last executing test programs: 8m8.573735758s ago: executing program 3 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x3) syz_clone3(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) lseek(0xffffffffffffffff, 0x7fff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, 0x0, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r2 = gettid() remap_file_pages(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x3000000, 0x40, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000980)="a9", 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m2.573630581s ago: executing program 3 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000034c0), 0x200, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) 7m57.483181331s ago: executing program 3 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d5181", 0x21}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x2}, [{0x2, 0x8, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x3, r3}, {0x2, 0x7, r4}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {}], {0x4, 0xc}, [{0x8, 0xbd6be930674d0050}, {0x8, 0x1}, {0x8, 0x3}], {0x10, 0x2}, {0x20, 0x4}}, 0x8c, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m56.699476084s ago: executing program 2 (id=699): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375af12f2cf2e3a00"], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x300, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m56.639625049s ago: executing program 3 (id=700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7a837b4") ptrace$cont(0x21, r0, 0x80000001, 0x4) 7m56.069475595s ago: executing program 3 (id=704): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, 0xffffffffffffffff) 7m55.205596125s ago: executing program 2 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x1, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 7m53.835990765s ago: executing program 2 (id=709): r0 = socket(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x22, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) inotify_init() r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800010000000000feffffff0a00000000000000140006000000000000000000000000000000000108000500", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x90) 7m52.668718659s ago: executing program 3 (id=711): creat(0x0, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 7m52.187944318s ago: executing program 32 (id=711): creat(0x0, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 7m52.170412099s ago: executing program 1 (id=713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80003, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x2, 0x5, 0xe}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 7m52.169904169s ago: executing program 2 (id=714): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7a837b4") ptrace$cont(0x21, r0, 0x80000001, 0x4) 7m51.391125902s ago: executing program 2 (id=716): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() kcmp(r0, r3, 0x1, r2, r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r5, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000003000000e6ce0000ff070000820a0400", @ANYRES32, @ANYBLOB="0021000000000000000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000010000000f00"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) 7m51.059286069s ago: executing program 1 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m49.726181586s ago: executing program 2 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x1, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 7m49.004791214s ago: executing program 33 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x1, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 7m48.300648271s ago: executing program 1 (id=723): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1c, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4", 0x1a}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) statx(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x6000, 0x7ff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m45.188659462s ago: executing program 1 (id=726): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7a837b409f9") ptrace$cont(0x21, r0, 0x80000001, 0x4) 7m44.795962923s ago: executing program 1 (id=727): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x8, 0x6, 0x7f, 0x6, {0x1, 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x200000000000, 0x100, 0x7fff, 0x3, 0x4000, 0x8, 0x0, 0x0, 0xb31, 0x10002}}, {0x0, 0x1}}}, 0xa0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 7m43.970910199s ago: executing program 1 (id=728): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 7m43.459896021s ago: executing program 34 (id=728): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 3m5.369672346s ago: executing program 4 (id=1940): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x177f, 0x0) 3m2.419515734s ago: executing program 4 (id=1956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) 3m2.184265534s ago: executing program 4 (id=1959): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1c, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6", 0x11}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) statx(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x6000, 0x7ff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 3m1.992589569s ago: executing program 4 (id=1960): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') 3m1.578701162s ago: executing program 4 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d5181", 0x21}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x2}, [{0x2, 0x8, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x3, r3}, {0x2, 0x7, r4}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {}], {0x4, 0xc}, [{0x8, 0xbd6be930674d0050}, {0x8, 0x1}, {0x8, 0x3}], {0x10, 0x2}, {0x20, 0x4}}, 0x8c, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m0.884241818s ago: executing program 4 (id=1969): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x60000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0xe7a3, 0x1, 0x0, 0x294}, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 3m0.233425201s ago: executing program 35 (id=1969): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x60000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0xe7a3, 0x1, 0x0, 0x294}, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 7.951913788s ago: executing program 5 (id=2545): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073797a220000000009000100"], 0x2c}}, 0x8004) 6.878846815s ago: executing program 5 (id=2557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 6.727493037s ago: executing program 5 (id=2558): socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b51f69853362ac3407173ec23395152cd8714a2a2e1", 0x66}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 6.532758932s ago: executing program 7 (id=2560): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 6.386880044s ago: executing program 7 (id=2563): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b51f69853362ac3407173ec23395152cd8714a2a2e1", 0x66}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 6.052703131s ago: executing program 5 (id=2566): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073797a220000000009000100"], 0x2c}}, 0x8004) 5.876841305s ago: executing program 5 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.536841583s ago: executing program 6 (id=2574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) unshare(0x10000c00) 3.95804931s ago: executing program 0 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d5181", 0x21}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x2}, [{0x2, 0x8, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x3, r3}, {0x2, 0x7, r4}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {}], {0x4, 0xc}, [{0x8, 0xbd6be930674d0050}, {0x8, 0x1}, {0x8, 0x3}], {0x10, 0x2}, {0x20, 0x4}}, 0x8c, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.169249944s ago: executing program 6 (id=2578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xfffffffb, [{0x7, 0x3, 0xfffffffd}]}]}}, 0x0, 0x32, 0x0, 0x6}, 0x28) 3.047129494s ago: executing program 6 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84000) 2.888048256s ago: executing program 6 (id=2580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 2.824866802s ago: executing program 6 (id=2581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 773.838077ms ago: executing program 0 (id=2583): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0], 0x34}}, 0xc800) 709.156532ms ago: executing program 7 (id=2584): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 628.467629ms ago: executing program 6 (id=2585): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x0, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 628.338479ms ago: executing program 5 (id=2586): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 572.726804ms ago: executing program 0 (id=2587): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80003, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x1, 0x2, 0x5, 0xe}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 461.590213ms ago: executing program 7 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 388.702628ms ago: executing program 0 (id=2589): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1c, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x7ff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 317.877414ms ago: executing program 7 (id=2590): socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 189.993925ms ago: executing program 0 (id=2591): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1c, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4", 0x1a}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec6"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) statx(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x6000, 0x7ff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 32.709167ms ago: executing program 7 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2593): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x300, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): , Product=2, SerialNumber=3 [ 562.270956][ T5842] usb 1-1: Product: syz [ 562.278621][ T5842] usb 1-1: Manufacturer: syz [ 562.283556][ T5842] usb 1-1: SerialNumber: syz [ 562.314455][ T5842] cdc_ncm 1-1:1.0: skipping garbage [ 562.328904][ T5842] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 562.348454][ T5842] cdc_ncm 1-1:1.0: bind() failure [ 562.507495][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 562.575643][T10816] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1355'. [ 562.967432][T10829] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 563.163785][T10829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.410861][T10839] tipc: Enabled bearer , priority 0 [ 563.450666][T10839] syzkaller0: entered promiscuous mode [ 563.483493][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.490440][T10839] syzkaller0: entered allmulticast mode [ 563.496386][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.543000][T10839] tipc: Resetting bearer [ 563.595380][T10838] tipc: Resetting bearer [ 563.700689][T10838] tipc: Disabling bearer [ 563.777317][T10845] loop2: detected capacity change from 0 to 7 [ 563.787111][T10845] Dev loop2: unable to read RDB block 7 [ 563.808135][ T1118] vlan2: left promiscuous mode [ 563.853403][T10845] loop2: unable to read partition table [ 563.863762][T10845] loop2: partition table beyond EOD, truncated [ 563.906881][T10845] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 564.007204][ T5842] usb 1-1: USB disconnect, device number 6 [ 564.139895][T10853] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1367'. [ 565.375100][T10879] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1376'. [ 566.297931][T10899] loop2: detected capacity change from 0 to 7 [ 566.326188][T10899] Dev loop2: unable to read RDB block 7 [ 566.344375][T10899] loop2: unable to read partition table [ 566.374239][T10899] loop2: partition table beyond EOD, truncated [ 566.398320][T10899] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 566.942482][T10877] loop6: detected capacity change from 0 to 65536 [ 567.035407][T10877] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 567.174047][T10919] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1386'. [ 567.188760][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 567.245164][T10877] XFS (loop6): Ending clean mount [ 567.266292][T10877] XFS (loop6): Quotacheck needed: Please wait. [ 567.423511][T10877] XFS (loop6): Quotacheck: Done. [ 567.738412][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 567.958231][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 567.970913][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.998262][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.023798][ T8] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.056967][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.074189][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.094634][ T8] usb 7-1: Product: syz [ 568.105762][ T8] usb 7-1: Manufacturer: syz [ 568.117078][ T8] usb 7-1: SerialNumber: syz [ 568.153111][ T8] cdc_ncm 7-1:1.0: skipping garbage [ 568.164110][ T8] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 568.208370][ T8] cdc_ncm 7-1:1.0: bind() failure [ 568.476184][ T27] audit: type=1800 audit(1756736402.267:732): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1375" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 568.550504][T10930] geneve2: entered promiscuous mode [ 568.725940][ T787] usb 7-1: USB disconnect, device number 2 [ 569.321803][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 569.384905][T10955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1395'. [ 570.387425][T10982] loop2: detected capacity change from 0 to 7 [ 570.409953][ T8146] Dev loop2: unable to read RDB block 7 [ 570.416585][ T8146] loop2: unable to read partition table [ 570.423728][ T8146] loop2: partition table beyond EOD, truncated [ 570.439033][T10982] Dev loop2: unable to read RDB block 7 [ 570.447318][T10982] loop2: unable to read partition table [ 570.454647][T10982] loop2: partition table beyond EOD, truncated [ 570.463618][T10982] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 572.887348][T11023] loop2: detected capacity change from 0 to 7 [ 572.941878][T11023] Dev loop2: unable to read RDB block 7 [ 572.958389][T11023] loop2: unable to read partition table [ 572.988420][T11023] loop2: partition table beyond EOD, truncated [ 573.019635][T11023] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 573.750081][T11038] syzkaller0: entered promiscuous mode [ 573.768202][T11038] syzkaller0: entered allmulticast mode [ 574.775009][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 574.822615][T11058] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 574.939228][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 574.986104][T11060] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 575.585691][T11074] loop2: detected capacity change from 0 to 7 [ 575.608856][T11074] Dev loop2: unable to read RDB block 7 [ 575.614563][T11074] loop2: unable to read partition table [ 575.645915][T11074] loop2: partition table beyond EOD, truncated [ 575.655840][T11074] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 576.307814][T11085] syzkaller0: entered promiscuous mode [ 576.326704][T11085] syzkaller0: entered allmulticast mode [ 577.196830][T11096] syzkaller0: entered promiscuous mode [ 577.207739][T11096] syzkaller0: entered allmulticast mode [ 577.989626][T11115] loop2: detected capacity change from 0 to 7 [ 577.998887][T11115] Dev loop2: unable to read RDB block 7 [ 578.005094][T11115] loop2: unable to read partition table [ 578.011746][T11115] loop2: partition table beyond EOD, truncated [ 578.018721][T11115] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.421899][T11150] loop2: detected capacity change from 0 to 7 [ 580.438395][T11150] Dev loop2: unable to read RDB block 7 [ 580.487401][T11150] loop2: unable to read partition table [ 580.500038][T11150] loop2: partition table beyond EOD, truncated [ 580.515663][T11150] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.598790][T11154] policy can only be matched on NF_INET_PRE_ROUTING [ 580.598817][T11154] unable to load match [ 580.797085][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1460'. [ 580.816118][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1460'. [ 581.466354][T11171] tipc: Enabled bearer , priority 0 [ 581.541073][T11171] syzkaller0: entered promiscuous mode [ 581.546883][T11171] syzkaller0: entered allmulticast mode [ 581.591107][T11171] tipc: Resetting bearer [ 581.734602][T11170] tipc: Resetting bearer [ 581.770257][T11170] tipc: Disabling bearer [ 582.306759][T11184] tipc: Enabled bearer , priority 0 [ 582.386272][T11188] loop5: detected capacity change from 0 to 16 [ 582.440898][T11188] erofs: (device loop5): mounted with root inode @ nid 36. [ 582.530858][T11188] ip6gre1: entered allmulticast mode [ 583.267571][T11184] syzkaller0: entered promiscuous mode [ 583.309296][T11184] syzkaller0: entered allmulticast mode [ 583.440654][T11184] tipc: Resetting bearer [ 583.478661][T11183] tipc: Resetting bearer [ 583.533206][T11183] tipc: Disabling bearer [ 583.720042][T11196] loop2: detected capacity change from 0 to 7 [ 583.742058][T11196] Dev loop2: unable to read RDB block 7 [ 583.796094][T11196] loop2: unable to read partition table [ 583.815401][T11196] loop2: partition table beyond EOD, truncated [ 583.850343][T11196] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 586.404271][T11234] loop2: detected capacity change from 0 to 7 [ 586.438562][T11234] Dev loop2: unable to read RDB block 7 [ 586.444544][T11234] loop2: unable to read partition table [ 586.468379][T11234] loop2: partition table beyond EOD, truncated [ 586.491940][T11234] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 587.057028][T11245] loop5: detected capacity change from 0 to 8192 [ 587.093120][T11245] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.050613][T11245] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 588.118527][T11245] FAT-fs (loop5): Filesystem has been set read-only [ 588.156941][T11245] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 588.220458][T11245] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 588.589856][ T8314] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 588.890515][T11254] loop4: detected capacity change from 0 to 8192 [ 588.933449][T11256] loop6: detected capacity change from 0 to 8192 [ 588.942521][T11254] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.963555][T11260] loop5: detected capacity change from 0 to 8192 [ 588.974346][T11256] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.021267][T11260] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.928142][T11254] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 590.923714][T11254] FAT-fs (loop4): Filesystem has been set read-only [ 591.290887][T11260] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 591.311428][T11254] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 591.368160][T11260] FAT-fs (loop5): Filesystem has been set read-only [ 591.376330][T11260] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 591.391919][T11254] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 591.458549][T11260] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 592.065482][T11256] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 592.096525][T11256] FAT-fs (loop6): Filesystem has been set read-only [ 592.493305][T11256] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 592.581979][T11256] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 593.347667][T11282] loop2: detected capacity change from 0 to 7 [ 593.385318][T11282] Dev loop2: unable to read RDB block 7 [ 593.397791][T11279] loop4: detected capacity change from 0 to 8192 [ 593.401808][T11282] loop2: unable to read partition table [ 593.425202][T11279] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 593.443535][T11282] loop2: partition table beyond EOD, truncated [ 593.478213][T11282] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 594.008412][T11279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 594.276346][T11284] loop5: detected capacity change from 0 to 8192 [ 594.288073][T11279] FAT-fs (loop4): Filesystem has been set read-only [ 594.334698][T11279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 594.603541][T11284] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.613458][T11279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 595.109643][T11284] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 595.478159][T11284] FAT-fs (loop5): Filesystem has been set read-only [ 595.485377][T11284] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 595.592257][T11284] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 596.395753][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1509'. [ 596.419673][T11304] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1509'. [ 596.961123][T11302] geneve2: entered promiscuous mode [ 597.748902][T11301] loop5: detected capacity change from 0 to 65536 [ 597.758236][T11327] loop2: detected capacity change from 0 to 7 [ 597.806219][T11327] Dev loop2: unable to read RDB block 7 [ 597.826068][T11327] loop2: unable to read partition table [ 597.833952][T11327] loop2: partition table beyond EOD, truncated [ 597.841782][T11301] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 597.848913][T11327] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.111590][T11301] XFS (loop5): Ending clean mount [ 598.134503][T11301] XFS (loop5): Quotacheck needed: Please wait. [ 598.218735][T11301] XFS (loop5): Quotacheck: Done. [ 598.304995][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1521'. [ 598.319840][T11342] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1521'. [ 598.548415][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 598.738110][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 598.745852][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.776926][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.799544][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.838239][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.856733][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.878109][ T8] usb 6-1: Product: syz [ 598.882773][ T8] usb 6-1: Manufacturer: syz [ 598.918590][ T8] usb 6-1: SerialNumber: syz [ 598.942279][ T8] cdc_ncm 6-1:1.0: skipping garbage [ 598.957586][ T8] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 598.971853][ T8] cdc_ncm 6-1:1.0: bind() failure [ 599.234996][ T27] audit: type=1800 audit(1756736433.027:733): pid=11364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1507" name="file1" dev="loop5" ino=38 res=0 errno=0 [ 599.538115][ T8] usb 6-1: USB disconnect, device number 2 [ 599.655534][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 599.678323][T11369] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1531'. [ 599.753422][T11371] loop2: detected capacity change from 0 to 7 [ 599.771935][T11343] Dev loop2: unable to read RDB block 7 [ 599.793823][T11343] loop2: unable to read partition table [ 599.803177][T11343] loop2: partition table beyond EOD, truncated [ 599.822646][T11371] Dev loop2: unable to read RDB block 7 [ 599.832072][T11371] loop2: unable to read partition table [ 599.847341][T11371] loop2: partition table beyond EOD, truncated [ 599.855606][T11371] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 599.907274][ T5159] Dev loop2: unable to read RDB block 7 [ 599.928179][ T5159] loop2: unable to read partition table [ 599.941070][ T5159] loop2: partition table beyond EOD, truncated [ 600.139730][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 600.920703][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 600.973347][T11394] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1542'. [ 602.430644][T11423] loop2: detected capacity change from 0 to 7 [ 602.478239][T11423] Dev loop2: unable to read RDB block 7 [ 602.510062][T11423] loop2: unable to read partition table [ 602.539115][T11423] loop2: partition table beyond EOD, truncated [ 602.568164][T11423] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 602.836997][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 602.879415][T11431] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1554'. [ 602.969678][T11403] loop5: detected capacity change from 0 to 65536 [ 603.043437][T11403] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 603.214178][T11403] XFS (loop5): Ending clean mount [ 603.236245][T11403] XFS (loop5): Quotacheck needed: Please wait. [ 603.373282][T11403] XFS (loop5): Quotacheck: Done. [ 603.749297][ T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 603.978100][ T787] usb 6-1: Using ep0 maxpacket: 16 [ 603.985291][ T787] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.006722][ T787] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 604.027049][ T787] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.053996][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.071130][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.077138][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'. [ 604.088575][ T787] usb 6-1: Product: syz [ 604.097848][ T787] usb 6-1: Manufacturer: syz [ 604.113685][ T787] usb 6-1: SerialNumber: syz [ 604.129249][ T787] cdc_ncm 6-1:1.0: skipping garbage [ 604.134548][ T787] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 604.144216][T11466] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1565'. [ 604.158300][ T787] cdc_ncm 6-1:1.0: bind() failure [ 604.433037][ T27] audit: type=1800 audit(1756736438.227:734): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1545" name="file1" dev="loop5" ino=38 res=0 errno=0 [ 604.629930][ T5861] usb 6-1: USB disconnect, device number 3 [ 604.652122][T11475] loop2: detected capacity change from 0 to 7 [ 604.683725][T11475] Dev loop2: unable to read RDB block 7 [ 604.692665][T11475] loop2: unable to read partition table [ 604.699964][T11475] loop2: partition table beyond EOD, truncated [ 604.725629][T11475] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.981509][T11477] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1568'. [ 605.234113][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 605.584757][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'. [ 605.614981][T11488] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1574'. [ 605.801103][T11495] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1577'. [ 606.573638][T11506] loop2: detected capacity change from 0 to 7 [ 606.617713][T11506] Dev loop2: unable to read RDB block 7 [ 606.630852][T11506] loop2: unable to read partition table [ 606.665830][T11506] loop2: partition table beyond EOD, truncated [ 606.680449][T11506] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 607.555839][T11502] loop4: detected capacity change from 0 to 65536 [ 607.628864][T11502] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 607.759841][T11502] XFS (loop4): Ending clean mount [ 607.775083][T11502] XFS (loop4): Quotacheck needed: Please wait. [ 607.887880][T11502] XFS (loop4): Quotacheck: Done. [ 607.915430][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1585'. [ 607.996404][T11527] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1585'. [ 608.125429][T11531] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1588'. [ 608.168119][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 608.395700][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 608.418295][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.438046][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.479762][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.519004][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.542898][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.555215][T11541] loop2: detected capacity change from 0 to 7 [ 608.568333][ T8146] Dev loop2: unable to read RDB block 7 [ 608.574004][ T8146] loop2: unable to read partition table [ 608.583187][ T8] usb 5-1: Product: syz [ 608.587443][ T8] usb 5-1: Manufacturer: syz [ 608.598338][ T8146] loop2: partition table beyond EOD, truncated [ 608.604781][ T8] usb 5-1: SerialNumber: syz [ 608.627387][T11541] Dev loop2: unable to read RDB block 7 [ 608.657338][T11541] loop2: unable to read partition table [ 608.671714][ T8] cdc_ncm 5-1:1.0: skipping garbage [ 608.677135][ T8] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 608.688774][T11541] loop2: partition table beyond EOD, truncated [ 608.698161][T11541] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 608.706263][ T8] cdc_ncm 5-1:1.0: bind() failure [ 608.938894][ T27] audit: type=1800 audit(1756736442.727:735): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1580" name="file1" dev="loop4" ino=38 res=0 errno=0 [ 609.201502][ T8] usb 5-1: USB disconnect, device number 4 [ 609.264687][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 609.280273][T11555] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1597'. [ 609.471821][T11557] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1598'. [ 609.795661][ T8262] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 610.550785][T11576] loop2: detected capacity change from 0 to 7 [ 610.569938][T11576] Dev loop2: unable to read RDB block 7 [ 610.576355][T11576] loop2: unable to read partition table [ 610.618664][T11576] loop2: partition table beyond EOD, truncated [ 610.639229][T11577] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1608'. [ 610.648905][T11576] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 610.888727][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 610.933367][T11582] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1609'. [ 611.698098][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 611.885303][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 611.912811][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 611.923155][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.952259][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 611.967826][ T8] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.005571][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.036233][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.055081][ T8] usb 7-1: Product: syz [ 612.059459][ T8] usb 7-1: Manufacturer: syz [ 612.065254][ T8] usb 7-1: SerialNumber: syz [ 612.126530][ T8] cdc_ncm 7-1:1.0: skipping garbage [ 612.142897][ T8] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 612.155987][ T8] cdc_ncm 7-1:1.0: bind() failure [ 612.163871][T11608] loop2: detected capacity change from 0 to 7 [ 612.183291][T11343] Dev loop2: unable to read RDB block 7 [ 612.205591][T11343] loop2: unable to read partition table [ 612.218473][T11343] loop2: partition table beyond EOD, truncated [ 612.244407][T11608] Dev loop2: unable to read RDB block 7 [ 612.253762][T11608] loop2: unable to read partition table [ 612.266490][T11608] loop2: partition table beyond EOD, truncated [ 612.307277][T11608] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 612.505524][ T5861] usb 7-1: USB disconnect, device number 3 [ 613.517893][T11630] __nla_validate_parse: 2 callbacks suppressed [ 613.517912][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1630'. [ 613.562239][T11630] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1630'. [ 614.462341][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1640'. [ 614.479290][T11653] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1640'. [ 614.568100][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 614.778187][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 614.793104][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.823000][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 614.875485][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.934338][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.975368][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.011765][ T8] usb 1-1: Product: syz [ 615.026959][ T8] usb 1-1: Manufacturer: syz [ 615.052457][ T8] usb 1-1: SerialNumber: syz [ 615.090870][ T8] cdc_ncm 1-1:1.0: skipping garbage [ 615.096212][ T8] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 615.144911][ T8] cdc_ncm 1-1:1.0: bind() failure [ 615.556020][ T8] usb 1-1: USB disconnect, device number 7 [ 616.333161][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 616.402172][T11685] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1650'. [ 617.341307][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1661'. [ 617.356794][T11711] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1661'. [ 617.373320][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 617.748467][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 617.757171][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.780978][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 617.809399][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 617.841541][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.860137][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.881854][ T8] usb 5-1: Product: syz [ 617.889667][ T8] usb 5-1: Manufacturer: syz [ 617.895007][ T8] usb 5-1: SerialNumber: syz [ 617.918715][ T8] cdc_ncm 5-1:1.0: skipping garbage [ 617.935027][ T8] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 617.956623][ T8] cdc_ncm 5-1:1.0: bind() failure [ 619.479280][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 619.529134][T11746] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1674'. [ 620.076586][ T787] usb 5-1: USB disconnect, device number 5 [ 620.726676][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'. [ 620.787986][T11772] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1686'. [ 623.395610][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 623.462913][T11801] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1699'. [ 623.805656][T11783] loop5: detected capacity change from 0 to 65536 [ 623.862737][T11783] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 623.907159][T11783] XFS (loop5): Ending clean mount [ 623.932187][T11783] XFS (loop5): Quotacheck needed: Please wait. [ 624.138368][T11783] XFS (loop5): Quotacheck: Done. [ 624.618491][ T787] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 624.860000][ T787] usb 6-1: Using ep0 maxpacket: 16 [ 624.877557][ T787] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.898183][ T787] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 624.917690][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.958458][ T787] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.975997][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.999473][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.018283][ T787] usb 6-1: Product: syz [ 625.022814][ T787] usb 6-1: Manufacturer: syz [ 625.027473][ T787] usb 6-1: SerialNumber: syz [ 625.075131][ T787] cdc_ncm 6-1:1.0: skipping garbage [ 625.101032][ T787] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 625.112619][ T787] cdc_ncm 6-1:1.0: bind() failure [ 625.212552][ T787] usb 6-1: USB disconnect, device number 4 [ 625.251206][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 625.273292][T11839] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1711'. [ 625.283426][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 626.915355][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 626.929491][T11868] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1723'. [ 628.025534][T11881] loop4: detected capacity change from 0 to 8192 [ 628.067728][T11881] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.450355][T11864] loop6: detected capacity change from 0 to 65536 [ 628.662672][T11864] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 628.671811][T11881] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 628.689294][T11881] FAT-fs (loop4): Filesystem has been set read-only [ 628.865715][T11881] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 628.967125][T11881] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 629.091192][T11864] XFS (loop6): Ending clean mount [ 629.126995][T11864] XFS (loop6): Quotacheck needed: Please wait. [ 629.337247][T11864] XFS (loop6): Quotacheck: Done. [ 629.483365][ T8262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 629.678269][ T5842] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 629.691912][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 629.712405][T11906] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1735'. [ 629.868406][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 629.902709][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.936304][ T5842] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.953339][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.000871][ T5842] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.012119][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.023256][ T5842] usb 7-1: Product: syz [ 630.027585][ T5842] usb 7-1: Manufacturer: syz [ 630.036177][ T5842] usb 7-1: SerialNumber: syz [ 630.091584][ T5842] cdc_ncm 7-1:1.0: skipping garbage [ 630.097097][ T5842] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 630.115352][ T5842] cdc_ncm 7-1:1.0: bind() failure [ 630.434357][ T27] audit: type=1800 audit(1756736464.227:736): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1721" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 630.652008][ T6106] usb 7-1: USB disconnect, device number 4 [ 631.090000][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 631.110949][T11932] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1745'. [ 631.354498][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 631.981765][T11936] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1747'. [ 633.165874][T11956] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1756'. [ 634.538331][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 634.631666][T11967] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1759'. [ 635.472363][T11980] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.1765'. [ 635.534454][T11959] loop4: detected capacity change from 0 to 65536 [ 635.602424][T11959] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 635.724367][T11959] XFS (loop4): Ending clean mount [ 635.817279][T11959] XFS (loop4): Quotacheck needed: Please wait. [ 635.912801][T11959] XFS (loop4): Quotacheck: Done. [ 635.965008][T11994] loop5: detected capacity change from 0 to 8192 [ 636.019078][T11994] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 636.208214][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 636.489213][T12003] input: syz0 as /devices/virtual/input/input6 [ 637.245301][T11994] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 637.422845][T11994] FAT-fs (loop5): Filesystem has been set read-only [ 637.870989][T11994] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 637.960982][ T8262] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 637.988177][T11994] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 638.080594][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'. [ 638.150630][T12008] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1772'. [ 638.429897][ T8314] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 639.510308][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'. [ 639.523453][T12036] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1782'. [ 639.860997][T12038] loop6: detected capacity change from 0 to 8192 [ 639.921039][T12038] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 640.793188][T12038] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 640.870358][T12038] FAT-fs (loop6): Filesystem has been set read-only [ 640.948143][T12038] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 641.011531][T12038] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 641.628525][T12030] loop5: detected capacity change from 0 to 65536 [ 641.814653][T12030] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 641.969366][T12030] XFS (loop5): Ending clean mount [ 641.987077][T12030] XFS (loop5): Quotacheck needed: Please wait. [ 642.134849][T12030] XFS (loop5): Quotacheck: Done. [ 642.442669][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 642.465833][T12077] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1794'. [ 642.508167][ T5861] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 642.698159][ T5861] usb 6-1: Using ep0 maxpacket: 16 [ 642.714068][ T5861] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.728295][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 642.752877][ T5861] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.780346][ T5861] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.792641][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.808051][ T5861] usb 6-1: Product: syz [ 642.818124][ T5861] usb 6-1: Manufacturer: syz [ 642.823670][ T5861] usb 6-1: SerialNumber: syz [ 642.852309][ T5861] cdc_ncm 6-1:1.0: skipping garbage [ 642.872699][ T5861] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 642.889320][ T5861] cdc_ncm 6-1:1.0: bind() failure [ 643.163561][ T27] audit: type=1800 audit(1756736476.957:737): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1779" name="file1" dev="loop5" ino=38 res=0 errno=0 [ 643.257323][T12085] loop6: detected capacity change from 0 to 8192 [ 643.306975][T12085] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 644.197493][T12085] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 644.268316][T12085] FAT-fs (loop6): Filesystem has been set read-only [ 644.275634][T12085] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 644.391231][T12085] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 644.507077][ T787] usb 6-1: USB disconnect, device number 5 [ 644.618373][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 644.773217][ T8374] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 644.911582][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 644.978609][T12104] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1805'. [ 645.788771][T12123] input: syz0 as /devices/virtual/input/input7 [ 648.554178][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 648.577864][T12138] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1816'. [ 649.373493][T12148] loop4: detected capacity change from 0 to 32768 [ 649.418262][T12148] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 649.451492][T12148] XFS (loop4): Ending clean mount [ 649.574860][T12125] loop6: detected capacity change from 0 to 65536 [ 649.801272][ T8262] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 649.823063][T12125] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 649.992329][T12125] XFS (loop6): Ending clean mount [ 650.003004][T12125] XFS (loop6): Quotacheck needed: Please wait. [ 650.087681][T12125] XFS (loop6): Quotacheck: Done. [ 650.128767][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 650.193072][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 650.340353][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 650.361669][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 650.391010][ T8] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 650.415059][ T8] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 650.455240][ T8] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 650.467378][ T8] usb 6-1: config 7 has no interface number 0 [ 650.480790][ T8] usb 6-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 650.535237][ T8] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 650.582444][ T8] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 650.641824][ T8] usb 6-1: config 7 interface 128 has no altsetting 0 [ 650.670832][ T8] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 650.685729][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.702822][ T8] usb 6-1: Product: syz [ 650.717472][ T8] usb 6-1: Manufacturer: syz [ 650.723237][ T8] usb 6-1: SerialNumber: syz [ 650.744259][T12169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 651.047871][ T8] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 651.056103][ T8] usb 6-1: MIDIStreaming interface descriptor not found [ 651.203295][ T8] usb 6-1: USB disconnect, device number 6 [ 651.261349][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1826'. [ 651.314772][T12184] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1826'. [ 651.361017][ T8294] udevd[8294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.398478][T12186] block nbd4: NBD_DISCONNECT [ 651.404493][T12186] block nbd4: Disconnected due to user request. [ 651.424256][T12186] block nbd4: shutting down sockets [ 652.755025][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 652.781767][T12209] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1840'. [ 652.998418][ T5861] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 653.155913][T12196] loop4: detected capacity change from 0 to 65536 [ 653.228389][ T5861] usb 7-1: Using ep0 maxpacket: 32 [ 653.237163][ T5861] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 653.256423][ T5861] usb 7-1: config 0 has no interface number 0 [ 653.280474][ T5861] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 653.325158][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.364262][ T5861] usb 7-1: Product: syz [ 653.397580][ T5861] usb 7-1: Manufacturer: syz [ 653.409185][T12196] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 653.448328][ T5861] usb 7-1: SerialNumber: syz [ 653.481277][ T5861] usb 7-1: config 0 descriptor?? [ 653.519926][ T5861] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 653.571392][T12196] XFS (loop4): Ending clean mount [ 653.598478][T12196] XFS (loop4): Quotacheck needed: Please wait. [ 653.684909][T12196] XFS (loop4): Quotacheck: Done. [ 653.739766][ T5861] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 653.762724][ T5861] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 653.967143][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 654.018232][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 654.169088][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 654.169559][ T47] usb 7-1: USB disconnect, device number 5 [ 654.189958][ T5861] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 654.207546][ T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 654.214724][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 654.231537][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.240380][ T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 654.260811][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.265432][ T47] quatech2 7-1:0.51: device disconnected [ 654.291516][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.311271][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.320872][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.329629][ T8] usb 5-1: Product: syz [ 654.333867][ T8] usb 5-1: Manufacturer: syz [ 654.338690][ T8] usb 5-1: SerialNumber: syz [ 654.356949][ T8] cdc_ncm 5-1:1.0: skipping garbage [ 654.363151][ T8] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 654.374214][ T8] cdc_ncm 5-1:1.0: bind() failure [ 654.419946][ T5861] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.440002][ T5861] usb 1-1: config 0 has no interface number 0 [ 654.450713][ T5861] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 654.471185][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.495303][ T5861] usb 1-1: config 0 descriptor?? [ 654.513779][ T5861] usb 1-1: selecting invalid altsetting 1 [ 654.539412][ T5861] dvb_ttusb_budget: ttusb_init_controller: error [ 654.546624][ T5861] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 654.626611][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1849'. [ 654.687847][ T27] audit: type=1800 audit(1756736488.467:738): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1834" name="file1" dev="loop4" ino=38 res=0 errno=0 [ 654.734089][ T5861] DVB: Unable to find symbol cx22700_attach() [ 654.792616][ T5861] DVB: Unable to find symbol tda10046_attach() [ 654.809265][ T5861] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 654.823718][ T5861] usb 1-1: USB disconnect, device number 8 [ 654.946614][ T8] usb 5-1: USB disconnect, device number 7 [ 655.498000][ T8262] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 656.278945][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 656.292045][T12259] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1853'. [ 657.318955][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 657.351943][T12282] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1869'. [ 658.053276][T12290] loop8: detected capacity change from 0 to 8 [ 658.083586][T12290] Dev loop8: unable to read RDB block 8 [ 658.098832][T12290] loop8: unable to read partition table [ 658.118433][T12290] loop8: partition table beyond EOD, truncated [ 658.146938][T12290] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 658.171646][T12292] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.1873'. [ 658.403057][T12269] loop4: detected capacity change from 0 to 65536 [ 658.423085][T12295] 8021q: adding VLAN 0 to HW filter on device bond10 [ 658.483068][T12269] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 658.606634][T12269] XFS (loop4): Ending clean mount [ 658.645739][T12269] XFS (loop4): Quotacheck needed: Please wait. [ 658.824920][T12269] XFS (loop4): Quotacheck: Done. [ 658.894445][T12314] Invalid ELF header magic: != ELF [ 659.021283][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 659.033841][ T27] audit: type=1800 audit(1756736492.817:739): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1863" name="file1" dev="loop4" ino=38 res=0 errno=0 [ 659.079323][T12317] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1879'. [ 659.171090][ T27] audit: type=1800 audit(1756736492.967:740): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.1878" name="/newroot/269/bus" dev="tmpfs" ino=1441 res=0 errno=0 [ 659.431721][T12328] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.1883'. [ 659.768522][ T6106] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 659.800288][ T8262] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 660.009025][ T6106] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 660.023440][ T6106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.071036][ T6106] usb 7-1: config 0 descriptor?? [ 660.302637][ T6106] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 660.323215][ T6106] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 660.342630][ T6106] [drm:udl_init] *ERROR* Selecting channel failed [ 660.370457][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1889'. [ 660.403622][ T6106] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 660.421121][ T6106] [drm] Initialized udl on minor 2 [ 660.443139][ T6106] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 660.454284][T12341] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1889'. [ 660.494913][ T6106] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 660.533780][ T47] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 660.556837][ T6106] usb 7-1: USB disconnect, device number 6 [ 660.585277][ T47] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 661.658099][ T6106] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 661.693084][T12367] __nla_validate_parse: 2 callbacks suppressed [ 661.693105][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 661.725599][T12367] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1899'. [ 661.855816][ T6106] usb 7-1: Using ep0 maxpacket: 32 [ 661.868216][ T5632] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 661.873570][ T6106] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 661.898357][ T6106] usb 7-1: config 0 has no interface number 0 [ 661.927415][ T6106] usb 7-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 661.937196][ T6106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.953972][ T6106] usb 7-1: Product: syz [ 661.963177][ T6106] usb 7-1: Manufacturer: syz [ 661.968220][ T6106] usb 7-1: SerialNumber: syz [ 661.986346][ T6106] usb 7-1: config 0 descriptor?? [ 662.068257][ T5632] usb 5-1: Using ep0 maxpacket: 16 [ 662.090302][ T5632] usb 5-1: unable to get BOS descriptor or descriptor too short [ 662.111814][ T5632] usb 5-1: config 3 has an invalid interface number: 24 but max is 2 [ 662.129131][ T5632] usb 5-1: config 3 has an invalid interface number: 24 but max is 2 [ 662.143155][ T5632] usb 5-1: config 3 has an invalid interface number: 102 but max is 2 [ 662.153149][ T5632] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 662.173887][ T5632] usb 5-1: config 3 has no interface number 0 [ 662.182320][ T5632] usb 5-1: config 3 has no interface number 1 [ 662.194892][ T5632] usb 5-1: config 3 interface 24 has no altsetting 1 [ 662.203491][ T5632] usb 5-1: config 3 interface 102 has no altsetting 0 [ 662.222283][ T5632] usb 5-1: New USB device found, idVendor=22b8, idProduct=4244, bcdDevice=9d.e8 [ 662.251654][ T5632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.282275][ T5632] usb 5-1: Product: syz [ 662.294367][ T5632] usb 5-1: Manufacturer: syz [ 662.318042][ T5632] usb 5-1: SerialNumber: syz [ 662.465648][ T6106] kaweth 7-1:0.20: Firmware present in device. [ 662.479326][ T6106] kaweth 7-1:0.20: Error reading configuration (-71), no net device created [ 662.497113][ T6106] kaweth: probe of 7-1:0.20 failed with error -5 [ 662.530757][ T6106] usb 7-1: USB disconnect, device number 7 [ 662.651857][T12362] loop5: detected capacity change from 0 to 65536 [ 662.667664][ T5632] usb 5-1: USB disconnect, device number 8 [ 662.747530][T12362] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 662.854588][T12362] XFS (loop5): Ending clean mount [ 662.866191][T12362] XFS (loop5): Quotacheck needed: Please wait. [ 662.965174][T12362] XFS (loop5): Quotacheck: Done. [ 663.088110][ T27] audit: type=1800 audit(1756736496.877:741): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1897" name="file1" dev="loop5" ino=38 res=0 errno=0 [ 663.414145][T12389] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1903'. [ 663.547383][T12391] netlink: 'syz.4.1904': attribute type 72 has an invalid length. [ 663.854686][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 663.869914][T12401] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1909'. [ 663.896300][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 664.039070][ T6106] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 664.085385][T12405] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1912'. [ 664.210321][ T5861] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 664.239056][ T6106] usb 5-1: Using ep0 maxpacket: 16 [ 664.254334][ T6106] usb 5-1: unable to get BOS descriptor or descriptor too short [ 664.264625][ T6106] usb 5-1: config 3 has an invalid interface number: 24 but max is 1 [ 664.265008][T12409] netlink: 'syz.6.1914': attribute type 72 has an invalid length. [ 664.274153][ T6106] usb 5-1: config 3 has an invalid interface number: 102 but max is 1 [ 664.292427][ T6106] usb 5-1: config 3 has no interface number 0 [ 664.304290][ T6106] usb 5-1: config 3 has no interface number 1 [ 664.310972][ T6106] usb 5-1: config 3 interface 24 has no altsetting 0 [ 664.317874][ T6106] usb 5-1: config 3 interface 102 has no altsetting 0 [ 664.354720][ T6106] usb 5-1: New USB device found, idVendor=22b8, idProduct=4244, bcdDevice=9d.e8 [ 664.366465][ T6106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.374862][ T6106] usb 5-1: Product: syz [ 664.381172][ T6106] usb 5-1: Manufacturer: syz [ 664.385843][ T6106] usb 5-1: SerialNumber: syz [ 664.410851][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 664.422823][ T5861] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 664.432289][ T5861] usb 1-1: config 0 has no interface number 0 [ 664.441989][ T5861] usb 1-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 664.464010][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.475511][ T5861] usb 1-1: Product: syz [ 664.503210][ T5861] usb 1-1: Manufacturer: syz [ 664.507901][ T5861] usb 1-1: SerialNumber: syz [ 664.523937][ T5861] usb 1-1: config 0 descriptor?? [ 664.652506][ T6106] usb 5-1: bad CDC descriptors [ 664.674540][ T6106] usb 5-1: bad CDC descriptors [ 664.698313][ T6106] usb 5-1: USB disconnect, device number 9 [ 664.994688][ T5861] kaweth 1-1:0.20: Firmware present in device. [ 665.182729][ T5861] kaweth 1-1:0.20: Error reading configuration (-32), no net device created [ 665.195872][ T5861] kaweth: probe of 1-1:0.20 failed with error -5 [ 665.222670][ T5861] usb 1-1: USB disconnect, device number 9 [ 665.811718][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1920'. [ 665.852932][T12427] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1920'. [ 665.962429][T12430] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1921'. [ 666.155119][T12436] netlink: 'syz.5.1923': attribute type 72 has an invalid length. [ 666.700136][T12422] loop4: detected capacity change from 0 to 65536 [ 666.786489][T12422] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 666.951232][T12422] XFS (loop4): Ending clean mount [ 666.972278][T12466] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1932'. [ 666.974023][T12422] XFS (loop4): Quotacheck needed: Please wait. [ 667.061206][T12422] XFS (loop4): Quotacheck: Done. [ 667.108070][ T5632] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 667.157777][ T27] audit: type=1800 audit(1756736500.947:742): pid=12422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1919" name="file1" dev="loop4" ino=38 res=0 errno=0 [ 667.204633][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1933'. [ 667.227684][T12468] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1933'. [ 667.318655][ T5632] usb 1-1: Using ep0 maxpacket: 32 [ 667.352934][ T5632] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 667.383235][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.386644][T12472] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1935'. [ 667.402872][ T5632] usb 1-1: Product: syz [ 667.428256][ T5632] usb 1-1: Manufacturer: syz [ 667.433042][ T5632] usb 1-1: SerialNumber: syz [ 667.455104][ T5632] usb 1-1: config 0 descriptor?? [ 667.464214][ T5632] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 667.767278][ T8262] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 667.885104][ T6106] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 668.021577][T12482] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1941'. [ 668.097042][ T6106] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 668.114816][ T6106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.135037][ T6106] usb 7-1: config 0 descriptor?? [ 668.392901][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 668.410467][ T6106] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 668.426815][ T6106] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 668.448185][ T6106] [drm:udl_init] *ERROR* Selecting channel failed [ 668.485633][ T6106] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 668.504989][ T6106] [drm] Initialized udl on minor 2 [ 668.539722][ T6106] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 668.559555][ T6106] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 668.582566][ T6784] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 668.593591][ T6106] usb 7-1: USB disconnect, device number 8 [ 668.604600][ T6784] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 668.715159][ T5632] gspca_topro: reg_w err -71 [ 668.758530][ T5632] gspca_topro: Sensor soi763a [ 668.774104][ T5632] usb 1-1: USB disconnect, device number 10 [ 668.788270][ T5861] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 668.880212][ T8] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 668.994426][ T5861] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 669.009125][ T5861] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.025558][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0 [ 669.033780][ T5861] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 669.044130][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.059209][ T5861] usb 5-1: config 0 descriptor?? [ 669.083859][ T8] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 669.095500][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.109716][ T8] usb 6-1: config 0 descriptor?? [ 669.232135][T12493] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1945'. [ 669.361367][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 669.385008][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 669.398375][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 669.426002][ T8] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 669.450349][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1946'. [ 669.461864][ T8] [drm] Initialized udl on minor 2 [ 669.474067][ T8] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 669.484060][T12497] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1946'. [ 669.495692][ T8] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 669.518331][ T5861] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 669.525660][ T5861] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 669.536834][ T5842] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 669.546681][ T8] usb 6-1: USB disconnect, device number 7 [ 669.558523][ T5842] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 669.580110][ T5861] hid-steam 0003:28DE:1102.0004: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 669.699337][ T5861] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 669.733435][ T5861] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0004/input/input9 [ 669.871883][ T5861] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 669.898240][ T5861] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 669.948596][ T5861] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 670.023775][ T5861] usb 5-1: USB disconnect, device number 10 [ 670.166856][T12506] fido_id[12506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 670.194003][ T5861] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 670.737350][T12514] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1954'. [ 670.968229][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 671.252488][T12528] loop4: detected capacity change from 0 to 512 [ 671.279490][T12501] loop6: detected capacity change from 0 to 65536 [ 671.343715][T12528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.360800][T12501] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 671.383475][T12528] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.536664][T12501] XFS (loop6): Ending clean mount [ 671.557127][T12501] XFS (loop6): Quotacheck needed: Please wait. [ 671.585476][ T8262] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 671.626787][ T8262] EXT4-fs (loop4): Remounting filesystem read-only [ 671.663587][T12501] XFS (loop6): Quotacheck: Done. [ 671.768013][ T27] audit: type=1800 audit(1756736505.547:743): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1949" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 672.039960][ T8262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.056163][ T133] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 672.075942][ T133] Quota error (device loop4): write_blk: dquota write failed [ 672.084866][ T133] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 672.112620][ T133] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 672.140032][ T1136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.140479][ T133] Quota error (device loop4): write_blk: dquota write failed [ 672.173949][ T133] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 672.250552][ T6106] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 672.339007][T12555] __nla_validate_parse: 1 callbacks suppressed [ 672.339026][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1970'. [ 672.359651][T12555] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1970'. [ 672.372530][ T1136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.403373][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 672.498087][ T6106] usb 1-1: Using ep0 maxpacket: 8 [ 672.546463][ T6106] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.568016][ T6106] usb 1-1: config 0 has no interfaces? [ 672.587022][ T6106] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 672.603032][ T1136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.608999][ T6106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.638094][ T6106] usb 1-1: Product: syz [ 672.642541][ T6106] usb 1-1: Manufacturer: syz [ 672.647378][ T6106] usb 1-1: SerialNumber: syz [ 672.721069][ T6106] usb 1-1: config 0 descriptor?? [ 672.816343][ T1136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.516565][T12566] overlayfs: missing 'lowerdir' [ 673.727854][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 673.741650][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 673.752962][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 673.774291][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 673.809109][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 673.817042][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.712290][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1981'. [ 674.752341][T12599] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1981'. [ 675.039069][ T5842] usb 1-1: USB disconnect, device number 11 [ 675.149781][T12572] chnl_net:caif_netlink_parms(): no params data found [ 675.595287][ T1136] bond5: (slave wlan0): Releasing active interface [ 675.605453][ T1136] bond5: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 675.641861][ T1136] vlan2: entered promiscuous mode [ 675.704605][T12593] loop6: detected capacity change from 0 to 65536 [ 675.788761][T12593] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 675.869223][ T5792] Bluetooth: hci3: command tx timeout [ 675.928760][T12593] XFS (loop6): Ending clean mount [ 675.959715][T12593] XFS (loop6): Quotacheck needed: Please wait. [ 676.160739][T12593] XFS (loop6): Quotacheck: Done. [ 676.225287][ T27] audit: type=1800 audit(1756736510.017:744): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1980" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 676.292176][ T1136] hsr_slave_0: left promiscuous mode [ 676.317898][ T1136] hsr_slave_1: left promiscuous mode [ 676.339936][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.363217][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.396020][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.412024][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.423157][ T1136] bridge_slave_1: left allmulticast mode [ 676.438254][ T1136] bridge_slave_1: left promiscuous mode [ 676.445694][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.463367][ T1136] bridge_slave_0: left allmulticast mode [ 676.473148][ T1136] bridge_slave_0: left promiscuous mode [ 676.481764][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.543121][ T1136] veth1_macvtap: left promiscuous mode [ 676.549086][ T1136] veth0_macvtap: left promiscuous mode [ 676.555340][ T1136] veth1_vlan: left promiscuous mode [ 676.561926][ T1136] veth0_vlan: left promiscuous mode [ 676.813207][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 677.152687][ T1136] bond6 (unregistering): Released all slaves [ 677.230159][ T1136] bond5 (unregistering): (slave vlan2): Releasing active interface [ 677.238373][ T1136] vlan2 (unregistering): left promiscuous mode [ 677.244827][ T1136] veth1 (unregistering): left promiscuous mode [ 677.551757][ T1136] bond5 (unregistering): Released all slaves [ 677.956471][ T5792] Bluetooth: hci3: command tx timeout [ 678.345946][ T1136] bond4 (unregistering): Released all slaves [ 678.601259][ T1136] bond3 (unregistering): Released all slaves [ 678.826979][ T1136] bond2 (unregistering): Released all slaves [ 678.845928][ T1136] bond1 (unregistering): Released all slaves [ 679.552112][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 679.622430][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 679.688729][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.761690][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.028346][ T5792] Bluetooth: hci3: command tx timeout [ 680.594974][ T1136] bond0 (unregistering): Released all slaves [ 680.872512][T12572] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.932002][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 680.948117][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.955523][T12572] bridge_slave_0: entered allmulticast mode [ 680.990463][T12572] bridge_slave_0: entered promiscuous mode [ 681.006644][T12653] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1990'. [ 681.058527][T12572] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.078179][T12572] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.085874][T12572] bridge_slave_1: entered allmulticast mode [ 681.121842][T12572] bridge_slave_1: entered promiscuous mode [ 681.353299][T12572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.407364][T12572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.691466][T12572] team0: Port device team_slave_0 added [ 681.752457][T12572] team0: Port device team_slave_1 added [ 681.929782][T12572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.936906][T12572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.983785][T12572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.001180][T12572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.009129][T12572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.035415][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.043085][T12572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.113284][ T5792] Bluetooth: hci3: command tx timeout [ 682.371462][T12572] hsr_slave_0: entered promiscuous mode [ 682.392102][T12572] hsr_slave_1: entered promiscuous mode [ 682.411481][T12572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.428107][T12572] Cannot create hsr debugfs directory [ 684.219595][T12572] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 684.242046][T12572] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 684.296374][T12572] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 684.348841][T12572] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 684.643644][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2002'. [ 684.713856][T12717] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2002'. [ 684.747373][T12572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.866007][T12572] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.915099][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.923000][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.005159][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.012654][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.105649][T12687] loop6: detected capacity change from 0 to 65536 [ 685.218419][T12687] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 685.250230][T12687] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 685.265633][T12687] XFS (loop6): log mount failed [ 686.126078][T12572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.357373][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.790930][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 686.838422][T12768] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2012'. [ 687.126593][T12747] loop6: detected capacity change from 0 to 40427 [ 687.143783][T12747] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 687.165721][T12747] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 687.217142][T12747] F2FS-fs (loop6): invalid crc value [ 687.269567][T12747] F2FS-fs (loop6): Found nat_bits in checkpoint [ 687.307811][T12572] veth0_vlan: entered promiscuous mode [ 687.373324][T12572] veth1_vlan: entered promiscuous mode [ 687.517676][T12747] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 687.519466][T12572] veth0_macvtap: entered promiscuous mode [ 687.555635][T12747] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 687.581237][T12572] veth1_macvtap: entered promiscuous mode [ 687.701588][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.733287][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.788520][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.824487][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.836498][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.847783][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.866854][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.881228][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.894931][T12572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.907742][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.919607][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.935094][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.957177][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.977795][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.008046][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.038090][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.058234][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.080585][T12572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.309417][T12572] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.333516][T12572] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.351702][T12572] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.371262][T12572] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.629682][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.637678][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.769987][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.788939][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.998323][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 689.210368][ T47] usb 6-1: config 9 has an invalid interface number: 51 but max is 0 [ 689.228193][ T47] usb 6-1: config 9 has no interface number 0 [ 689.247188][ T47] usb 6-1: config 9 interface 51 has no altsetting 0 [ 689.300236][ T47] usb 6-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 689.338073][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.357027][ T47] usb 6-1: Product: syz [ 689.372911][ T47] usb 6-1: Manufacturer: syz [ 689.392212][ T47] usb 6-1: SerialNumber: syz [ 690.268646][ T47] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 690.372823][ T47] snd-usb-audio: probe of 6-1:9.51 failed with error -2 [ 690.381922][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2023'. [ 690.425866][ T47] usb 6-1: USB disconnect, device number 8 [ 690.483870][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.520820][T12824] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2023'. [ 693.114621][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2034'. [ 693.148039][ T47] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 693.165653][T12861] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2034'. [ 693.488029][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 693.513704][ T47] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 693.523284][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.566681][ T47] usb 6-1: config 0 descriptor?? [ 693.639485][ T47] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 695.441196][ T47] gspca_vc032x: reg_r err -32 [ 695.446319][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.459922][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.465631][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.473916][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.483558][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.491059][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.496905][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.508387][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.513966][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.523298][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.531671][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.537278][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.547010][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.556171][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.558336][ T5842] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 695.562594][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.577810][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.593788][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.603209][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.612060][ T47] gspca_vc032x: Unknown sensor... [ 695.617854][ T47] vc032x: probe of 6-1:0.0 failed with error -22 [ 695.639028][ T47] usb 6-1: USB disconnect, device number 9 [ 695.978501][ T5842] usb 8-1: Using ep0 maxpacket: 32 [ 696.006669][ T5842] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 696.055599][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.076126][ T5842] usb 8-1: config 0 descriptor?? [ 696.101079][ T5842] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 696.534845][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2044'. [ 696.595915][T12902] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2044'. [ 698.342606][ T5842] gspca_vc032x: reg_r err -32 [ 698.363883][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.379856][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.395833][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.418022][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.436775][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.451730][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.477220][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.496397][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.511417][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.529634][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.541382][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.556482][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.574754][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.608797][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.628071][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.633762][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.643786][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.668130][ T5842] gspca_vc032x: I2c Bus Busy Wait 00 [ 698.681579][ T5842] gspca_vc032x: Unknown sensor... [ 698.687026][ T5842] vc032x: probe of 8-1:0.0 failed with error -22 [ 698.717383][ T5842] usb 8-1: USB disconnect, device number 2 [ 698.988896][ T787] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 699.198524][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 699.217377][ T787] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 699.228831][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.273257][ T787] usb 1-1: config 0 descriptor?? [ 699.291465][ T787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 700.561853][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2057'. [ 700.649746][T12951] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2057'. [ 701.324290][ T787] gspca_vc032x: reg_r err -32 [ 701.347990][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.353369][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.379768][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.406715][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.412992][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.428957][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.434514][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.451615][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.457181][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.475376][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.487993][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.504455][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.510342][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.515910][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.538514][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.550144][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.568001][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.577191][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 701.604481][ T787] gspca_vc032x: Unknown sensor... [ 701.617446][T12968] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.2062'. [ 701.627759][ T787] vc032x: probe of 1-1:0.0 failed with error -22 [ 701.759515][ T787] usb 1-1: USB disconnect, device number 12 [ 703.908941][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2068'. [ 703.948496][T12994] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2068'. [ 704.108278][ T5879] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 704.346607][ T5879] usb 6-1: config 9 has an invalid interface number: 51 but max is 0 [ 704.377652][ T5879] usb 6-1: config 9 has no interface number 0 [ 704.408015][ T5879] usb 6-1: config 9 interface 51 has no altsetting 0 [ 704.458439][ T5879] usb 6-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 704.478001][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.517054][ T5879] usb 6-1: Product: syz [ 704.527186][ T5879] usb 6-1: Manufacturer: syz [ 704.541394][ T5879] usb 6-1: SerialNumber: syz [ 704.630412][T13004] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.2071'. [ 704.874892][ T5879] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 704.944787][ T5879] snd-usb-audio: probe of 6-1:9.51 failed with error -2 [ 704.968642][ T5879] usb 6-1: USB disconnect, device number 10 [ 705.012694][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.371299][ T5632] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 705.558376][ T5632] usb 7-1: Using ep0 maxpacket: 32 [ 705.581997][ T5632] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 705.626605][ T5632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.648767][ T5632] usb 7-1: config 0 descriptor?? [ 705.691510][ T5632] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 705.917192][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2077'. [ 705.979354][T13024] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2077'. [ 707.779395][T13043] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2081'. [ 708.276026][ T5632] gspca_vc032x: reg_r err -32 [ 708.393866][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.572221][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.640434][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.756629][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.860155][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.906523][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.937980][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.990552][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.995940][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.019191][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.027785][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.058929][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.064323][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.101477][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.117504][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.119819][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 709.148121][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.153553][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.191245][ T5632] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.196719][ T5632] gspca_vc032x: Unknown sensor... [ 709.208301][T13059] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2087'. [ 709.241481][ T5632] vc032x: probe of 7-1:0.0 failed with error -22 [ 709.315878][ T5632] usb 7-1: USB disconnect, device number 9 [ 709.688018][ T5632] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 709.900945][ T5632] usb 7-1: config 9 has an invalid interface number: 51 but max is 0 [ 709.928118][ T5632] usb 7-1: config 9 has no interface number 0 [ 709.942173][ T5632] usb 7-1: config 9 interface 51 has no altsetting 0 [ 709.972324][ T5632] usb 7-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 710.000122][ T5632] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.028497][ T5632] usb 7-1: Product: syz [ 710.038582][ T5632] usb 7-1: Manufacturer: syz [ 710.053609][ T5632] usb 7-1: SerialNumber: syz [ 710.121535][T13041] loop7: detected capacity change from 0 to 65536 [ 710.247038][T13041] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 710.490687][T13041] XFS (loop7): Ending clean mount [ 710.514238][T13041] XFS (loop7): Quotacheck needed: Please wait. [ 710.544730][ T5632] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 710.689713][T13041] XFS (loop7): Quotacheck: Done. [ 710.710843][ T5632] snd-usb-audio: probe of 7-1:9.51 failed with error -2 [ 710.795183][ T5632] usb 7-1: USB disconnect, device number 10 [ 710.869123][T12650] udevd[12650]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.919850][T12572] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 711.627671][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2097'. [ 711.986068][T13113] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2097'. [ 717.397711][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2109'. [ 717.434739][T13164] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2109'. [ 718.708279][ T27] audit: type=1326 audit(1756736552.497:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a98ebe9 code=0x7fc00000 [ 719.494701][ T27] audit: type=1326 audit(1756736553.287:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bffd8ebe9 code=0x7fc00000 [ 720.718612][ T8490] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 720.909500][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2120'. [ 720.911243][ T8490] usb 6-1: config 9 has an invalid interface number: 51 but max is 0 [ 720.943128][ T8490] usb 6-1: config 9 has no interface number 0 [ 720.950462][T13212] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2120'. [ 720.957105][ T8490] usb 6-1: config 9 interface 51 has no altsetting 0 [ 720.983665][ T8490] usb 6-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 720.994670][ T8490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.015034][ T8490] usb 6-1: Product: syz [ 721.024307][ T8490] usb 6-1: Manufacturer: syz [ 721.040587][ T8490] usb 6-1: SerialNumber: syz [ 721.347206][ T8490] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 721.464002][ T8490] snd-usb-audio: probe of 6-1:9.51 failed with error -2 [ 721.503566][ T8490] usb 6-1: USB disconnect, device number 11 [ 721.555456][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.757389][ T27] audit: type=1326 audit(1756736555.537:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6b8ebe9 code=0x7fc00000 [ 723.962804][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2130'. [ 724.012742][T13262] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2130'. [ 728.339448][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2142'. [ 728.563437][T13315] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2142'. [ 730.960734][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2151'. [ 730.983018][T13357] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2151'. [ 731.448752][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 731.498100][ T787] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 731.731254][ T5879] usb 1-1: config 9 has an invalid interface number: 51 but max is 0 [ 731.740239][ T5879] usb 1-1: config 9 has no interface number 0 [ 731.750017][ T787] usb 6-1: config 9 has an invalid interface number: 51 but max is 0 [ 731.762871][ T5879] usb 1-1: config 9 interface 51 has no altsetting 0 [ 731.771125][ T787] usb 6-1: config 9 has no interface number 0 [ 731.778944][ T787] usb 6-1: config 9 interface 51 has no altsetting 0 [ 731.812008][ T787] usb 6-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 731.858249][ T5879] usb 1-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 731.867700][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.881776][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.901354][ T5879] usb 1-1: Product: syz [ 731.905916][ T5879] usb 1-1: Manufacturer: syz [ 731.911557][ T787] usb 6-1: Product: syz [ 731.915862][ T787] usb 6-1: Manufacturer: syz [ 731.920914][ T5879] usb 1-1: SerialNumber: syz [ 731.933656][ T787] usb 6-1: SerialNumber: syz [ 732.260646][ T787] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 732.325793][ T787] snd-usb-audio: probe of 6-1:9.51 failed with error -2 [ 732.328945][ T787] usb 6-1: USB disconnect, device number 12 [ 732.345997][ T5879] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 732.380203][T12650] udevd[12650]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.492299][ T5879] snd-usb-audio: probe of 1-1:9.51 failed with error -2 [ 732.503107][ T5879] usb 1-1: USB disconnect, device number 13 [ 732.551452][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.51/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.573082][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2162'. [ 733.756873][T13398] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2162'. [ 737.337487][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2171'. [ 737.371658][T13423] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2171'. [ 738.372338][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.385374][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.400277][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.412702][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.427165][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 738.442617][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.648227][ T133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.365596][ T133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.532998][T13441] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2176'. [ 739.547047][ T133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.302788][ T133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.338359][ T27] audit: type=1326 audit(1756736574.127:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.5.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bffd8ebe9 code=0x7fc00000 [ 740.508300][ T5798] Bluetooth: hci2: command tx timeout [ 740.687523][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2180'. [ 740.732185][T13456] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2180'. [ 740.962327][T13430] chnl_net:caif_netlink_parms(): no params data found [ 741.136277][T13464] Bluetooth: MGMT ver 1.22 [ 741.565668][T13430] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.578920][T13430] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.592815][T13430] bridge_slave_0: entered allmulticast mode [ 741.607344][T13430] bridge_slave_0: entered promiscuous mode [ 741.678313][T13430] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.694445][T13430] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.710634][T13430] bridge_slave_1: entered allmulticast mode [ 741.731024][T13430] bridge_slave_1: entered promiscuous mode [ 742.003606][T13430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.053515][T13430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.288952][T13430] team0: Port device team_slave_0 added [ 742.419423][T13430] team0: Port device team_slave_1 added [ 742.596356][ T5798] Bluetooth: hci2: command tx timeout [ 742.678529][T13430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.719077][T13430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.835011][T13430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.881730][T13460] loop6: detected capacity change from 0 to 65536 [ 742.963248][T13430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.993390][T13430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.039807][T13460] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 743.159742][T13430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.237722][T13460] XFS (loop6): Ending clean mount [ 743.272653][T13460] XFS (loop6): Quotacheck needed: Please wait. [ 743.412432][T13460] XFS (loop6): Quotacheck: Done. [ 743.460590][ T27] audit: type=1800 audit(1756736577.247:749): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2182" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 743.607220][T13430] hsr_slave_0: entered promiscuous mode [ 743.618882][T13430] hsr_slave_1: entered promiscuous mode [ 743.639616][T13430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.657611][T13430] Cannot create hsr debugfs directory [ 743.719881][ T133] bond7: (slave wlan0): Releasing active interface [ 743.861035][ T133] hsr_slave_0: left promiscuous mode [ 743.885354][ T133] hsr_slave_1: left promiscuous mode [ 743.899073][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.916272][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.926855][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.948687][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.967362][ T133] bridge_slave_1: left allmulticast mode [ 743.973549][ T133] bridge_slave_1: left promiscuous mode [ 743.980547][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.990920][ T133] bridge_slave_0: left allmulticast mode [ 743.996716][ T133] bridge_slave_0: left promiscuous mode [ 744.003312][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.104638][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 744.123531][ T133] veth1: left promiscuous mode [ 744.134766][ T133] veth1_macvtap: left promiscuous mode [ 744.156697][ T133] veth0_macvtap: left promiscuous mode [ 744.168339][ T133] veth1_vlan: left promiscuous mode [ 744.177105][ T133] veth0_vlan: left promiscuous mode [ 744.677175][ T5798] Bluetooth: hci2: command tx timeout [ 745.313142][ T133] bond10 (unregistering): Released all slaves [ 745.809500][ T133] bond9 (unregistering): Released all slaves [ 746.294537][ T133] bond8 (unregistering): Released all slaves [ 746.750971][ T5798] Bluetooth: hci2: command tx timeout [ 746.850357][ T133] bond7 (unregistering): Released all slaves [ 747.165500][T13505] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2188'. [ 747.244710][ T133] bond6 (unregistering): Released all slaves [ 747.273298][ T133] bond5 (unregistering): (slave vlan2): Releasing active interface [ 747.521715][ T133] bond5 (unregistering): Released all slaves [ 747.779777][ T133] bond4 (unregistering): Released all slaves [ 747.794948][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.033568][ T133] bond3 (unregistering): Released all slaves [ 748.270219][ T133] bond2 (unregistering): Released all slaves [ 748.285871][ T133] bond1 (unregistering): Released all slaves [ 748.985563][ T133] team0 (unregistering): Port device team_slave_1 removed [ 749.066972][ T133] team0 (unregistering): Port device team_slave_0 removed [ 749.147841][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.222107][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.106077][ T133] bond0 (unregistering): Released all slaves [ 750.258224][T13498] netlink: 'syz.6.2186': attribute type 1 has an invalid length. [ 750.267387][T13498] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 750.319858][T13499] bond3: (slave wlan0): Releasing active interface [ 750.335925][T13499] bond3: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 750.354207][T13499] vlan2: entered promiscuous mode [ 750.390773][T13501] veth0: entered promiscuous mode [ 750.403975][T13501] veth0: left promiscuous mode [ 750.430429][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2187'. [ 751.011668][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2191'. [ 751.053147][T13513] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2191'. [ 751.389042][T13529] netlink: 'syz.6.2190': attribute type 1 has an invalid length. [ 751.474094][T13529] 8021q: adding VLAN 0 to HW filter on device bond5 [ 751.755621][T13516] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 752.722129][T13430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 752.768749][T13430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.825367][T13430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 752.875615][T13552] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2197'. [ 752.895555][T13430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.242900][T13430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.320831][T13430] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.396133][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.403655][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.492716][T12638] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.500256][T12638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.180463][T13547] loop5: detected capacity change from 0 to 65536 [ 754.257557][T13547] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 754.336353][T13547] XFS (loop5): Ending clean mount [ 754.343958][T13547] XFS (loop5): Quotacheck needed: Please wait. [ 754.413051][T13430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.499880][T13547] XFS (loop5): Quotacheck: Done. [ 754.616854][ T27] audit: type=1800 audit(1756736588.407:750): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2196" name="file1" dev="loop5" ino=38 res=0 errno=0 [ 754.685131][T13430] veth0_vlan: entered promiscuous mode [ 754.726365][T13430] veth1_vlan: entered promiscuous mode [ 754.803634][T13430] veth0_macvtap: entered promiscuous mode [ 754.871219][T13430] veth1_macvtap: entered promiscuous mode [ 754.925650][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.938533][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.954633][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.966394][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.983477][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.994921][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.011704][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.023143][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.035774][T13430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.074950][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.093136][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.104648][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.115922][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.126955][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.146871][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.157295][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.168825][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.181035][T13430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.228760][T13430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.248950][T13430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.282008][T13430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.308275][T13430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.342149][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 755.696616][T12638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.757154][T12638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.813511][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2200'. [ 755.871564][T13602] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2200'. [ 755.891338][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.943638][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.042935][T13629] netlink: 'syz.5.2199': attribute type 1 has an invalid length. [ 757.124863][T13629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 757.132802][T13628] veth0: entered promiscuous mode [ 757.138462][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2203'. [ 757.565573][T13631] bond3: (slave vlan2): Releasing active interface [ 757.578483][T13631] vlan2 (unregistering): left promiscuous mode [ 757.647098][T13634] bond3: (slave wlan0): Releasing active interface [ 757.681825][T13634] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 757.728003][T13644] netlink: 'syz.0.2204': attribute type 1 has an invalid length. [ 757.780368][T13644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.155791][T13654] syzkaller0: entered promiscuous mode [ 758.182691][T13654] syzkaller0: entered allmulticast mode [ 758.901403][T13663] netlink: 'syz.5.2205': attribute type 1 has an invalid length. [ 760.382881][T13663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 762.244053][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 762.304124][T13676] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2219'. [ 762.336326][T13679] tipc: Enabled bearer , priority 10 [ 762.537420][T13685] netlink: 'syz.7.2211': attribute type 1 has an invalid length. [ 762.798666][T13685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.934945][T13696] netlink: 'syz.6.2216': attribute type 72 has an invalid length. [ 763.009269][T13692] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 763.461736][ T5879] tipc: Node number set to 951813736 [ 765.134448][T13701] loop6: detected capacity change from 0 to 65536 [ 765.206302][T13701] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 765.307496][T13701] XFS (loop6): Ending clean mount [ 765.315097][T13701] XFS (loop6): Quotacheck needed: Please wait. [ 765.478415][T13701] XFS (loop6): Quotacheck: Done. [ 765.485170][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2223'. [ 765.560370][T13720] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2223'. [ 765.594676][ T27] audit: type=1800 audit(1756736599.387:751): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2218" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 766.233719][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 767.882046][T13734] netlink: 'syz.7.2226': attribute type 72 has an invalid length. [ 767.882934][T13736] veth0: entered promiscuous mode [ 767.905215][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 770.590645][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 770.611738][T13752] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2233'. [ 770.924177][T13750] loop7: detected capacity change from 0 to 65536 [ 771.011247][T13750] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 771.183580][T13750] XFS (loop7): Ending clean mount [ 771.231143][T13750] XFS (loop7): Quotacheck needed: Please wait. [ 771.382044][T13750] XFS (loop7): Quotacheck: Done. [ 771.498100][ T27] audit: type=1800 audit(1756736605.287:752): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2232" name="file1" dev="loop7" ino=38 res=0 errno=0 [ 772.251553][T12572] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 773.272462][T13769] netlink: 'syz.7.2235': attribute type 72 has an invalid length. [ 773.736965][T13776] netlink: 'syz.7.2237': attribute type 1 has an invalid length. [ 773.895149][T13776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.875658][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2243'. [ 774.909286][T13794] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2243'. [ 774.919275][T13795] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 775.078539][T13797] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2244'. [ 776.099382][T13816] netlink: 'syz.6.2249': attribute type 1 has an invalid length. [ 776.247150][T13816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 776.432483][T13818] bond5: (slave wlan0): Releasing active interface [ 776.450757][T13802] loop7: detected capacity change from 0 to 65536 [ 776.465670][T13818] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 776.525410][T13802] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 776.626993][T13802] XFS (loop7): Ending clean mount [ 776.653281][T13802] XFS (loop7): Quotacheck needed: Please wait. [ 776.811644][T13802] XFS (loop7): Quotacheck: Done. [ 776.994356][ T27] audit: type=1800 audit(1756736610.777:753): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2246" name="file1" dev="loop7" ino=38 res=0 errno=0 [ 777.258933][T13843] netlink: 'syz.6.2253': attribute type 1 has an invalid length. [ 777.306511][T13843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 777.582190][T13833] bond6: (slave wlan0): Releasing active interface [ 777.632988][T13833] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 777.764956][T12572] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 778.353347][T13854] netlink: 'syz.6.2258': attribute type 1 has an invalid length. [ 778.478053][T13854] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.581255][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2257'. [ 783.777821][T13871] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2263'. [ 784.540549][T13881] netlink: 'syz.6.2266': attribute type 1 has an invalid length. [ 784.671913][T13881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 784.808928][T13883] bond7: (slave wlan0): Releasing active interface [ 784.865481][T13883] bond9: (slave wlan0): Enslaving as an active interface with a down link [ 785.472477][T13891] netlink: 'syz.6.2267': attribute type 1 has an invalid length. [ 785.704023][T13891] 8021q: adding VLAN 0 to HW filter on device bond10 [ 786.310912][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2270'. [ 786.328699][T13903] netlink: 'syz.6.2268': attribute type 1 has an invalid length. [ 786.379327][T13901] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2270'. [ 786.563758][T13903] 8021q: adding VLAN 0 to HW filter on device bond11 [ 787.188135][T13913] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2273'. [ 787.863464][T13931] syzkaller0: entered promiscuous mode [ 787.878314][T13931] syzkaller0: entered allmulticast mode [ 788.689797][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2281'. [ 788.700242][T13943] netlink: 'syz.7.2280': attribute type 1 has an invalid length. [ 788.724633][T13942] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2281'. [ 788.975123][T13943] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.185614][T13952] tipc: Enabled bearer , priority 0 [ 789.203875][T13952] syzkaller0: entered promiscuous mode [ 789.215717][T13952] syzkaller0: entered allmulticast mode [ 789.252807][T13952] tipc: Resetting bearer [ 789.274354][T13951] tipc: Resetting bearer [ 789.356727][T13951] tipc: Disabling bearer [ 790.366692][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 790.385618][T13968] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2291'. [ 793.610824][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 793.642774][T13992] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2300'. [ 794.110081][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2302'. [ 794.164127][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 795.949577][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 799.388827][T14054] syzkaller0: entered promiscuous mode [ 799.408085][T14054] syzkaller0: entered allmulticast mode [ 800.630223][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2322'. [ 800.855398][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2322'. [ 800.887125][T14080] syzkaller0: entered promiscuous mode [ 800.898196][T14080] syzkaller0: entered allmulticast mode [ 804.942179][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2327'. [ 804.952199][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2327'. [ 805.432305][T14106] netlink: 'syz.6.2332': attribute type 4 has an invalid length. [ 805.557412][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2331'. [ 805.585838][T14109] netlink: 'syz.6.2332': attribute type 4 has an invalid length. [ 805.606465][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2331'. [ 805.898734][T14112] syzkaller0: entered promiscuous mode [ 805.920950][T14112] syzkaller0: entered allmulticast mode [ 806.288347][T14120] tipc: Enabling of bearer rejected, failed to enable media [ 806.326892][T14120] syzkaller0: entered promiscuous mode [ 806.338816][T14120] syzkaller0: entered allmulticast mode [ 806.687725][T14127] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2338'. [ 807.768758][T14140] tipc: Enabling of bearer rejected, failed to enable media [ 807.780790][T14140] syzkaller0: entered promiscuous mode [ 807.786476][T14140] syzkaller0: entered allmulticast mode [ 808.122095][T14142] syzkaller0: entered promiscuous mode [ 808.168162][T14142] syzkaller0: entered allmulticast mode [ 808.785932][T14163] tipc: Started in network mode [ 808.794691][T14163] tipc: Node identity ce517f85cab3, cluster identity 4711 [ 808.805918][T14163] tipc: Enabled bearer , priority 0 [ 808.817465][T14163] syzkaller0: entered promiscuous mode [ 808.823485][T14163] syzkaller0: entered allmulticast mode [ 809.002731][T14167] tipc: Resetting bearer [ 809.019540][T14162] tipc: Resetting bearer [ 809.052628][T14162] tipc: Disabling bearer [ 809.246794][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.470893][T14179] input: syz0 as /devices/virtual/input/input10 [ 810.690585][T14178] loop7: detected capacity change from 0 to 8192 [ 810.746120][T14178] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 810.841629][T14178] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 810.879060][T14178] FAT-fs (loop7): Filesystem has been set read-only [ 811.072956][T14189] input: syz0 as /devices/virtual/input/input11 [ 812.749787][T14201] input: syz0 as /devices/virtual/input/input12 [ 814.036812][T14210] tipc: Enabled bearer , priority 0 [ 814.046005][T14210] syzkaller0: entered promiscuous mode [ 814.061023][T14210] syzkaller0: entered allmulticast mode [ 814.098248][T14210] tipc: Resetting bearer [ 814.139881][T14209] tipc: Resetting bearer [ 814.214712][T14209] tipc: Disabling bearer [ 814.556062][T14217] loop7: detected capacity change from 0 to 16 [ 814.691652][T14217] erofs: (device loop7): mounted with root inode @ nid 36. [ 814.780074][T14217] ip6gre1: entered allmulticast mode [ 815.670924][T14224] tipc: Enabled bearer , priority 0 [ 815.693298][T14224] syzkaller0: entered promiscuous mode [ 815.700473][T14224] syzkaller0: entered allmulticast mode [ 815.724720][T14224] tipc: Resetting bearer [ 815.759776][T14223] tipc: Resetting bearer [ 815.804535][T14223] tipc: Disabling bearer [ 816.543822][T14237] netlink: 'syz.7.2371': attribute type 4 has an invalid length. [ 816.838771][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2373'. [ 816.903846][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2373'. [ 818.219251][T14254] policy can only be matched on NF_INET_PRE_ROUTING [ 818.219279][T14254] unable to load match [ 818.398688][T14256] loop6: detected capacity change from 0 to 16 [ 818.478215][T14256] erofs: (device loop6): mounted with root inode @ nid 36. [ 818.643211][T14256] ip6gre1: entered allmulticast mode [ 820.535895][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 820.566527][T14278] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2389'. [ 821.129822][T14284] syzkaller0: entered promiscuous mode [ 821.135503][T14284] syzkaller0: entered allmulticast mode [ 821.581475][T14276] loop7: detected capacity change from 0 to 65536 [ 821.664543][T14276] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 821.747574][T14276] XFS (loop7): Ending clean mount [ 821.774503][T14276] XFS (loop7): Quotacheck needed: Please wait. [ 821.860538][T14276] XFS (loop7): Quotacheck: Done. [ 822.434081][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2398'. [ 822.462216][T14308] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2398'. [ 822.635181][T12572] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 823.348583][T14329] netlink: 'syz.5.2404': attribute type 1 has an invalid length. [ 823.497347][T14329] 8021q: adding VLAN 0 to HW filter on device bond6 [ 823.614404][T14335] bond4: (slave wlan0): Releasing active interface [ 823.695480][T14335] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 824.038300][T14345] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 824.153858][T14345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.185475][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2409'. [ 824.219921][T14348] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2409'. [ 824.250334][T14345] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 824.537329][T14319] loop6: detected capacity change from 0 to 65536 [ 824.703502][T14319] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 824.903678][ T5159] udevd[5159]: worker [14094] terminated by signal 33 (Unknown signal 33) [ 824.944979][T14319] XFS (loop6): Ending clean mount [ 824.948817][ T5159] udevd[5159]: worker [14094] failed while handling '/devices/virtual/block/loop6' [ 825.018405][T14319] XFS (loop6): Quotacheck needed: Please wait. [ 825.211777][T14319] XFS (loop6): Quotacheck: Done. [ 825.549279][T14382] netlink: 'syz.7.2418': attribute type 1 has an invalid length. [ 825.723787][T14382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 826.331938][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2422'. [ 826.367835][T14390] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2422'. [ 826.647553][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 826.820316][T14397] netlink: 'syz.7.2423': attribute type 1 has an invalid length. [ 826.929088][T14397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 827.256801][T14394] bond1: (slave wlan0): Releasing active interface [ 827.282157][T14394] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 828.640535][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2431'. [ 828.681608][T14422] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2431'. [ 830.280354][T14423] loop6: detected capacity change from 0 to 65536 [ 830.362128][T14423] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 830.550276][T14423] XFS (loop6): Ending clean mount [ 830.578021][T14423] XFS (loop6): Quotacheck needed: Please wait. [ 830.705146][T14423] XFS (loop6): Quotacheck: Done. [ 832.229454][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 832.580028][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2441'. [ 832.619628][T14454] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2441'. [ 833.203865][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 833.225187][T14461] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2450'. [ 836.065951][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2455'. [ 836.114656][T14490] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2455'. [ 836.437251][T14497] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2458'. [ 837.329337][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2462'. [ 837.616903][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2466'. [ 837.642822][T14514] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2466'. [ 838.403397][T14533] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2473'. [ 838.629869][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2475'. [ 838.668485][T14537] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2475'. [ 839.922151][T14531] loop7: detected capacity change from 0 to 65536 [ 839.961869][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2485'. [ 839.979411][T14531] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 840.134862][T14531] XFS (loop7): Ending clean mount [ 840.208290][T14531] XFS (loop7): Quotacheck needed: Please wait. [ 840.343395][T14531] XFS (loop7): Quotacheck: Done. [ 841.210527][T12572] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 841.783117][T14608] __nla_validate_parse: 3 callbacks suppressed [ 841.783136][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2505'. [ 841.803592][T14608] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2505'. [ 842.636181][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2517'. [ 842.653240][T14634] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2517'. [ 843.726031][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2527'. [ 843.751100][T14655] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2527'. [ 843.925402][T14620] loop5: detected capacity change from 0 to 65536 [ 843.971925][T14620] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 844.130553][T14620] XFS (loop5): Ending clean mount [ 844.183742][T14620] XFS (loop5): Quotacheck needed: Please wait. [ 844.240778][T14677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2530'. [ 844.299614][T14620] XFS (loop5): Quotacheck: Done. [ 844.312590][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2530'. [ 844.606017][T14683] syzkaller0: entered promiscuous mode [ 844.611900][T14683] syzkaller0: entered allmulticast mode [ 844.728378][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2538'. [ 844.777513][T14687] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2538'. [ 845.163254][ T8314] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 847.411507][T14725] loop6: detected capacity change from 0 to 65536 [ 847.523715][T14725] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 847.644432][T14725] XFS (loop6): Ending clean mount [ 847.673567][T14725] XFS (loop6): Quotacheck needed: Please wait. [ 847.780026][T14725] XFS (loop6): Quotacheck: Done. [ 847.961995][T14775] __nla_validate_parse: 6 callbacks suppressed [ 847.962013][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 848.007210][T14775] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2572'. [ 848.570089][ T8374] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 848.636780][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 848.702678][T14779] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2582'. [ 852.305878][T14799] tipc: Enabling of bearer rejected, failed to enable media [ 852.479991][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2584'. [ 852.538864][T14816] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2584'. [ 962.837996][ C1] ------------[ cut here ]------------ [ 962.845124][ C1] WARNING: CPU: 1 PID: 14836 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 962.855851][ C1] Modules linked in: [ 962.859764][ C1] CPU: 1 PID: 14836 Comm: syz.0.2593 Not tainted syzkaller #0 [ 962.867314][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 962.877483][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 962.883847][ C1] Code: ff ff ff 48 c7 c7 a0 e4 ee 96 be 04 00 00 00 e8 3a a9 6c 00 48 89 df b8 01 00 00 00 87 05 0c b6 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 54 d3 8c 74 47 48 c7 c0 dc c3 4a 8e 48 c1 e8 03 [ 962.903859][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 962.910160][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35440 RCX: ffffffff81702e86 [ 962.918432][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35440 [ 962.926431][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 962.934408][ C1] R10: dffffc0000000000 R11: fffffbfff2dddc94 R12: 0000000000002904 [ 962.942394][ C1] R13: 1ffff110171e7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 962.950374][ C1] FS: 00007ff328c6f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 962.959486][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.966160][ C1] CR2: 000000110c2f5a62 CR3: 000000006ab06000 CR4: 00000000003506e0 [ 962.974504][ C1] Call Trace: [ 962.977796][ C1] [ 962.980665][ C1] rcu_core+0x612/0x1720 [ 962.984919][ C1] ? lock_chain_count+0x20/0x20 [ 962.989780][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 962.995175][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 963.000498][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 963.005807][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 963.011093][ C1] ? __run_timers+0x781/0x7d0 [ 963.015775][ C1] ? __run_timers+0x74e/0x7d0 [ 963.020556][ C1] ? detach_timer+0x2b0/0x2b0 [ 963.025329][ C1] ? detach_timer+0x2b0/0x2b0 [ 963.030156][ C1] ? lock_chain_count+0x20/0x20 [ 963.035059][ C1] handle_softirqs+0x280/0x820 [ 963.039869][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 963.044764][ C1] ? do_softirq+0x180/0x180 [ 963.049400][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 963.054660][ C1] __irq_exit_rcu+0xc7/0x190 [ 963.059276][ C1] ? irq_exit_rcu+0x20/0x20 [ 963.063796][ C1] irq_exit_rcu+0x9/0x20 [ 963.068060][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 963.073734][ C1] [ 963.076695][ C1] [ 963.079645][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 963.085648][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 963.091728][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 c7 bd 18 03 0f 1f 80 00 00 00 [ 963.111385][ C1] RSP: 0018:ffffc9000468fcd8 EFLAGS: 00000246 [ 963.117557][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 963.125533][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 963.133503][ C1] RBP: 0000000000000000 R08: ffffc9000468fc47 R09: 1ffff920008d1f88 [ 963.141566][ C1] R10: dffffc0000000000 R11: fffff520008d1f89 R12: ffff8880b8f35201 [ 963.149556][ C1] R13: dffffc0000000000 R14: ffff8880b8f35290 R15: 0000000000000020 [ 963.157557][ C1] arch_irq_work_raise+0x68/0x70 [ 963.162602][ C1] irq_work_queue+0x99/0x140 [ 963.167202][ C1] bpf_send_signal_common+0x2b6/0x420 [ 963.172675][ C1] ? __set_printk_clr_event+0x80/0x80 [ 963.178154][ C1] ? __cant_sleep+0x210/0x210 [ 963.182929][ C1] ? arch_do_signal_or_restart+0x492/0x780 [ 963.188762][ C1] bpf_send_signal+0x19/0x20 [ 963.193395][ C1] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 963.198881][ C1] bpf_trace_run2+0x1d1/0x3c0 [ 963.203569][ C1] ? bpf_trace_run2+0xde/0x3c0 [ 963.208554][ C1] ? bpf_trace_run1+0x3b0/0x3b0 [ 963.213429][ C1] ? lock_chain_count+0x20/0x20 [ 963.218420][ C1] trace_sys_enter+0x69/0x80 [ 963.223109][ C1] syscall_trace_enter+0xf0/0x150 [ 963.228248][ C1] do_syscall_64+0x28/0xb0 [ 963.232781][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.237565][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.242293][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.248403][ C1] RIP: 0033:0x7ff327d2adb9 [ 963.252838][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 963.272647][ C1] RSP: 002b:00007ff328c6ea80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 963.281362][ C1] RAX: ffffffffffffffda RBX: 00007ff327fc5fa0 RCX: 00007ff327d2adb9 [ 963.289354][ C1] RDX: 00007ff328c6ea80 RSI: 00007ff328c6ebb0 RDI: 0000000000000011 [ 963.297423][ C1] RBP: 00007ff327e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 963.305491][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.313561][ C1] R13: 00007ff327fc6038 R14: 00007ff327fc5fa0 R15: 00007ffe6038afd8 [ 963.321574][ C1] [ 963.324629][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 963.331966][ C1] CPU: 1 PID: 14836 Comm: syz.0.2593 Not tainted syzkaller #0 [ 963.339624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 963.349738][ C1] Call Trace: [ 963.353036][ C1] [ 963.355983][ C1] dump_stack_lvl+0x16c/0x230 [ 963.360699][ C1] ? show_regs_print_info+0x20/0x20 [ 963.365943][ C1] ? load_image+0x3b0/0x3b0 [ 963.370472][ C1] panic+0x2c0/0x710 [ 963.374500][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 963.379103][ C1] __warn+0x2e0/0x470 [ 963.383318][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 963.389201][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 963.395055][ C1] report_bug+0x2be/0x4f0 [ 963.399599][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 963.405361][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 963.411283][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 963.417065][ C1] handle_bug+0xcf/0x120 [ 963.421502][ C1] exc_invalid_op+0x1a/0x50 [ 963.426220][ C1] asm_exc_invalid_op+0x1a/0x20 [ 963.431140][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 963.437553][ C1] Code: ff ff ff 48 c7 c7 a0 e4 ee 96 be 04 00 00 00 e8 3a a9 6c 00 48 89 df b8 01 00 00 00 87 05 0c b6 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 54 d3 8c 74 47 48 c7 c0 dc c3 4a 8e 48 c1 e8 03 [ 963.457375][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 963.463576][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35440 RCX: ffffffff81702e86 [ 963.471577][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35440 [ 963.479774][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 963.487849][ C1] R10: dffffc0000000000 R11: fffffbfff2dddc94 R12: 0000000000002904 [ 963.495942][ C1] R13: 1ffff110171e7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 963.504267][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 963.510296][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 963.516140][ C1] rcu_core+0x612/0x1720 [ 963.520407][ C1] ? lock_chain_count+0x20/0x20 [ 963.525345][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 963.530992][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 963.536314][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 963.541542][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 963.546742][ C1] ? __run_timers+0x781/0x7d0 [ 963.551445][ C1] ? __run_timers+0x74e/0x7d0 [ 963.556342][ C1] ? detach_timer+0x2b0/0x2b0 [ 963.561126][ C1] ? detach_timer+0x2b0/0x2b0 [ 963.566099][ C1] ? lock_chain_count+0x20/0x20 [ 963.571255][ C1] handle_softirqs+0x280/0x820 [ 963.576065][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 963.580958][ C1] ? do_softirq+0x180/0x180 [ 963.585927][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 963.591234][ C1] __irq_exit_rcu+0xc7/0x190 [ 963.595954][ C1] ? irq_exit_rcu+0x20/0x20 [ 963.600476][ C1] irq_exit_rcu+0x9/0x20 [ 963.604745][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 963.610678][ C1] [ 963.613621][ C1] [ 963.616559][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 963.622553][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 963.628458][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 c7 bd 18 03 0f 1f 80 00 00 00 [ 963.648196][ C1] RSP: 0018:ffffc9000468fcd8 EFLAGS: 00000246 [ 963.654292][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 963.662382][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 963.670383][ C1] RBP: 0000000000000000 R08: ffffc9000468fc47 R09: 1ffff920008d1f88 [ 963.678741][ C1] R10: dffffc0000000000 R11: fffff520008d1f89 R12: ffff8880b8f35201 [ 963.686814][ C1] R13: dffffc0000000000 R14: ffff8880b8f35290 R15: 0000000000000020 [ 963.694812][ C1] arch_irq_work_raise+0x68/0x70 [ 963.699769][ C1] irq_work_queue+0x99/0x140 [ 963.704365][ C1] bpf_send_signal_common+0x2b6/0x420 [ 963.709740][ C1] ? __set_printk_clr_event+0x80/0x80 [ 963.715137][ C1] ? __cant_sleep+0x210/0x210 [ 963.719846][ C1] ? arch_do_signal_or_restart+0x492/0x780 [ 963.725685][ C1] bpf_send_signal+0x19/0x20 [ 963.730377][ C1] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 963.736286][ C1] bpf_trace_run2+0x1d1/0x3c0 [ 963.740976][ C1] ? bpf_trace_run2+0xde/0x3c0 [ 963.745833][ C1] ? bpf_trace_run1+0x3b0/0x3b0 [ 963.750807][ C1] ? lock_chain_count+0x20/0x20 [ 963.755754][ C1] trace_sys_enter+0x69/0x80 [ 963.760357][ C1] syscall_trace_enter+0xf0/0x150 [ 963.765464][ C1] do_syscall_64+0x28/0xb0 [ 963.769911][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.774592][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.779290][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.785319][ C1] RIP: 0033:0x7ff327d2adb9 [ 963.789847][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 963.809472][ C1] RSP: 002b:00007ff328c6ea80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 963.818035][ C1] RAX: ffffffffffffffda RBX: 00007ff327fc5fa0 RCX: 00007ff327d2adb9 [ 963.826100][ C1] RDX: 00007ff328c6ea80 RSI: 00007ff328c6ebb0 RDI: 0000000000000011 [ 963.834090][ C1] RBP: 00007ff327e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 963.842063][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.850128][ C1] R13: 00007ff327fc6038 R14: 00007ff327fc5fa0 R15: 00007ffe6038afd8 [ 963.858130][ C1] [ 964.967652][ C1] Shutting down cpus with NMI [ 964.972785][ C1] Kernel Offset: disabled [ 964.977881][ C1] Rebooting in 86400 seconds..