found [ 300.348166][ T6609] hub 8-0:1.0: 1 port detected [ 301.616242][ T1325] usb 4-1: Using ep0 maxpacket: 16 [ 302.434889][ T1325] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 302.473815][ T1325] usb 4-1: config 251 has no interface number 0 [ 302.480926][ T1325] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 302.512379][ T1325] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 302.543291][ T1325] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 302.580987][ T1325] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 302.598976][ T1325] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.664630][ T6625] misc userio: No port type given on /dev/userio [ 303.034505][ T6626] hub 8-0:1.0: USB hub found [ 303.040276][ T6626] hub 8-0:1.0: 1 port detected [ 303.889642][ T1325] usb 4-1: config 251 interface 202 has no altsetting 0 [ 304.535474][ T1325] usb 4-1: string descriptor 0 read error: -71 [ 304.551163][ T1325] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 305.312937][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.385154][ T1325] usb 4-1: can't set config #251, error -71 [ 305.404213][ T1325] usb 4-1: USB disconnect, device number 12 [ 305.645984][ T6647] loop2: detected capacity change from 0 to 8192 [ 305.698775][ T6647] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.719865][ T6653] loop3: detected capacity change from 0 to 2048 [ 305.730680][ T26] audit: type=1800 audit(1771914054.908:13): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.689" name="file2" dev="loop2" ino=1048601 res=0 errno=0 [ 305.738076][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.760414][ T6655] loop1: detected capacity change from 0 to 2048 [ 305.784995][ T6647] FAT-fs (loop2): Filesystem has been set read-only [ 305.803444][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.864057][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.886306][ T6653] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 305.900783][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.912059][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.921915][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.931199][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 305.949178][ T6655] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 306.035008][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 306.043858][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 306.116039][ T6647] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 307.199801][ T6668] loop2: detected capacity change from 0 to 1024 [ 307.435067][ T6668] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 307.454576][ T6668] EXT4-fs (loop2): orphan cleanup on readonly fs [ 307.480684][ T6668] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.694: Freeing blocks not in datazone - block = 0, count = 4096 [ 307.505795][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.697'. [ 307.515900][ T6668] EXT4-fs (loop2): 1 orphan inode deleted [ 307.522058][ T6668] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.124255][ T6696] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 309.714580][ T6704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.804925][ T4281] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 309.822773][ T6701] loop1: detected capacity change from 0 to 8192 [ 309.851637][ T6705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.910652][ T6701] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.947731][ T26] audit: type=1800 audit(1771914059.128:14): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.705" name="file2" dev="loop1" ino=1048602 res=0 errno=0 [ 309.972600][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 309.994795][ T6701] FAT-fs (loop1): Filesystem has been set read-only [ 310.005308][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.014454][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.061955][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.064814][ T4281] usb 4-1: Using ep0 maxpacket: 16 [ 310.095289][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.140493][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.167575][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.191447][ T6597] Set syz1 is full, maxelem 65536 reached [ 310.198141][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.223835][ T6708] loop0: detected capacity change from 0 to 2048 [ 310.231482][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.251978][ T4281] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 310.252430][ T6701] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 310.273597][ T4281] usb 4-1: config 251 has no interface number 0 [ 310.305996][ T4281] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 310.328822][ T6708] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 310.340930][ T4281] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 310.547399][ T4281] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 310.560004][ T4281] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 310.571272][ T4281] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.585727][ T4281] usb 4-1: config 251 interface 202 has no altsetting 0 [ 310.765062][ T4281] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 310.780436][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.819214][ T4281] usb 4-1: Product: syz [ 310.823444][ T4281] usb 4-1: Manufacturer: syz [ 311.004808][ T4281] usb 4-1: SerialNumber: syz [ 311.857226][ T4281] usb 4-1: can't set config #251, error -71 [ 311.865156][ T4281] usb 4-1: USB disconnect, device number 13 [ 313.054188][ T6745] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.062416][ T6736] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 313.217491][ T6748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 316.000986][ T6765] hub 8-0:1.0: USB hub found [ 316.007251][ T6765] hub 8-0:1.0: 1 port detected [ 317.390452][ T6781] hub 8-0:1.0: USB hub found [ 317.391212][ T6781] hub 8-0:1.0: 1 port detected [ 317.939411][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.142938][ T6785] hub 8-0:1.0: USB hub found [ 318.154983][ T6785] hub 8-0:1.0: 1 port detected [ 320.548846][ T6796] netlink: 'syz.0.731': attribute type 4 has an invalid length. [ 320.642430][ T6799] loop1: detected capacity change from 0 to 736 [ 323.095640][ T6824] hub 8-0:1.0: USB hub found [ 323.101855][ T6824] hub 8-0:1.0: 1 port detected [ 324.217579][ T6830] tipc: Started in network mode [ 324.346571][ T6830] tipc: Node identity 4aa424053ede, cluster identity 4711 [ 324.776817][ T6830] tipc: Enabled bearer , priority 0 [ 324.857783][ T6830] tipc: Resetting bearer [ 324.999507][ T6828] tipc: Disabling bearer [ 325.166288][ T6841] netlink: 'syz.4.746': attribute type 4 has an invalid length. [ 325.328261][ T6846] loop2: detected capacity change from 0 to 2048 [ 325.441242][ T6850] loop4: detected capacity change from 0 to 2048 [ 325.604917][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 325.618029][ T6846] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 325.647699][ T6850] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 326.671948][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 326.734861][ T21] usb 2-1: device descriptor read/all, error -71 [ 327.035546][ T6869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.185285][ T6871] loop_set_status: loop7 () has still dirty pages (nrpages=192) [ 327.505121][ T6876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.708042][ T6882] loop2: detected capacity change from 0 to 4096 [ 327.776296][ T6882] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 328.040579][ T6882] netlink: 'syz.2.756': attribute type 16 has an invalid length. [ 328.145818][ T6882] netlink: 'syz.2.756': attribute type 17 has an invalid length. [ 328.387387][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.441475][ T6882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.619438][ T6882] syz.2.756 (6882) used greatest stack depth: 21136 bytes left [ 328.967608][ T6906] loop3: detected capacity change from 0 to 2048 [ 329.081964][ T6906] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 329.205341][ T6912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.325188][ T6915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 330.354994][ T6943] loop2: detected capacity change from 0 to 736 [ 330.870504][ T6945] loop2: detected capacity change from 0 to 4096 [ 330.994825][ T6945] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 331.519024][ T6945] netlink: 'syz.2.772': attribute type 16 has an invalid length. [ 331.613377][ T6945] netlink: 'syz.2.772': attribute type 17 has an invalid length. [ 332.464885][ T6945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.662931][ T6965] loop0: detected capacity change from 0 to 8192 [ 332.911132][ T6975] hub 8-0:1.0: USB hub found [ 332.918666][ T6975] hub 8-0:1.0: 1 port detected [ 333.441279][ T6965] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.718704][ T26] audit: type=1800 audit(1771914084.898:15): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.777" name="file2" dev="loop0" ino=1048603 res=0 errno=0 [ 335.720273][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.752639][ T6965] FAT-fs (loop0): Filesystem has been set read-only [ 335.759483][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.809555][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.819193][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.828302][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.837238][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.847020][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.857274][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.866471][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 335.875869][ T6965] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 337.028092][ T6993] loop0: detected capacity change from 0 to 2048 [ 337.142509][ T6993] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 337.456514][ T7000] hub 8-0:1.0: USB hub found [ 337.462330][ T7000] hub 8-0:1.0: 1 port detected [ 338.551101][ T7002] loop4: detected capacity change from 0 to 2048 [ 338.636941][ T7002] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 338.683695][ T7006] loop1: detected capacity change from 0 to 4096 [ 338.699657][ T7006] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 339.001350][ T7006] netlink: 'syz.1.789': attribute type 16 has an invalid length. [ 339.034180][ T7006] netlink: 'syz.1.789': attribute type 17 has an invalid length. [ 339.102147][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 339.162681][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 339.201828][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 339.227987][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 339.268980][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 339.319260][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 339.393218][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.463652][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.514599][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.431214][ T7021] loop2: detected capacity change from 0 to 8192 [ 341.444884][ T7023] loop_set_status: loop7 () has still dirty pages (nrpages=229) [ 341.543021][ T7021] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.614512][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.624061][ T26] audit: type=1800 audit(1771914090.788:16): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.793" name="file2" dev="loop2" ino=1048604 res=0 errno=0 [ 341.716763][ T7021] FAT-fs (loop2): Filesystem has been set read-only [ 341.771818][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.820989][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.864857][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.908467][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.948130][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.957582][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.966643][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 341.975650][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 342.034850][ T7021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 345.105347][ T7048] hub 8-0:1.0: USB hub found [ 345.112616][ T7048] hub 8-0:1.0: 1 port detected [ 346.251759][ T7056] hub 8-0:1.0: USB hub found [ 346.257472][ T7056] hub 8-0:1.0: 1 port detected [ 346.450516][ T7052] loop4: detected capacity change from 0 to 4096 [ 347.233521][ T7058] loop2: detected capacity change from 0 to 2048 [ 347.270602][ T7052] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 347.286379][ T7060] device syzkaller0 entered promiscuous mode [ 347.375777][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 347.425685][ T7052] netlink: 'syz.4.802': attribute type 16 has an invalid length. [ 347.433559][ T7052] netlink: 'syz.4.802': attribute type 17 has an invalid length. [ 348.770570][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.835334][ T7052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.603987][ T7074] loop4: detected capacity change from 0 to 2048 [ 349.721299][ T7074] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 350.398736][ T7080] binder: 7078:7080 ioctl 4018620d 0 returned -22 [ 350.557862][ T7080] binder: 7078:7080 unknown command 1074553620 [ 350.579754][ T7080] binder: 7078:7080 ioctl c0306201 200000000640 returned -22 [ 352.584969][ T7098] loop_set_status: loop7 () has still dirty pages (nrpages=513) [ 352.598789][ T7102] device syzkaller0 entered promiscuous mode [ 356.400013][ T7131] hub 8-0:1.0: USB hub found [ 356.405519][ T7131] hub 8-0:1.0: 1 port detected [ 357.390308][ T7135] device syzkaller0 entered promiscuous mode [ 357.446329][ T7134] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 359.194557][ T7146] binder: 7145:7146 ioctl 4018620d 0 returned -22 [ 359.217686][ T7146] binder: 7145:7146 unknown command 1074553620 [ 359.316543][ T7146] binder: 7145:7146 ioctl c0306201 200000000640 returned -22 [ 361.767356][ T7160] loop2: detected capacity change from 0 to 8192 [ 361.781654][ T7171] netlink: 'syz.4.837': attribute type 4 has an invalid length. [ 361.962974][ T7160] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.997383][ T26] audit: type=1800 audit(1771914111.178:17): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.829" name="file2" dev="loop2" ino=1048605 res=0 errno=0 [ 361.998540][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.067976][ T7160] FAT-fs (loop2): Filesystem has been set read-only [ 362.077413][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.087968][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.107085][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.116196][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.126698][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.136354][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.145450][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.154363][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.163698][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 362.411574][ T7181] device syzkaller0 entered promiscuous mode [ 365.052705][ T7188] loop4: detected capacity change from 0 to 2048 [ 365.112759][ T7188] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 365.981652][ T7209] hub 8-0:1.0: USB hub found [ 365.988181][ T7209] hub 8-0:1.0: 1 port detected [ 366.940300][ T7205] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 367.181841][ T7219] loop4: detected capacity change from 0 to 2048 [ 367.266045][ T7221] loop3: detected capacity change from 0 to 2048 [ 367.292289][ T7219] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 367.356997][ T7221] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 367.584627][ T7232] loop0: detected capacity change from 0 to 736 [ 368.903859][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 369.453636][ T7243] device syzkaller0 entered promiscuous mode [ 369.677679][ T7241] loop3: detected capacity change from 0 to 8192 [ 369.729172][ T7241] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.782722][ T26] audit: type=1800 audit(1771914118.958:18): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.853" name="file2" dev="loop3" ino=1048606 res=0 errno=0 [ 369.783750][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 369.988152][ T7241] FAT-fs (loop3): Filesystem has been set read-only [ 369.997475][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.007121][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.016213][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.046562][ T7257] hub 8-0:1.0: USB hub found [ 370.054907][ T7257] hub 8-0:1.0: 1 port detected [ 370.136814][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.146482][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.155851][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.213380][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.274478][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 370.345948][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 371.151166][ T7247] binder: 7244:7247 ioctl 4018620d 0 returned -22 [ 371.201072][ T7247] binder: 7244:7247 unknown command 1074553620 [ 371.214135][ T7247] binder: 7244:7247 ioctl c0306201 200000000640 returned -22 [ 372.591351][ T7278] hub 8-0:1.0: USB hub found [ 372.596820][ T7278] hub 8-0:1.0: 1 port detected [ 373.670417][ T7276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.804412][ T7297] hub 8-0:1.0: USB hub found [ 374.810103][ T7297] hub 8-0:1.0: 1 port detected [ 374.876172][ T7281] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.647453][ T7300] hub 8-0:1.0: USB hub found [ 376.653387][ T7300] hub 8-0:1.0: 1 port detected [ 377.605753][ T7310] loop_set_status: loop7 () has still dirty pages (nrpages=225) [ 378.154556][ T7317] binder: 7316:7317 ioctl 4018620d 0 returned -22 [ 378.227018][ T7317] binder: 7316:7317 unknown command 1074553620 [ 378.264226][ T7317] binder: 7316:7317 ioctl c0306201 200000000640 returned -22 [ 378.507655][ T7320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 379.563691][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.993943][ T7338] loop4: detected capacity change from 0 to 2048 [ 381.124203][ T7347] loop2: detected capacity change from 0 to 128 [ 381.900863][ T7347] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 381.900883][ T7338] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 381.912170][ T7347] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 381.980834][ T7321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.664383][ T7357] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 383.508899][ T7370] device syzkaller0 entered promiscuous mode [ 383.793023][ T7375] netlink: 'syz.4.894': attribute type 4 has an invalid length. [ 383.925386][ T7377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.012113][ T7378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.366265][ T7389] hub 8-0:1.0: USB hub found [ 384.372058][ T7389] hub 8-0:1.0: 1 port detected [ 385.367312][ T7393] device syzkaller0 entered promiscuous mode [ 385.440949][ T7394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 385.876508][ T7408] device syzkaller0 entered promiscuous mode [ 385.898720][ T7407] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.438192][ T7417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.705860][ T7424] netlink: 56 bytes leftover after parsing attributes in process `syz.2.911'. [ 386.780150][ T7426] device syzkaller0 entered promiscuous mode [ 386.901249][ T7428] loop1: detected capacity change from 0 to 4096 [ 386.964777][ T7428] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 386.967658][ T7433] device syzkaller0 entered promiscuous mode [ 387.040190][ T7435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.268611][ T7438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.560125][ T7440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.594992][ T7428] netlink: 'syz.1.913': attribute type 16 has an invalid length. [ 387.618882][ T7428] netlink: 'syz.1.913': attribute type 17 has an invalid length. [ 387.625664][ T26] audit: type=1800 audit(1771914136.808:19): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.913" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 387.648658][ T7428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.677604][ T7442] device syzkaller0 entered promiscuous mode [ 389.358999][ T7453] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.661277][ T7463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.768027][ T7468] netlink: 'syz.3.925': attribute type 4 has an invalid length. [ 389.857820][ T7474] netlink: 'syz.4.928': attribute type 4 has an invalid length. [ 390.607800][ T7481] netlink: 'syz.3.930': attribute type 4 has an invalid length. [ 390.806623][ T7484] loop0: detected capacity change from 0 to 4096 [ 390.897682][ T7484] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 391.243852][ T7495] misc userio: No port type given on /dev/userio [ 392.959034][ T7497] device syzkaller0 entered promiscuous mode [ 392.972724][ T7484] netlink: 'syz.0.932': attribute type 16 has an invalid length. [ 393.090827][ T7484] netlink: 'syz.0.932': attribute type 17 has an invalid length. [ 393.118364][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 393.125724][ T26] audit: type=1800 audit(1771914142.298:20): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.932" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 393.149962][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 393.159727][ T7503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.938'. [ 393.160331][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 393.178468][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 393.187175][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 393.197903][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 393.251073][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 393.279481][ T7484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.372906][ T7498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.482049][ T7504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.482209][ T7512] loop4: detected capacity change from 0 to 128 [ 393.586178][ T7514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.680675][ T7516] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.902683][ T7527] misc userio: No port type given on /dev/userio [ 395.003605][ T7524] netlink: 'syz.4.945': attribute type 4 has an invalid length. [ 395.250912][ T7531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.402027][ T7540] loop4: detected capacity change from 0 to 4096 [ 395.435841][ T7529] loop3: detected capacity change from 0 to 8192 [ 395.461156][ T7544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.479065][ T7540] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 395.486553][ T7529] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.569427][ T26] audit: type=1800 audit(1771914144.748:21): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.947" name="file2" dev="loop3" ino=1048608 res=0 errno=0 [ 395.581021][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.642298][ T7547] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.698378][ T7529] FAT-fs (loop3): Filesystem has been set read-only [ 395.700303][ T26] audit: type=1800 audit(1771914144.878:22): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.952" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 395.732565][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.752763][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.798730][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.817791][ T7540] netlink: 'syz.4.952': attribute type 16 has an invalid length. [ 395.828824][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.834421][ T7540] netlink: 'syz.4.952': attribute type 17 has an invalid length. [ 395.854048][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.875621][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.890460][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.901643][ T7540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.902661][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.928070][ T7529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 395.934979][ T7550] loop_set_status: loop7 () has still dirty pages (nrpages=417) [ 396.758895][ T7561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.960'. [ 396.793531][ T7563] netlink: 'syz.2.961': attribute type 4 has an invalid length. [ 397.195869][ T7571] misc userio: No port type given on /dev/userio [ 397.759768][ T7567] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.485710][ T7600] netlink: 56 bytes leftover after parsing attributes in process `syz.3.972'. [ 399.971671][ T7605] netlink: 'syz.2.973': attribute type 4 has an invalid length. [ 400.075544][ T7608] hub 8-0:1.0: USB hub found [ 400.081003][ T7608] hub 8-0:1.0: 1 port detected [ 401.398865][ T7610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.494903][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 401.661546][ T7611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.734914][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 401.865008][ T13] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 401.888005][ T13] usb 3-1: config 251 has no interface number 0 [ 401.902268][ T13] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 401.923825][ T13] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 401.950392][ T13] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 401.983892][ T13] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 402.023024][ T13] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.046395][ T13] usb 3-1: config 251 interface 202 has no altsetting 0 [ 402.102704][ T7636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.215117][ T13] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 402.238434][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.271158][ T13] usb 3-1: Product: syz [ 402.278529][ T13] usb 3-1: Manufacturer: syz [ 402.285464][ T13] usb 3-1: SerialNumber: syz [ 402.326372][ T7621] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 402.333616][ T7621] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 403.045077][ T13] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 403.079058][ T13] usb 3-1: USB disconnect, device number 8 [ 403.358800][ T7659] loop3: detected capacity change from 0 to 128 [ 403.641525][ T7659] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 403.653017][ T7659] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.160201][ T7672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.318519][ T7678] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 405.003340][ T7690] device syzkaller0 entered promiscuous mode [ 407.094774][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 407.335624][ T7716] mmap: syz.1.1005 (7716) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 407.534754][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 408.328810][ T7720] netlink: 'syz.1.1006': attribute type 4 has an invalid length. [ 408.404981][ T21] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 408.412734][ T21] usb 4-1: can't read configurations, error -71 [ 408.572356][ T7725] loop2: detected capacity change from 0 to 128 [ 408.757229][ T7739] hub 8-0:1.0: USB hub found [ 408.763160][ T7739] hub 8-0:1.0: 1 port detected [ 408.971178][ T7734] loop1: detected capacity change from 0 to 4096 [ 409.327901][ T7734] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 409.690891][ T7743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.809152][ T7734] netlink: 'syz.1.1009': attribute type 16 has an invalid length. [ 409.837124][ T7734] netlink: 'syz.1.1009': attribute type 17 has an invalid length. [ 409.891980][ T7734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.126223][ T7752] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 410.184424][ T7757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 411.413524][ T7766] netlink: 'syz.4.1019': attribute type 4 has an invalid length. [ 412.705017][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 412.944744][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 413.107034][ T21] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 413.338849][ T21] usb 3-1: config 251 has no interface number 0 [ 413.345618][ T21] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 413.355088][ T7775] loop4: detected capacity change from 0 to 8192 [ 413.365059][ T21] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 413.399499][ T21] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 413.453154][ T7780] loop3: detected capacity change from 0 to 4096 [ 413.459960][ T7775] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 413.484326][ T21] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 413.486958][ T7780] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 413.499194][ T21] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.519277][ T21] usb 3-1: config 251 interface 202 has no altsetting 0 [ 413.537963][ T7775] REISERFS (device loop4): using ordered data mode [ 413.545560][ T7775] reiserfs: using flush barriers [ 413.771259][ T7775] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 413.805568][ T21] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 413.915928][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.051504][ T21] usb 3-1: Product: syz [ 414.121987][ T7775] REISERFS (device loop4): checking transaction log (loop4) [ 414.132467][ T21] usb 3-1: Manufacturer: syz [ 414.210777][ T21] usb 3-1: SerialNumber: syz [ 414.268873][ T7775] REISERFS (device loop4): Using r5 hash to sort names [ 414.462662][ T7775] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 414.547843][ T7775] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 414.582944][ T7775] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 414.597003][ T21] usb 3-1: can't set config #251, error -71 [ 414.631111][ T21] usb 3-1: USB disconnect, device number 9 [ 414.642306][ T7775] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 414.660084][ T7792] loop0: detected capacity change from 0 to 1024 [ 414.696643][ T7780] netlink: 'syz.3.1024': attribute type 16 has an invalid length. [ 414.725631][ T7780] netlink: 'syz.3.1024': attribute type 17 has an invalid length. [ 414.729914][ T7792] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 414.743964][ T7792] EXT4-fs (loop0): orphan cleanup on readonly fs [ 414.755846][ T7792] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1027: Freeing blocks not in datazone - block = 0, count = 4096 [ 414.775111][ T7792] EXT4-fs (loop0): 1 orphan inode deleted [ 414.786243][ T7792] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.849923][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.876248][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.888903][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.916767][ T7780] syz.3.1024 (7780) used greatest stack depth: 21104 bytes left [ 419.946557][ T7833] loop2: detected capacity change from 0 to 8192 [ 420.007660][ T7841] misc userio: Invalid payload size [ 420.663347][ T7842] hub 8-0:1.0: USB hub found [ 420.669906][ T7842] hub 8-0:1.0: 1 port detected [ 421.013283][ T7833] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.059307][ T26] audit: type=1800 audit(1771914170.238:23): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1037" name="file2" dev="loop2" ino=1048610 res=0 errno=0 [ 421.103427][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.198343][ T7833] FAT-fs (loop2): Filesystem has been set read-only [ 421.205322][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.225751][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.234577][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.243471][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.252443][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.263457][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.323233][ T7844] loop1: detected capacity change from 0 to 8192 [ 421.344773][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.353618][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.409243][ T7844] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 421.419799][ T7833] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 421.456322][ T7844] REISERFS (device loop1): using ordered data mode [ 421.473216][ T7844] reiserfs: using flush barriers [ 421.494887][ T7844] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 421.515178][ T7844] REISERFS (device loop1): checking transaction log (loop1) [ 421.557268][ T7844] REISERFS (device loop1): Using r5 hash to sort names [ 421.585145][ T7844] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 421.653296][ T7844] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 421.732888][ T7844] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 421.799141][ T7844] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 423.602317][ T7862] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 424.072932][ T7864] device syzkaller0 entered promiscuous mode [ 424.655658][ T7875] misc userio: Invalid payload size [ 426.042583][ T7883] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.161046][ T7888] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 428.689743][ T7895] loop4: detected capacity change from 0 to 8192 [ 428.784312][ T7895] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 428.818573][ T7895] REISERFS (device loop4): using ordered data mode [ 428.846594][ T7895] reiserfs: using flush barriers [ 428.893948][ T7895] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.951977][ T7895] REISERFS (device loop4): checking transaction log (loop4) [ 429.074883][ T7895] REISERFS (device loop4): Using r5 hash to sort names [ 429.099092][ T7895] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 429.134482][ T7908] loop2: detected capacity change from 0 to 4096 [ 429.153854][ T7895] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 429.185020][ T7908] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 429.313496][ T7895] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 429.426699][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 429.447533][ T7912] netlink: 'syz.2.1059': attribute type 16 has an invalid length. [ 429.459827][ T7895] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 429.510611][ T7912] netlink: 'syz.2.1059': attribute type 17 has an invalid length. [ 429.525661][ T7912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.672085][ T7918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1063'. [ 429.824578][ T7923] netlink: 'syz.1.1066': attribute type 4 has an invalid length. [ 429.897300][ T7927] loop0: detected capacity change from 0 to 128 [ 430.150514][ T7927] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 430.162427][ T7927] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 430.283723][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 430.789896][ T7936] device syzkaller0 entered promiscuous mode [ 432.897118][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1072'. [ 433.095218][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 433.337721][ T7953] loop4: detected capacity change from 0 to 128 [ 433.415262][ T7953] FAT-fs (loop4): bogus number of reserved sectors [ 433.422039][ T7953] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 433.431462][ T7953] FAT-fs (loop4): Can't find a valid FAT filesystem [ 434.414039][ T7959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1075'. [ 434.428018][ T7948] syz.3.1073 (7948) used greatest stack depth: 20848 bytes left [ 434.576593][ T7957] loop1: detected capacity change from 0 to 4096 [ 434.659796][ T7957] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 436.237626][ T7957] netlink: 'syz.1.1074': attribute type 16 has an invalid length. [ 436.262706][ T7957] netlink: 'syz.1.1074': attribute type 17 has an invalid length. [ 436.313757][ T7957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.362885][ T7976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.444317][ T7978] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.472191][ T7974] loop3: detected capacity change from 0 to 8192 [ 436.564590][ T7974] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 436.580492][ T7980] loop1: detected capacity change from 0 to 2048 [ 436.616584][ T7974] REISERFS (device loop3): using ordered data mode [ 436.623591][ T7974] reiserfs: using flush barriers [ 436.658131][ T7974] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 436.696629][ T7974] REISERFS (device loop3): checking transaction log (loop3) [ 436.722714][ T7974] REISERFS (device loop3): Using r5 hash to sort names [ 436.753814][ T7974] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 436.794814][ T7974] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 436.888102][ T7980] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 436.906862][ T7974] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 436.915196][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 437.134138][ T7989] device syzkaller0 entered promiscuous mode [ 438.068032][ T7993] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 438.258350][ T8002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1089'. [ 438.754877][ T8014] netlink: 'syz.4.1094': attribute type 16 has an invalid length. [ 440.092064][ T8014] netlink: 'syz.4.1094': attribute type 17 has an invalid length. [ 440.214368][ T8014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.327284][ T8024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.337898][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.462074][ T8030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.475842][ T8026] loop_set_status: loop7 () has still dirty pages (nrpages=128) [ 440.728458][ T8032] device syzkaller0 entered promiscuous mode [ 442.265165][ T8057] netlink: 'syz.2.1103': attribute type 4 has an invalid length. [ 442.410636][ T8059] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1104'. [ 442.747104][ T8067] netlink: 'syz.4.1107': attribute type 16 has an invalid length. [ 442.780918][ T8067] netlink: 'syz.4.1107': attribute type 17 has an invalid length. [ 442.805049][ T8067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.786364][ T8090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.553882][ T8091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.618630][ T8100] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1116'. [ 446.744627][ T8106] netlink: 'syz.0.1118': attribute type 4 has an invalid length. [ 449.469617][ T8125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.708281][ T8140] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1129'. [ 449.769093][ T8138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 452.188714][ T8160] netlink: 'syz.1.1135': attribute type 4 has an invalid length. [ 453.265502][ T8163] loop0: detected capacity change from 0 to 8192 [ 453.322188][ T8169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.407289][ T8163] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 453.425495][ T8163] REISERFS (device loop0): using ordered data mode [ 453.456058][ T8173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.463282][ T8163] reiserfs: using flush barriers [ 453.525861][ T8163] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 453.567148][ T8172] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.600363][ T8163] REISERFS (device loop0): checking transaction log (loop0) [ 453.616170][ T8163] REISERFS (device loop0): Using r5 hash to sort names [ 453.623750][ T8163] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 453.667629][ T8174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.694828][ T8163] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 453.785892][ T8163] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 454.253295][ T8182] loop2: detected capacity change from 0 to 128 [ 456.157335][ T4228] kworker/dying (4228) used greatest stack depth: 19736 bytes left [ 456.268399][ T8182] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 456.280203][ T8182] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 456.435636][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 458.159780][ T8195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.841790][ T8200] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.928069][ T8217] loop3: detected capacity change from 0 to 128 [ 459.958018][ T8212] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.055234][ T8216] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.683250][ T8234] loop2: detected capacity change from 0 to 128 [ 461.283114][ T8234] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 461.294319][ T8234] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.338878][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 469.027357][ T8305] binder: 8303:8305 ioctl 4018620d 0 returned -22 [ 469.036433][ T8305] binder: 8303:8305 ioctl c0306201 0 returned -14 [ 476.474991][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 476.532872][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 476.700584][ T8363] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 478.022138][ T8372] netlink: 'syz.3.1196': attribute type 4 has an invalid length. [ 481.169038][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 481.230402][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 482.607879][ T8411] fuse: Bad value for 'fd' [ 495.569967][ T8517] loop0: detected capacity change from 0 to 4096 [ 495.642255][ T8517] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 499.216528][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'. [ 499.253444][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'. [ 499.348542][ T8551] fuse: Bad value for 'fd' [ 501.451673][ T8575] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 501.773419][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.553494][ T8588] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1254'. [ 506.296221][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1267'. [ 506.320021][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1267'. [ 506.455597][ T8639] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 506.647255][ T8636] fuse: Bad value for 'fd' [ 507.126799][ T8646] loop0: detected capacity change from 0 to 4096 [ 507.167298][ T8646] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 508.772649][ T8655] fuse: Bad value for 'fd' [ 508.792245][ T8672] fuse: Bad value for 'fd' [ 509.460234][ T8688] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1283'. [ 509.481289][ T8691] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1285'. [ 510.962567][ T8704] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1288'. [ 516.371652][ T8724] fuse: Bad value for 'fd' [ 516.498038][ T8736] netlink: 'syz.0.1297': attribute type 4 has an invalid length. [ 516.617827][ T8740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1300'. [ 516.690979][ T8744] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1302'. [ 516.706330][ T8740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1300'. [ 519.043797][ T8750] loop0: detected capacity change from 0 to 8192 [ 519.090591][ T8750] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.861876][ T8772] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1310'. [ 519.952380][ T8770] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1311'. [ 519.963600][ T8770] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1311'. [ 520.683540][ T8782] netlink: 'syz.4.1312': attribute type 4 has an invalid length. [ 523.151754][ T8803] hub 8-0:1.0: USB hub found [ 523.157026][ T8803] hub 8-0:1.0: 1 port detected [ 524.051868][ T8809] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1321'. [ 524.119114][ T8811] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 524.464761][ T8823] loop0: detected capacity change from 0 to 1024 [ 525.086093][ T8823] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 525.104275][ T8823] EXT4-fs (loop0): orphan cleanup on readonly fs [ 525.119214][ T8823] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1326: Freeing blocks not in datazone - block = 0, count = 4096 [ 526.934839][ T8823] EXT4-fs (loop0): 1 orphan inode deleted [ 526.940629][ T8823] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 528.541998][ T8865] netlink: 'syz.4.1338': attribute type 4 has an invalid length. [ 528.968645][ T8872] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 531.550761][ T8897] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1347'. [ 532.606236][ T8913] hub 8-0:1.0: USB hub found [ 532.611243][ T8913] hub 8-0:1.0: 1 port detected [ 532.618317][ T8904] loop0: detected capacity change from 0 to 1024 [ 532.896193][ T8920] netlink: 'syz.3.1354': attribute type 4 has an invalid length. [ 533.656492][ T8924] netlink: 'syz.1.1355': attribute type 4 has an invalid length. [ 533.737081][ T8904] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 533.746653][ T8904] EXT4-fs (loop0): orphan cleanup on readonly fs [ 533.753425][ T8904] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1348: Freeing blocks not in datazone - block = 0, count = 4096 [ 533.760546][ T8928] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1357'. [ 533.768022][ T8904] EXT4-fs (loop0): 1 orphan inode deleted [ 533.782537][ T8904] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 533.965727][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'. [ 535.925159][ T8959] netlink: 'syz.3.1367': attribute type 4 has an invalid length. [ 535.969446][ T8964] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 535.989072][ T8965] hub 8-0:1.0: USB hub found [ 535.994774][ T8965] hub 8-0:1.0: 1 port detected [ 537.741834][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 539.800862][ T8999] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1379'. [ 541.314913][ T9018] hub 8-0:1.0: USB hub found [ 541.320173][ T9018] hub 8-0:1.0: 1 port detected [ 541.726266][ T9031] misc userio: No port type given on /dev/userio [ 548.291073][ T9089] binder: 9085:9089 ioctl 4018620d 0 returned -22 [ 548.314530][ T9089] binder: 9085:9089 unknown command 1074553620 [ 548.321276][ T9089] binder: 9085:9089 ioctl c0306201 200000000640 returned -22 [ 548.407717][ T9099] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1412'. [ 548.616338][ T9107] nftables ruleset with unbound chain [ 553.850281][ T9180] misc userio: No port type given on /dev/userio [ 556.121186][ T9200] binder: 9194:9200 ioctl 4018620d 0 returned -22 [ 556.129951][ T9200] binder: 9194:9200 unknown command 1074553620 [ 556.136462][ T9200] binder: 9194:9200 ioctl c0306201 200000000640 returned -22 [ 556.985641][ T9223] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 559.150798][ T9255] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1459'. [ 559.184004][ T9249] binder: 9248:9249 ioctl 4018620d 0 returned -22 [ 559.195763][ T9249] binder: 9248:9249 unknown command 1074553620 [ 559.202108][ T9249] binder: 9248:9249 ioctl c0306201 200000000640 returned -22 [ 562.906701][ T9295] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 563.765217][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.809372][ T9304] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1473'. [ 564.070664][ T9289] fuse: Bad value for 'fd' [ 567.578896][ T9338] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 568.357044][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 568.369153][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 569.349141][ T9389] binder: 9388:9389 ioctl 4018620d 0 returned -22 [ 569.360616][ T9389] binder: 9388:9389 unknown command 1074553620 [ 569.367371][ T9389] binder: 9388:9389 ioctl c0306201 200000000640 returned -22 [ 570.005043][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 570.026838][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 571.941757][ T9435] binder: 9434:9435 ioctl 4018620d 0 returned -22 [ 571.984048][ T9435] binder: 9434:9435 unknown command 1074553620 [ 571.990372][ T9435] binder: 9434:9435 ioctl c0306201 200000000640 returned -22 [ 572.662307][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 572.697209][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 574.538293][ T9465] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1531'. [ 575.181448][ T9486] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.049807][ T9566] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.442726][ T9579] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1568'. [ 581.026485][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 581.105103][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 583.474968][ T9620] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 583.523354][ T9627] binder: 9624:9627 ioctl 4018620d 0 returned -22 [ 583.546614][ T9627] binder: 9624:9627 unknown command 1074553620 [ 583.553099][ T9627] binder: 9624:9627 ioctl c0306201 200000000640 returned -22 [ 586.676533][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 589.855112][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 589.902009][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 607.675335][ T9881] misc userio: No port type given on /dev/userio [ 608.466598][ T9889] hub 8-0:1.0: USB hub found [ 608.471804][ T9889] hub 8-0:1.0: 1 port detected [ 608.846447][ T9897] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1663'. [ 608.921842][ T9897] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1663'. [ 613.038539][ T9941] loop1: detected capacity change from 0 to 32768 [ 613.254084][ T9941] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1679 (9941) [ 614.115147][ T9941] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 614.157534][ T9941] BTRFS info (device loop1): enabling disk space caching [ 614.215876][ T9941] BTRFS info (device loop1): force clearing of disk cache [ 614.223154][ T9941] BTRFS info (device loop1): turning off barriers [ 614.280634][ T9941] BTRFS info (device loop1): setting nodatasum [ 614.297226][ T9941] BTRFS info (device loop1): enabling ssd optimizations [ 614.335953][ T9941] BTRFS info (device loop1): using spread ssd allocation scheme [ 614.343760][ T9941] BTRFS info (device loop1): disk space caching is enabled [ 614.407623][ T9941] BTRFS info (device loop1): has skinny extents [ 615.709643][ T9941] BTRFS error (device loop1): open_ctree failed: -12 [ 615.842150][ T8456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (8456) [ 618.124215][T10034] chnl_net:caif_netlink_parms(): no params data found [ 618.457767][T10034] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.465183][T10034] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.493715][T10034] device bridge_slave_0 entered promiscuous mode [ 618.596951][T10034] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.634778][T10034] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.642958][T10034] device bridge_slave_1 entered promiscuous mode [ 618.818377][T10034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.839777][T10034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.895366][T10071] misc userio: No port type given on /dev/userio [ 619.594002][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 619.764279][T10034] team0: Port device team_slave_0 added [ 619.818077][T10034] team0: Port device team_slave_1 added [ 619.920894][T10034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.993594][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.074716][T10034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.139645][T10034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.184696][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.333178][T10034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.522906][T10034] device hsr_slave_0 entered promiscuous mode [ 620.541408][T10034] device hsr_slave_1 entered promiscuous mode [ 620.569452][T10034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.583089][T10034] Cannot create hsr debugfs directory [ 620.638226][T10093] loop0: detected capacity change from 0 to 1024 [ 620.684104][T10093] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 620.703318][T10093] EXT4-fs (loop0): orphan cleanup on readonly fs [ 620.712657][T10093] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1719: Freeing blocks not in datazone - block = 0, count = 4096 [ 620.776882][T10034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.793187][T10034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 620.802460][T10093] EXT4-fs (loop0): 1 orphan inode deleted [ 620.811723][T10093] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 620.854245][T10034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 621.118019][T10034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.696629][T10009] Bluetooth: hci5: command 0x041b tx timeout [ 622.090976][T10034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.187976][T10116] misc userio: No port type given on /dev/userio [ 622.605284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.739459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.799043][T10034] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.938422][ T745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.017041][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.036567][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.064919][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.072250][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.088351][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.115551][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.150195][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.157596][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.175344][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.191319][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.232881][ T745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.318066][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.333875][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.359582][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.378663][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.402915][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.421587][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.441866][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.471002][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.498760][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.533077][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.551913][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.590945][ T745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.681511][ T745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.775443][T10009] Bluetooth: hci5: command 0x040f tx timeout [ 624.601122][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.613504][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.647065][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.713324][T10034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.877315][ T745] tipc: Left network mode [ 624.969552][T10159] loop0: detected capacity change from 0 to 1024 [ 625.032802][T10159] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 625.107491][T10159] EXT4-fs (loop0): orphan cleanup on readonly fs [ 625.137922][T10159] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1731: Freeing blocks not in datazone - block = 0, count = 4096 [ 625.176958][T10159] EXT4-fs (loop0): 1 orphan inode deleted [ 625.183210][T10159] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 626.216283][T10009] Bluetooth: hci5: command 0x0419 tx timeout [ 626.515733][T10196] binder: 10195:10196 ioctl 4018620d 0 returned -22 [ 626.523484][T10196] binder: 10195:10196 unknown command 1074553620 [ 626.529885][T10196] binder: 10195:10196 ioctl c0306201 200000000640 returned -22 [ 626.611149][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.642598][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.790550][T10034] device veth0_vlan entered promiscuous mode [ 626.878285][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.894265][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.910255][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.919620][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.952352][T10034] device veth1_vlan entered promiscuous mode [ 627.063741][T10034] device veth0_macvtap entered promiscuous mode [ 627.125391][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.134498][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.151578][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.225574][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.274072][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 627.542413][T10034] device veth1_macvtap entered promiscuous mode [ 627.980060][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.061921][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.174614][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.194729][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.214627][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.287837][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.308352][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.334785][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.354607][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.374684][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.406881][T10034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.439763][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.457493][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.491263][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.550058][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.604661][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.667603][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.699000][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.735307][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.754718][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.785242][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.834010][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.883782][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.015621][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.028966][T10034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.063399][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.099508][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 630.193429][T10034] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.226271][T10034] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.246522][T10034] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.274650][T10034] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.587032][ T7771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.639653][ T7771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.664427][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.624763][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.639580][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.686322][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 631.977331][ T745] device hsr_slave_0 left promiscuous mode [ 632.111722][ T745] device hsr_slave_1 left promiscuous mode [ 632.206220][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.244969][ T745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.271260][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.289308][ T745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.327872][ T745] device bridge_slave_1 left promiscuous mode [ 632.344793][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.101625][ T745] device bridge_slave_0 left promiscuous mode [ 633.108342][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.192782][ T745] device veth1_macvtap left promiscuous mode [ 633.209699][ T745] device veth0_macvtap left promiscuous mode [ 633.223976][ T745] device veth1_vlan left promiscuous mode [ 633.256280][ T745] device veth0_vlan left promiscuous mode [ 633.910587][ T745] team0 (unregistering): Port device team_slave_1 removed [ 633.971983][ T745] team0 (unregistering): Port device team_slave_0 removed [ 634.000288][ T745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.018017][ T745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.111585][ T745] bond0 (unregistering): Released all slaves [ 637.735291][T10362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 638.793722][T10369] chnl_net:caif_netlink_parms(): no params data found [ 639.245123][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.254695][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.324752][T10369] device bridge_slave_0 entered promiscuous mode [ 639.394645][T10369] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.451554][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.511741][T10369] device bridge_slave_1 entered promiscuous mode [ 640.072260][T10369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.139069][T10369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.164782][T10010] Bluetooth: hci1: command 0x0409 tx timeout [ 640.264628][T10412] misc userio: No port type given on /dev/userio [ 640.799179][T10369] team0: Port device team_slave_0 added [ 640.875802][T10369] team0: Port device team_slave_1 added [ 640.898815][T10369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.922755][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.748331][T10369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.812181][T10421] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1793'. [ 641.887401][T10369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.894483][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.034607][T10369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.244695][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 642.255169][T10369] device hsr_slave_0 entered promiscuous mode [ 642.285055][T10369] device hsr_slave_1 entered promiscuous mode [ 642.294896][T10369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.302589][T10369] Cannot create hsr debugfs directory [ 642.327644][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 642.407505][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 643.203367][T10369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.239960][T10369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.270749][T10369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.314328][T10369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.125695][T10369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.179665][T10468] overlayfs: failed to clone upperpath [ 644.380206][T10369] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.417413][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 645.281745][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.309565][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.359229][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.405239][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.438591][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.445777][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.507598][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.542093][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.573579][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.580814][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.640213][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.663517][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.693704][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.790296][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.801611][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.810511][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.828900][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.875512][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 645.974407][T10369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.041523][T10369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.105976][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.123698][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.136195][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.149031][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.159192][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.542746][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 648.231527][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.361827][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.474121][T10369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.237945][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 649.278971][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 649.342387][T10369] device veth0_vlan entered promiscuous mode [ 649.373678][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 649.391317][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 649.413219][T10369] device veth1_vlan entered promiscuous mode [ 649.436358][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 649.444864][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 649.452981][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 649.527329][ T745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.774532][T10369] device veth0_macvtap entered promiscuous mode [ 649.866435][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 649.878215][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 649.917074][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 650.050363][ T745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.143124][T10369] device veth1_macvtap entered promiscuous mode [ 650.181280][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 650.205588][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 650.383005][ T745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.482737][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.534661][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.569073][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.594621][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.600423][T10602] loop5: detected capacity change from 0 to 1024 [ 650.624629][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.671908][T10602] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 650.694028][T10602] EXT4-fs (loop5): orphan cleanup on readonly fs [ 650.695020][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.707735][T10602] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.1830: Freeing blocks not in datazone - block = 0, count = 4096 [ 650.725144][T10602] EXT4-fs (loop5): 1 orphan inode deleted [ 650.731021][T10602] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 650.743560][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.754391][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.766699][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.777396][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.863810][T10369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.958911][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 650.969389][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 650.991700][ T745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.009399][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.116294][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.222457][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.327365][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.452348][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.561190][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.666322][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.760631][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.772135][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.784296][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.796992][T10369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.860272][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 651.952828][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 651.982432][T10369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.010965][T10369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.036975][T10369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.052027][T10369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.275204][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.283081][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.357506][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 653.485339][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.493594][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.561852][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 653.821897][ T745] tipc: Left network mode [ 658.265167][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 658.341286][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 659.947319][ T745] device hsr_slave_0 left promiscuous mode [ 659.972773][ T745] device hsr_slave_1 left promiscuous mode [ 660.009416][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.042986][ T745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.093065][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.130394][ T745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.177768][ T745] device bridge_slave_1 left promiscuous mode [ 660.208264][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.263005][ T745] device bridge_slave_0 left promiscuous mode [ 660.272094][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.353042][ T745] device veth0_macvtap left promiscuous mode [ 660.371519][ T745] device veth1_vlan left promiscuous mode [ 660.405485][ T745] device veth0_vlan left promiscuous mode [ 663.476366][ T745] team0 (unregistering): Port device team_slave_1 removed [ 663.618392][ T745] team0 (unregistering): Port device team_slave_0 removed [ 664.480437][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'. [ 664.490303][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'. [ 665.162749][ T745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.193601][ T745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.378689][ T745] bond0 (unregistering): Released all slaves [ 666.974694][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1860'. [ 667.015032][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1860'. [ 669.499044][T10803] device syzkaller0 entered promiscuous mode [ 671.660491][T10824] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1879'. [ 674.849603][T10857] misc userio: No port type given on /dev/userio [ 676.729333][T10869] device syzkaller0 entered promiscuous mode [ 682.372491][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1901'. [ 682.381785][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1901'. [ 684.873292][T10956] loop5: detected capacity change from 0 to 512 [ 685.230202][T10956] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,max_dir_size_kb=0x0000000000000109,quota,. Quota mode: writeback. [ 685.282164][T10956] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.096925][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.160214][T10980] loop0: detected capacity change from 0 to 256 [ 686.343555][T10980] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 686.452594][T10989] loop5: detected capacity change from 0 to 256 [ 686.742281][T10989] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 687.756532][T11023] misc userio: No port type given on /dev/userio [ 694.714260][T11080] loop0: detected capacity change from 0 to 512 [ 694.814318][T11080] EXT4-fs (loop0): 1 truncate cleaned up [ 694.834706][T11080] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 695.731301][ T26] audit: type=1800 audit(1771914444.908:24): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1935" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 696.200284][T11103] hub 8-0:1.0: USB hub found [ 696.200960][T11103] hub 8-0:1.0: 1 port detected [ 696.214843][T11084] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 703.754082][T11158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 707.678736][T11222] loop6: detected capacity change from 0 to 512 [ 707.954792][T11222] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,max_dir_size_kb=0x0000000000000109,quota,. Quota mode: writeback. [ 708.253089][T11222] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.229072][T11250] hub 8-0:1.0: USB hub found [ 711.234785][T11250] hub 8-0:1.0: 1 port detected [ 720.493129][T11313] hub 8-0:1.0: USB hub found [ 720.498680][T11313] hub 8-0:1.0: 1 port detected [ 727.094847][ T4245] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 729.107533][ T4245] usb 1-1: Using ep0 maxpacket: 16 [ 730.244849][ T4245] usb 1-1: unable to read config index 0 descriptor/all [ 730.251877][ T4245] usb 1-1: can't read configurations, error -71 [ 836.414478][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 836.421724][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P745/1:b..l [ 836.430237][ C1] (detected by 1, t=10502 jiffies, g=47045, q=303) [ 836.436822][ C1] task:kworker/u4:3 state:R running task stack:21880 pid: 745 ppid: 2 flags:0x00004000 [ 836.449108][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 836.457029][ C1] Call Trace: [ 836.460414][ C1] [ 836.463441][ C1] __schedule+0x11ef/0x43c0 [ 836.468135][ C1] ? stack_trace_save+0xa6/0xf0 [ 836.473119][ C1] ? release_firmware_map_entry+0x190/0x190 [ 836.479199][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 836.484627][ C1] preempt_schedule_irq+0xbb/0x160 [ 836.489754][ C1] ? __cond_resched+0xd0/0xd0 [ 836.494526][ C1] ? rcu_is_watching+0x11/0xa0 [ 836.499787][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 836.505871][ C1] irqentry_exit+0x63/0x70 [ 836.510350][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.516585][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 836.522173][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 836.542321][ C1] RSP: 0018:ffffc9000413f900 EFLAGS: 00000206 [ 836.548498][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 82037a43bcaf4a00 [ 836.556991][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f800 [ 836.565405][ C1] RBP: ffffc9000413fa20 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 836.573500][ C1] R10: dffffc0000000000 R11: fffffbfff203a619 R12: ffffffff8c31eaa0 [ 836.582130][ C1] R13: 1ffff92000827f2c R14: 0000000000000246 R15: dffffc0000000000 [ 836.590600][ C1] ? rcu_lock_release+0x5/0x20 [ 836.595682][ C1] ? read_lock_is_recursive+0x10/0x10 [ 836.601341][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 836.606655][ C1] rcu_lock_acquire+0x2a/0x30 [ 836.611508][ C1] ? rcu_lock_acquire+0x5/0x30 [ 836.616354][ C1] batadv_iv_ogm_schedule+0x432/0xec0 [ 836.621902][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 836.629111][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 836.634747][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 836.641978][ C1] process_one_work+0x85f/0x1010 [ 836.647012][ C1] ? worker_detach_from_pool+0x240/0x240 [ 836.652920][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 836.658548][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 836.663851][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 836.670062][ C1] ? wq_worker_running+0x97/0x170 [ 836.675082][ C1] worker_thread+0xaa6/0x1290 [ 836.679869][ C1] kthread+0x436/0x520 [ 836.683960][ C1] ? rcu_lock_release+0x20/0x20 [ 836.689234][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.693907][ C1] ret_from_fork+0x1f/0x30 [ 836.698581][ C1] [ 836.701794][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g47045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 836.713357][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 836.723604][ C1] rcu: RCU grace-period kthread stack dump: [ 836.729831][ C1] task:rcu_preempt state:R running task stack:28112 pid: 15 ppid: 2 flags:0x00004000 [ 836.741287][ C1] Call Trace: [ 836.744714][ C1] [ 836.747663][ C1] __schedule+0x11ef/0x43c0 [ 836.752356][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 836.758136][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 836.763370][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 836.769279][ C1] ? _raw_spin_unlock+0x40/0x40 [ 836.774138][ C1] ? release_firmware_map_entry+0x190/0x190 [ 836.780119][ C1] ? __mod_timer+0x91e/0xd00 [ 836.784888][ C1] schedule+0x11b/0x1e0 [ 836.789125][ C1] schedule_timeout+0x184/0x2d0 [ 836.794051][ C1] ? console_conditional_schedule+0x40/0x40 [ 836.800193][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 836.806863][ C1] ? update_process_times+0x200/0x200 [ 836.812522][ C1] ? prepare_to_swait_event+0x331/0x350 [ 836.818265][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 836.823482][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 836.828943][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 836.835400][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 836.840544][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 836.845850][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 836.851085][ C1] rcu_gp_kthread+0x9b/0x370 [ 836.855666][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 836.861564][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 836.866775][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 836.872937][ C1] ? __kthread_parkme+0x157/0x1b0 [ 836.878266][ C1] kthread+0x436/0x520 [ 836.882529][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 836.887637][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.892396][ C1] ret_from_fork+0x1f/0x30 [ 836.897081][ C1] [ 836.900333][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 836.906738][ C1] NMI backtrace for cpu 1 [ 836.911270][ C1] CPU: 1 PID: 11429 Comm: syz.4.2009 Not tainted syzkaller #0 [ 836.918728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.929157][ C1] Call Trace: [ 836.932732][ C1] [ 836.935812][ C1] dump_stack_lvl+0x188/0x250 [ 836.940944][ C1] ? show_regs_print_info+0x20/0x20 [ 836.946634][ C1] ? load_image+0x400/0x400 [ 836.951341][ C1] ? irq_work_queue+0xbf/0x140 [ 836.956167][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 836.961196][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 836.967426][ C1] ? _printk+0xda/0x130 [ 836.971667][ C1] ? cpu_online+0x1d/0x30 [ 836.976255][ C1] ? load_image+0x400/0x400 [ 836.980929][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 836.987168][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 836.993228][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 836.999780][ C1] print_other_cpu_stall+0x1110/0x1270 [ 837.005433][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 837.010549][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 837.015830][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 837.021022][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 837.025917][ C1] ? account_process_tick+0x22a/0x3a0 [ 837.031459][ C1] update_process_times+0x193/0x200 [ 837.036737][ C1] tick_sched_timer+0x37d/0x560 [ 837.041673][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 837.047294][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 837.052592][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 837.057952][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 837.064314][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 837.069282][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 837.075460][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 837.081104][ C1] [ 837.084172][ C1] [ 837.087102][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 837.093145][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 837.099146][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee ea 97 f7 48 89 df e8 26 c3 98 f7 e8 91 b5 b9 f7 fb bf 01 00 00 00 a6 c9 8c f7 65 8b 05 47 d7 3c 76 85 c0 74 02 5b c3 e8 94 e4 3a [ 837.119338][ C1] RSP: 0018:ffffc9000329fbc0 EFLAGS: 00000282 [ 837.125873][ C1] RAX: be1ace7c7f7c0600 RBX: ffff88802a4b2e40 RCX: be1ace7c7f7c0600 [ 837.134031][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 837.142222][ C1] RBP: 0000000000000000 R08: ffff88802a4b2e43 R09: 1ffff110054965c8 [ 837.150301][ C1] R10: dffffc0000000000 R11: ffffed10054965c9 R12: ffff88802a4b2e40 [ 837.158376][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 837.166610][ C1] get_signal+0x11d6/0x12c0 [ 837.171207][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 837.176919][ C1] ? _copy_from_user+0x111/0x170 [ 837.182033][ C1] ? load_gs_index+0x130/0x130 [ 837.186883][ C1] ? get_sigframe_size+0x10/0x10 [ 837.191830][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 837.197363][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 837.202724][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 837.208454][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 837.214195][ C1] do_syscall_64+0x58/0xa0 [ 837.218702][ C1] ? clear_bhb_loop+0x30/0x80 [ 837.223478][ C1] ? clear_bhb_loop+0x30/0x80 [ 837.228254][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 837.234143][ C1] RIP: 0033:0x7f2e7c047627 [ 837.238557][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 837.258416][ C1] RSP: 002b:00007f2e7a2800e8 EFLAGS: 00000246 [ 837.264485][ C1] RAX: 00000000000000ca RBX: 00007f2e7c2c1098 RCX: 00007f2e7c047629 [ 837.272824][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e7c2c1098 [ 837.281217][ C1] RBP: 00007f2e7c2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 837.289439][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.297486][ C1] R13: 00007f2e7c2c1128 R14: 00007ffc5f2e1a00 R15: 00007ffc5f2e1ae8 [ 837.305813][ C1] [ 837.314975][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.686406][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=208 sent=0 n=-1 (errno 104: Connection reset by peer) [ 839.191848][ T4303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.330895][ T4303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.462152][ T4303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.544866][ T4303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.780413][ T4303] tipc: Left network mode [ 840.489848][ T4303] device hsr_slave_0 left promiscuous mode [ 840.499086][ T4303] device hsr_slave_1 left promiscuous mode [ 840.511079][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.521975][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.533848][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.544167][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.558016][ T4303] device bridge_slave_1 left promiscuous mode [ 840.564392][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.581478][ T4303] device bridge_slave_0 left promiscuous mode [ 840.590583][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.612029][ T4303] device veth1_macvtap left promiscuous mode [ 840.622344][ T4303] device veth0_macvtap left promiscuous mode [ 840.631222][ T4303] device veth1_vlan left promiscuous mode [ 840.640775][ T4303] device veth0_vlan left promiscuous mode [ 840.814357][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 840.831929][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 840.848100][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.861170][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.921852][ T4303] bond0 (unregistering): Released all slaves [ 843.033934][ T4303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.090829][ T4303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.156635][ T4303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.200793][ T4303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.355978][ T4303] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.414221][ T4303] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.456227][ T4303] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.517237][ T4303] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.673832][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.721942][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.771292][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.822455][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.949370][ T4303] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.045612][ T4303] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.108098][ T4303] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.181204][ T4303] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.826120][ T4303] device hsr_slave_0 left promiscuous mode [ 845.832882][ T4303] device hsr_slave_1 left promiscuous mode [ 845.839984][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.847942][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.858849][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.867229][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.875770][ T4303] device bridge_slave_1 left promiscuous mode [ 845.882263][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.891451][ T4303] device bridge_slave_0 left promiscuous mode [ 845.898142][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.910805][ T4303] device hsr_slave_0 left promiscuous mode [ 845.917693][ T4303] device hsr_slave_1 left promiscuous mode [ 845.924193][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.933916][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.941742][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.949439][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.957884][ T4303] device bridge_slave_1 left promiscuous mode [ 845.964440][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.975826][ T4303] device bridge_slave_0 left promiscuous mode [ 845.982139][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.993962][ T4303] device hsr_slave_0 left promiscuous mode [ 846.000613][ T4303] device hsr_slave_1 left promiscuous mode [ 846.007668][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.015455][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.023312][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.031256][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.040477][ T4303] device bridge_slave_1 left promiscuous mode [ 846.047232][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.055991][ T4303] device bridge_slave_0 left promiscuous mode [ 846.062288][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.075338][ T4303] device hsr_slave_0 left promiscuous mode [ 846.081674][ T4303] device hsr_slave_1 left promiscuous mode [ 846.088857][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.096500][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.104113][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.112053][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.119947][ T4303] device bridge_slave_1 left promiscuous mode [ 846.126428][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.137736][ T4303] device bridge_slave_0 left promiscuous mode [ 846.144674][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.164450][ T4303] device veth1_macvtap left promiscuous mode [ 846.170836][ T4303] device veth0_macvtap left promiscuous mode [ 846.177240][ T4303] device veth1_vlan left promiscuous mode [ 846.183196][ T4303] device veth0_vlan left promiscuous mode [ 846.190266][ T4303] device veth1_macvtap left promiscuous mode [ 846.196427][ T4303] device veth0_macvtap left promiscuous mode [ 846.202488][ T4303] device veth1_vlan left promiscuous mode [ 846.208523][ T4303] device veth0_vlan left promiscuous mode [ 846.216023][ T4303] device veth1_macvtap left promiscuous mode [ 846.222351][ T4303] device veth0_macvtap left promiscuous mode [ 846.229078][ T4303] device veth1_vlan left promiscuous mode [ 846.235228][ T4303] device veth0_vlan left promiscuous mode [ 846.241998][ T4303] device veth1_macvtap left promiscuous mode [ 846.248744][ T4303] device veth0_macvtap left promiscuous mode [ 846.255445][ T4303] device veth1_vlan left promiscuous mode [ 846.261242][ T4303] device veth0_vlan left promiscuous mode