last executing test programs: 7m51.344874216s ago: executing program 4 (id=2048): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 7m47.887053406s ago: executing program 4 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c000000000200000400000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 7m47.639877897s ago: executing program 4 (id=2064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c000000000200000400000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 7m46.699299441s ago: executing program 4 (id=2067): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) recvmmsg(r3, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000040)=0xf2b, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x3, r5}, 0x38) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200000c0) 7m45.451196559s ago: executing program 4 (id=2070): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) read(r2, &(0x7f0000000940)=""/1040, 0x410) pipe(&(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000140)) 7m41.383200937s ago: executing program 4 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003440)={r0, 0x20, &(0x7f0000003400)={&(0x7f00000023c0)=""/4096, 0x1000, 0x0, &(0x7f00000033c0)}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foosyz\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x8000) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(0xffffffffffffffff) accept$inet(r3, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x100, &(0x7f00001a4000/0x2000)=nil, 0x2) gettid() 7m25.57288948s ago: executing program 32 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003440)={r0, 0x20, &(0x7f0000003400)={&(0x7f00000023c0)=""/4096, 0x1000, 0x0, &(0x7f00000033c0)}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foosyz\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x8000) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(0xffffffffffffffff) accept$inet(r3, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x100, &(0x7f00001a4000/0x2000)=nil, 0x2) gettid() 2m2.007712876s ago: executing program 3 (id=3864): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) wait4(r0, 0x0, 0x8, 0x0) 2m1.718658299s ago: executing program 3 (id=3865): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[], 0x24}}, 0x40000) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00"], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x88, 0x0, 0x0) 1m59.515057001s ago: executing program 3 (id=3881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) 1m59.358657708s ago: executing program 3 (id=3883): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1f7, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m58.753103697s ago: executing program 3 (id=3889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020073797a3200000000090001"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m58.015194571s ago: executing program 3 (id=3891): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[], 0x24}}, 0x40000) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00"], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x88, 0x0, 0x0) 1m57.780812822s ago: executing program 33 (id=3891): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[], 0x24}}, 0x40000) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00"], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x88, 0x0, 0x0) 18.303328562s ago: executing program 6 (id=4313): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) open(0x0, 0x880, 0x5a) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 16.963054704s ago: executing program 6 (id=4319): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) capget(&(0x7f0000000040)={0x19980330, r3}, &(0x7f00000000c0)={0x7, 0x3, 0xffff, 0x0, 0x7, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 12.614530795s ago: executing program 5 (id=4332): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) 10.853226287s ago: executing program 5 (id=4334): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) 10.251210135s ago: executing program 2 (id=4338): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x3, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x0, 0x3, 0x80000801, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x8, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x1, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x8, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x1, 0x20004, 0xe50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x7fffffff, 0xfffffffd, 0x2000003, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x2, 0x4, 0x4, 0x43fe, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x800, 0x0) 9.175246415s ago: executing program 2 (id=4341): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd", 0xc3, 0xfffffffffffffffe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0xc302, 0x0) write(r1, &(0x7f0000000180)='127.0.0.1\x00', 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000003c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x4c000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) clock_gettime(0xfffffffffffffffb, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x200) epoll_create1(0x0) 8.886762398s ago: executing program 6 (id=4343): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x18, 0x0, 0x0, 0xfffffffffffffec8) 7.002869105s ago: executing program 6 (id=4347): syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$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") sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="010000", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000811) syz_open_dev$vim2m(&(0x7f0000000b00), 0x3ff, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060020000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x4080010) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x8, 0x0, 0xe, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e80)='net/snmp6\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0xc00) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) preadv(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000480)=""/246, 0xf6}], 0x2, 0x6, 0x2db0a6fc) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000e40)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0x1, 0x4b9, &(0x7f0000001040)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000003a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003a00)={&(0x7f0000006000)=ANY=[@ANYBLOB="cc00fdeef71f0d6d148b3ded2e446b75c70800"/28, @ANYRES32=r0, @ANYBLOB="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"], 0x24fc}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000140)={0x20004, r7, 0x1}) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a042, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111cc0000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747bcbfe915cef1698d0d2c909ab1ad34e193a81d3e2cb6314ddd679f6e3b23ea7f34661692a7b17326e768c94703de7a95b670d9bf26865f1834ccb02dc1b0a42f82949fd1fbe09cbe618ccb8175636a0180cb5d2a2f5e44f22940f7153ff54449fd8ac7a0c4236d01bbc54d9206433a1e0700fa161f4d265d87bcb3de74729c335ad9d3113e90e88ddbb60bff0de6822a027a718bb767f01749c461ae40bae713a9c4"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.983036946s ago: executing program 1 (id=4348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x5, 0xc, 0x1, 0x40}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x2, 0x6, 0x29}}, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}]]}, 0x90}}, 0x0) 6.970774677s ago: executing program 2 (id=4349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.985378512s ago: executing program 2 (id=4350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @NDA_NH_ID={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) 5.931300725s ago: executing program 1 (id=4351): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x3, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x0, 0x3, 0x80000801, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x8, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x1, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x8, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x1, 0x20004, 0xe50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x7fffffff, 0xfffffffd, 0x2000003, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x2, 0x4, 0x4, 0x43fe, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x800, 0x0) 4.995682278s ago: executing program 6 (id=4353): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) capget(&(0x7f0000000040)={0x19980330, r3}, &(0x7f00000000c0)={0x7, 0x3, 0xffff, 0x0, 0x7, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 4.933972821s ago: executing program 1 (id=4354): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(0xffffffffffffffff, r5, 0x0, 0x80001d00c0d1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.815336607s ago: executing program 2 (id=4355): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1b, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.742592241s ago: executing program 0 (id=4356): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000000c0)) 4.685638973s ago: executing program 5 (id=4357): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) 4.636511005s ago: executing program 0 (id=4358): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/usbip_status\x00', 0x0, 0x0) read(r6, &(0x7f0000000200)=""/256, 0x100) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa2103}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ecfb2c2cd5596a2f3e5ac895ed"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "98ea355dd3"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "70a802147062c782e5a6a34a89cedd11"}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r1, &(0x7f0000002500), 0x4000000000000e7, 0x2400c8c4) socket(0x10, 0x3, 0x0) 3.955484107s ago: executing program 1 (id=4359): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd", 0xc3, 0xfffffffffffffffe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0xc302, 0x0) write(r1, &(0x7f0000000180)='127.0.0.1\x00', 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000003c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x4c000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) clock_gettime(0xfffffffffffffffb, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x200) epoll_create1(0x0) 3.734816457s ago: executing program 5 (id=4360): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.891074166s ago: executing program 0 (id=4361): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) capget(&(0x7f0000000040)={0x19980330, r3}, &(0x7f00000000c0)={0x7, 0x3, 0xffff, 0x0, 0x7, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 2.103276192s ago: executing program 5 (id=4362): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d", 0xbd, 0xfffffffffffffffe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0xc302, 0x0) write(r1, &(0x7f0000000180)='127.0.0.1\x00', 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000003c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x4c000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) clock_gettime(0xfffffffffffffffb, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x200) epoll_create1(0x0) 2.092674173s ago: executing program 0 (id=4363): syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$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") sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="010000", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000811) syz_open_dev$vim2m(0x0, 0x3ff, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060020000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x4080010) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x8, 0x0, 0xe, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e80)='net/snmp6\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0xc00) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) preadv(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000480)=""/246, 0xf6}], 0x2, 0x6, 0x2db0a6fc) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000e40)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0x1, 0x4b9, &(0x7f0000001040)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000003a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003a00)={&(0x7f0000006000)=ANY=[@ANYBLOB="cc00fdeef71f0d6d148b3ded2e446b75c70800"/28, @ANYRES32=r0, @ANYBLOB="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"], 0x24fc}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000140)={0x20004, r7, 0x1}) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a042, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111cc0000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747bcbfe915cef1698d0d2c909ab1ad34e193a81d3e2cb6314ddd679f6e3b23ea7f34661692a7b17326e768c94703de7a95b670d9bf26865f1834ccb02dc1b0a42f82949fd1fbe09cbe618ccb8175636a0180cb5d2a2f5e44f22940f7153ff54449fd8ac7a0c4236d01bbc54d9206433a1e0700fa161f4d265d87bcb3de74729c335ad9d3113e90e88ddbb60bff0de6822a027a718bb767f01749c461ae40bae713a9c4"], &(0x7f0000000000)='GPL\x00'}, 0x94) 978.587095ms ago: executing program 1 (id=4364): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x3, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x0, 0x3, 0x80000801, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x8, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x1, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x8, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x1, 0x20004, 0xe50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x7fffffff, 0xfffffffd, 0x2000003, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x2, 0x4, 0x4, 0x43fe, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x800, 0x0) 897.911839ms ago: executing program 0 (id=4365): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ftruncate(0xffffffffffffffff, 0x200004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 103.328625ms ago: executing program 0 (id=4366): syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$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") r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000", @ANYRES16=r0, @ANYBLOB="22002bbd7000fedbdf2510000000050010000e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000811) syz_open_dev$vim2m(&(0x7f0000000b00), 0x3ff, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060020000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x4080010) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x8, 0x0, 0xe, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102}, 0x10) 80.323396ms ago: executing program 2 (id=4367): r0 = socket(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x4000800) 51.811198ms ago: executing program 6 (id=4368): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) 36.564888ms ago: executing program 1 (id=4369): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(0xffffffffffffffff, r5, 0x0, 0x80001d00c0d1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 0s ago: executing program 5 (id=4370): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) kernel console output (not intermixed with test programs): d=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2620" name="file2" dev="loop5" ino=95 res=0 errno=0 [ 863.834131][T13637] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 864.645908][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2623'. [ 865.457571][T13665] capability: warning: `syz.2.2632' uses deprecated v2 capabilities in a way that may be insecure [ 865.782553][T13669] atomic_op ffff888079162998 conn xmit_atomic 0000000000000000 [ 866.602695][T13677] loop5: detected capacity change from 0 to 256 [ 866.659821][T13679] bond2: option mode: unable to set because the bond device has slaves [ 866.722041][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 866.749379][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 867.259221][ T8880] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 867.833235][T13690] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 867.909998][ T8880] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 867.924485][T13690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2643'. [ 867.943925][ T8880] usb 4-1: config 0 has no interface number 0 [ 867.990681][ T8880] usb 4-1: config 0 interface 41 has no altsetting 0 [ 868.429178][ T8880] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 869.151393][ T8880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.159502][ T8880] usb 4-1: Product: syz [ 869.163905][ T8880] usb 4-1: Manufacturer: syz [ 869.168570][ T8880] usb 4-1: SerialNumber: syz [ 869.199136][ T8880] usb 4-1: config 0 descriptor?? [ 869.265228][T13712] netlink: 'syz.5.2651': attribute type 2 has an invalid length. [ 869.273561][T13712] netlink: 'syz.5.2651': attribute type 1 has an invalid length. [ 869.284992][T13712] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2651'. [ 869.680443][ T8880] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 869.695874][T13735] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 869.709081][ T8880] CoreChips: probe of 4-1:0.41 failed with error -71 [ 869.735017][ T8880] usb 4-1: USB disconnect, device number 12 [ 869.861709][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.868404][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.804653][T13738] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2661'. [ 871.355651][T13760] bridge0: port 3(syz_tun) entered blocking state [ 871.363518][T13760] bridge0: port 3(syz_tun) entered disabled state [ 871.372029][T13760] device syz_tun entered promiscuous mode [ 871.378660][T13760] bridge0: port 3(syz_tun) entered blocking state [ 871.385230][T13760] bridge0: port 3(syz_tun) entered forwarding state [ 871.395750][T13760] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 871.738710][T13768] atomic_op ffff88807d1e8998 conn xmit_atomic 0000000000000000 [ 872.420089][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 872.451067][T13785] loop3: detected capacity change from 0 to 164 [ 872.583333][T13788] bond1: option mode: unable to set because the bond device has slaves [ 872.601273][T13785] isofs: Unable to find the ".." directory for NFS. [ 872.673537][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'. [ 872.689764][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 872.795292][T13802] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 872.798055][T13803] loop5: detected capacity change from 0 to 164 [ 872.865131][T13803] Unable to read rock-ridge attributes [ 872.966123][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2684'. [ 873.972624][T13803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2685'. [ 874.574555][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 874.862753][T13837] loop5: detected capacity change from 0 to 32768 [ 874.882364][T13844] loop3: detected capacity change from 0 to 256 [ 874.897897][T13840] siw: device registration error -23 [ 874.920505][T13844] exfat: Deprecated parameter 'namecase' [ 874.928493][T13844] exfat: Deprecated parameter 'namecase' [ 874.956739][T13844] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcec2b026, utbl_chksum : 0xe619d30d) [ 875.063186][T13837] XFS (loop5): Mounting V5 Filesystem [ 875.250792][T13837] XFS (loop5): Ending clean mount [ 875.264003][T13837] XFS (loop5): Quotacheck needed: Please wait. [ 875.964749][T13837] XFS (loop5): Quotacheck: Done. [ 877.083773][ T26] audit: type=1800 audit(1790125116.210:564): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2694" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 877.195332][T11946] XFS (loop5): Unmounting Filesystem [ 878.865246][T13912] bond2: option mode: unable to set because the bond device has slaves [ 879.720801][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 879.754906][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'. [ 879.809360][T13918] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 57485 - 0 [ 879.829776][T13918] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 57485 - 0 [ 879.849193][T13918] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 57485 - 0 [ 879.917384][T13918] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 57485 - 0 [ 879.944442][T13918] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 53031 - 0 [ 879.999519][T13918] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 53031 - 0 [ 880.010633][T13918] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 53031 - 0 [ 880.020619][T13918] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 53031 - 0 [ 880.362997][T13918] device geneve2 entered promiscuous mode [ 880.485599][ T4232] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 880.697713][T13935] netlink: 'syz.1.2730': attribute type 30 has an invalid length. [ 880.890079][ T4232] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 880.913843][ T4232] usb 4-1: config 0 has no interface number 0 [ 881.389118][ T4232] usb 4-1: config 0 interface 41 has no altsetting 0 [ 882.899298][ T4232] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 882.912170][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.930895][ T4232] usb 4-1: Product: syz [ 882.941950][ T4232] usb 4-1: Manufacturer: syz [ 882.955660][ T4232] usb 4-1: config 0 descriptor?? [ 882.989155][ T4232] usb 4-1: can't set config #0, error -71 [ 882.997432][ T4232] usb 4-1: USB disconnect, device number 13 [ 883.126515][T13976] loop5: detected capacity change from 0 to 256 [ 884.227369][T13995] loop3: detected capacity change from 0 to 64 [ 884.383685][T13995] MINIX-fs: bad superblock or unable to read bitmaps [ 884.629124][T14003] loop5: detected capacity change from 0 to 32768 [ 884.997859][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 885.102031][T14021] atomic_op ffff888022c52198 conn xmit_atomic 0000000000000000 [ 885.651428][T14019] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 885.779268][T14003] XFS (loop5): Mounting V5 Filesystem [ 885.805985][T14019] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 885.850907][T14003] XFS (loop5): Ending clean mount [ 885.860738][T14003] XFS (loop5): Quotacheck needed: Please wait. [ 885.886190][T14019] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 885.927695][T14003] XFS (loop5): Quotacheck: Done. [ 885.933305][T14019] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 886.444933][ T26] audit: type=1800 audit(1790125126.000:565): pid=14039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2753" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 886.518228][T14042] bond2: option mode: unable to set because the bond device has slaves [ 886.680781][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 886.692558][T14045] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2766'. [ 887.080285][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 887.549751][ T8880] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 887.564580][T11946] XFS (loop5): Unmounting Filesystem [ 887.909464][ T8880] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 887.928184][ T8880] usb 4-1: config 0 has no interface number 0 [ 887.948234][ T8880] usb 4-1: config 0 interface 41 has no altsetting 0 [ 888.066517][T14071] bond1: option mode: unable to set because the bond device has slaves [ 888.098630][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'. [ 888.119349][ T8880] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 888.128441][ T8880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.130048][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 888.151571][ T8880] usb 4-1: Product: syz [ 888.161002][ T8880] usb 4-1: Manufacturer: syz [ 888.171724][ T8880] usb 4-1: SerialNumber: syz [ 888.347196][ T8880] usb 4-1: config 0 descriptor?? [ 889.149221][ T8880] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 889.178898][ T8880] CoreChips: probe of 4-1:0.41 failed with error -71 [ 889.209412][ T8880] usb 4-1: USB disconnect, device number 14 [ 890.517615][T14107] bond1: option mode: unable to set because the bond device has slaves [ 890.536082][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 890.585373][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 892.018424][T14135] bond1: option mode: unable to set because the bond device has slaves [ 892.092181][T14132] loop5: detected capacity change from 0 to 32768 [ 892.606885][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 892.638565][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 892.687856][T14132] XFS (loop5): Mounting V5 Filesystem [ 892.781454][T14147] loop3: detected capacity change from 0 to 164 [ 892.836343][T14132] XFS (loop5): Ending clean mount [ 892.863828][T14147] Unable to read rock-ridge attributes [ 892.887453][T14132] XFS (loop5): Quotacheck needed: Please wait. [ 892.977845][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2801'. [ 893.001381][T14132] XFS (loop5): Quotacheck: Done. [ 893.817761][ T26] audit: type=1800 audit(1790125133.420:566): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2795" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 893.993518][T11946] XFS (loop5): Unmounting Filesystem [ 894.324809][T14170] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 894.716861][T14173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2807'. [ 895.627169][T14190] bond1: option mode: unable to set because the bond device has slaves [ 895.638604][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'. [ 895.648417][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2815'. [ 895.674959][T14188] loop3: detected capacity change from 0 to 1164 [ 897.089016][ T4232] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 897.283611][T14188] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 897.679430][ T4232] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 897.708500][ T4232] usb 6-1: config 0 has no interface number 0 [ 897.715295][ T4232] usb 6-1: config 0 interface 41 has no altsetting 0 [ 897.889311][ T4232] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 897.914425][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.614314][T14221] loop3: detected capacity change from 0 to 512 [ 898.710000][ T4232] usb 6-1: Product: syz [ 898.714313][ T4232] usb 6-1: Manufacturer: syz [ 898.719174][ T4232] usb 6-1: SerialNumber: syz [ 898.738839][ T4232] usb 6-1: config 0 descriptor?? [ 898.795491][ T4232] usb 6-1: can't set config #0, error -71 [ 898.822430][ T4232] usb 6-1: USB disconnect, device number 4 [ 898.948880][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2832'. [ 899.964700][T14237] loop5: detected capacity change from 0 to 164 [ 900.007035][T14221] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 900.069348][T14237] Unable to read rock-ridge attributes [ 900.095556][T14221] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.143167][T14237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2831'. [ 900.427185][T14247] loop5: detected capacity change from 0 to 164 [ 900.526179][T14247] Unable to read rock-ridge attributes [ 900.561829][T14253] loop3: detected capacity change from 0 to 164 [ 900.568479][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2836'. [ 900.615798][T14247] Unable to read rock-ridge attributes [ 900.651806][T14247] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 900.793506][T14253] Unable to read rock-ridge attributes [ 900.832288][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2837'. [ 901.450751][T14269] loop3: detected capacity change from 0 to 164 [ 901.552703][T14269] Unable to read rock-ridge attributes [ 901.666209][T14269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 902.238909][T14284] device macsec0 entered promiscuous mode [ 902.248952][T14263] loop5: detected capacity change from 0 to 32768 [ 902.742571][T14291] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 903.589263][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2857'. [ 903.696254][T14280] loop3: detected capacity change from 0 to 32768 [ 904.023735][T14311] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 906.083822][T14280] XFS (loop3): Mounting V5 Filesystem [ 906.431012][T14311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2861'. [ 906.447624][T14280] XFS (loop3): log mount failed [ 906.485734][T14322] loop5: detected capacity change from 0 to 512 [ 906.696192][T14322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 906.875069][T14335] bond1: option mode: unable to set because the bond device has slaves [ 906.940342][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 906.996260][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 907.072447][ T155] bond1: (slave bond0): link status definitely down, disabling slave [ 907.217998][ T155] bond1: now running without any active interface! [ 907.364850][T14352] loop3: detected capacity change from 0 to 164 [ 907.384275][T14352] Unable to read rock-ridge attributes [ 907.399315][T14352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2871'. [ 908.917783][T14373] loop3: detected capacity change from 0 to 164 [ 908.938036][T14375] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 908.982170][T14373] Unable to read rock-ridge attributes [ 909.151562][T14377] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 909.388229][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2883'. [ 910.192021][T14394] loop5: detected capacity change from 0 to 164 [ 910.241008][T14395] bond1: option mode: unable to set because the bond device has slaves [ 910.262171][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 910.282240][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 910.332142][T14394] Unable to read rock-ridge attributes [ 910.358122][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2890'. [ 910.440691][T14398] loop3: detected capacity change from 0 to 4096 [ 910.484193][T14398] EXT4-fs (loop3): Test dummy encryption mode enabled [ 910.567842][T14398] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 911.901325][T14426] loop5: detected capacity change from 0 to 164 [ 911.914535][T14424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2901'. [ 911.951707][T14428] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 912.009363][T14424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2901'. [ 912.682335][T14426] Unable to read rock-ridge attributes [ 912.712796][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2900'. [ 912.868793][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2898'. [ 912.874019][T14440] bond1: option mode: unable to set because the bond device has slaves [ 912.891207][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 913.366390][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 913.375748][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 913.416211][T14438] siw: device registration error -23 [ 913.718816][T14450] loop3: detected capacity change from 0 to 2048 [ 914.747775][T14463] loop5: detected capacity change from 0 to 2048 [ 915.182918][T14463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 917.089381][T14486] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 918.230623][T14506] bond2: option mode: unable to set because the bond device has slaves [ 918.241066][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 918.256806][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 918.375668][T14500] loop5: detected capacity change from 0 to 8 [ 918.419307][T14500] squashfs image failed sanity check [ 918.879757][ T4232] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 919.121895][T14529] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 920.154990][T14539] loop5: detected capacity change from 0 to 4096 [ 920.339173][T14549] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 920.975970][ T4232] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 920.984332][ T4232] usb 4-1: config 0 has no interface number 0 [ 920.990538][ T4232] usb 4-1: config 0 interface 41 has no altsetting 0 [ 921.049061][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 921.057544][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 921.068491][ T4232] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 921.123784][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.192364][ T4232] usb 4-1: config 0 descriptor?? [ 921.219613][ T4232] usb 4-1: can't set config #0, error -71 [ 921.247217][ T4232] usb 4-1: USB disconnect, device number 15 [ 921.346695][T14565] loop5: detected capacity change from 0 to 8192 [ 921.538542][T14577] atomic_op ffff8880228bc198 conn xmit_atomic 0000000000000000 [ 922.119735][T14565] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 922.156125][T14587] loop3: detected capacity change from 0 to 136 [ 922.167477][T14565] REISERFS (device loop5): using ordered data mode [ 922.215314][T14565] reiserfs: using flush barriers [ 922.279308][T14565] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 922.489403][T14565] REISERFS (device loop5): checking transaction log (loop5) [ 922.553721][T14565] REISERFS (device loop5): Using rupasov hash to sort names [ 922.570198][T14565] REISERFS (device loop5): using 3.5.x disk format [ 922.590822][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 922.607800][T14565] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 922.640800][T14565] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 922.665993][T14565] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 922.687602][T14565] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 922.702897][T14565] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 922.742672][T14608] bond1: option mode: unable to set because the bond device has slaves [ 922.781258][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 922.823333][T14565] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 922.830391][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'. [ 922.899434][T14565] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 922.965971][ T26] audit: type=1800 audit(1790125162.760:567): pid=14565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2946" name=2E02 dev="loop5" ino=4106498 res=0 errno=0 [ 923.115099][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 923.153351][T14624] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 924.162038][T14621] siw: device registration error -23 [ 924.384195][T14631] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 924.649286][T14644] block device autoloading is deprecated and will be removed. [ 924.697669][T14652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 924.798275][T14656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2974'. [ 924.918495][T14663] bond2: option mode: unable to set because the bond device has slaves [ 924.940286][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 924.968728][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 925.084542][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 925.101798][T14666] siw: device registration error -23 [ 925.604235][T11472] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 926.039328][T11472] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 926.060795][T11472] usb 4-1: config 0 has no interface number 0 [ 926.066964][T11472] usb 4-1: config 0 interface 41 has no altsetting 0 [ 926.107725][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'. [ 926.138412][T14703] siw: device registration error -23 [ 926.251079][T11472] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 926.271547][T11472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.310752][T11472] usb 4-1: Product: syz [ 926.320922][T11472] usb 4-1: Manufacturer: syz [ 926.339709][T11472] usb 4-1: SerialNumber: syz [ 926.362153][T11472] usb 4-1: config 0 descriptor?? [ 926.459240][T14725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2996'. [ 926.606365][T14734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.759042][T11472] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 927.768855][T11472] CoreChips: probe of 4-1:0.41 failed with error -71 [ 927.797194][T11472] usb 4-1: USB disconnect, device number 16 [ 927.878864][T14754] bond1: option mode: unable to set because the bond device has slaves [ 927.918803][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 927.954993][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3002'. [ 927.964995][T14758] siw: device registration error -23 [ 927.990418][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3002'. [ 928.487397][ T4299] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 929.176328][T14784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3012'. [ 929.456924][ T4299] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 929.507917][ T4299] usb 6-1: config 0 has no interface number 0 [ 929.544191][ T4299] usb 6-1: config 0 interface 41 has no altsetting 0 [ 930.570047][ T4299] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 930.595278][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.603948][ T4299] usb 6-1: Product: syz [ 930.608207][ T4299] usb 6-1: Manufacturer: syz [ 930.636488][ T4299] usb 6-1: SerialNumber: syz [ 930.667637][ T4299] usb 6-1: config 0 descriptor?? [ 930.949484][ T4299] CoreChips: probe of 6-1:0.41 failed with error -71 [ 931.009511][ T4299] usb 6-1: USB disconnect, device number 5 [ 931.016212][T14808] atomic_op ffff88805efc1998 conn xmit_atomic 0000000000000000 [ 931.106974][T14816] bond1: option mode: unable to set because the bond device has slaves [ 931.147925][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 931.174810][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3019'. [ 931.281878][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.288240][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.629037][ T4299] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 931.989905][ T4299] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 932.004740][T14849] bond1: option mode: unable to set because the bond device has slaves [ 932.017105][ T4299] usb 6-1: config 0 has no interface number 0 [ 932.046334][ T4299] usb 6-1: config 0 interface 41 has no altsetting 0 [ 932.068414][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 932.078095][ T4475] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 932.145354][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 932.259416][ T4299] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 932.292723][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.318455][ T4299] usb 6-1: Product: syz [ 932.339150][ T4299] usb 6-1: Manufacturer: syz [ 932.343799][ T4299] usb 6-1: SerialNumber: syz [ 932.431118][ T4299] usb 6-1: config 0 descriptor?? [ 932.459328][ T4475] usb 4-1: config 1 has too many interfaces: 34, using maximum allowed: 32 [ 932.481852][ T4475] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.512929][ T4475] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 34 [ 932.539858][ T4475] usb 4-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 932.583329][ T4475] usb 4-1: config 1 interface 1 has no altsetting 0 [ 932.605804][ T4475] usb 4-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 932.635864][ T4475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.723689][ T4475] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 932.909165][ T4299] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 932.959480][ T4475] usb 4-1: string descriptor 0 read error: -71 [ 932.975835][ T4475] cdc_acm: probe of 4-1:1.1 failed with error -22 [ 932.995176][ T4299] CoreChips: probe of 6-1:0.41 failed with error -71 [ 933.041851][T14881] atomic_op ffff8880627d2998 conn xmit_atomic 0000000000000000 [ 933.092347][ T4475] usb 4-1: USB disconnect, device number 17 [ 933.104299][ T4299] usb 6-1: USB disconnect, device number 6 [ 934.131893][T14923] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 935.213248][T14946] bond2: option mode: unable to set because the bond device has slaves [ 935.297798][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3058'. [ 935.400092][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'. [ 935.659387][ T4299] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 936.049971][ T4299] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 936.068572][ T4299] usb 4-1: config 0 has no interface number 0 [ 936.269028][ T4299] usb 4-1: config 0 interface 41 has no altsetting 0 [ 936.827786][T14976] (unnamed net_device) (uninitialized): option mode: invalid value (7) [ 936.929988][ T4299] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 936.946654][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.963626][T14989] netlink: 'syz.1.3069': attribute type 6 has an invalid length. [ 937.122706][ T4882] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 937.130952][ T4299] usb 4-1: Product: syz [ 937.135321][ T4299] usb 4-1: Manufacturer: syz [ 937.140035][ T4299] usb 4-1: SerialNumber: syz [ 937.156763][ T4299] usb 4-1: config 0 descriptor?? [ 937.415378][T15002] atomic_op ffff88802cb93198 conn xmit_atomic 0000000000000000 [ 938.356638][ T26] audit: type=1326 audit(1790125178.140:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.2.3076" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc0e84159 code=0x0 [ 938.385745][T15010] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 938.412767][T15010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3077'. [ 939.577426][T15025] Device name cannot be null; rc = [-22] [ 939.599467][ T4299] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 939.639063][ T4882] usb 6-1: device descriptor read/all, error -71 [ 939.651218][ T4299] CoreChips: probe of 4-1:0.41 failed with error -71 [ 939.738505][ T4299] usb 4-1: USB disconnect, device number 18 [ 939.762602][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 939.791613][T15037] siw: device registration error -23 [ 940.162327][T15067] loop5: detected capacity change from 0 to 164 [ 940.247813][T15072] atomic_op ffff88807756a998 conn xmit_atomic 0000000000000000 [ 940.494677][T15067] Unable to read rock-ridge attributes [ 940.645171][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3093'. [ 940.758375][T15076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 940.777864][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'. [ 940.788344][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3095'. [ 940.799220][T15100] bond1: (slave bond0): Releasing active interface [ 940.878737][T15091] Unable to read rock-ridge attributes [ 940.927570][T15091] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 941.164281][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3102'. [ 941.202725][T15128] siw: device registration error -23 [ 941.420340][T15145] bond1: option mode: unable to set because the bond device has slaves [ 942.124660][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'. [ 942.156121][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 942.663908][T15164] loop5: detected capacity change from 0 to 164 [ 943.542889][T15164] Unable to read rock-ridge attributes [ 943.575762][T15164] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3112'. [ 943.677580][T15164] Unable to read rock-ridge attributes [ 943.701143][T15164] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 943.748734][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 946.316307][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3135'. [ 946.359550][T15233] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 946.380761][T15236] siw: device registration error -23 [ 946.434421][T15233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3134'. [ 947.862893][ T8880] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 947.868322][ C1] hrtimer: interrupt took 370607 ns [ 949.419316][ T8880] usb 4-1: Using ep0 maxpacket: 32 [ 951.107644][T15291] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 951.499332][ T8880] usb 4-1: device descriptor read/all, error -71 [ 951.522732][T15291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3152'. [ 951.800206][T15305] atomic_op ffff88801f158998 conn xmit_atomic 0000000000000000 [ 952.069122][ T8880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 952.329147][ T8880] usb 4-1: Using ep0 maxpacket: 8 [ 952.455806][T15326] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 952.529162][ T8880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 952.568318][T15326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3166'. [ 952.719456][ T8880] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 952.736290][ T8880] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 952.764338][ T8880] usb 4-1: Product: syz [ 952.776252][ T8880] usb 4-1: Manufacturer: syz [ 952.791653][ T8880] usb 4-1: SerialNumber: syz [ 952.896004][T15358] loop5: detected capacity change from 0 to 164 [ 952.953685][T15358] Unable to read rock-ridge attributes [ 952.995118][T15358] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3174'. [ 953.089105][ T8880] usb 4-1: Handspring Visor / Palm OS: port 200, is for unknown use [ 953.107189][ T8880] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 953.135760][ T8880] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 953.329389][ T8880] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 953.337983][ T8880] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 953.370033][T15373] atomic_op ffff88807d695998 conn xmit_atomic 0000000000000000 [ 953.556118][ T8880] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 953.666093][ T8880] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 953.705553][ T8880] usb 4-1: USB disconnect, device number 20 [ 953.789339][ T8880] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 953.822002][ T8880] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 953.836103][ T8880] visor 4-1:1.0: device disconnected [ 955.006294][T15418] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 955.553564][T15418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3187'. [ 957.204722][T15462] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 958.172916][T15471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3200'. [ 960.056490][T15492] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 960.959206][ T5204] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 961.545518][ T5204] usb 4-1: Using ep0 maxpacket: 32 [ 961.669331][ T5204] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 961.685411][ T5204] usb 4-1: config 0 interface 0 has no altsetting 0 [ 961.701401][ T5204] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 961.733848][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.757822][ T5204] usb 4-1: config 0 descriptor?? [ 961.843351][T15537] loop5: detected capacity change from 0 to 164 [ 961.899299][T15537] Unable to read rock-ridge attributes [ 962.055932][T15543] 8021q: adding VLAN 0 to HW filter on device bond6 [ 962.075973][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'. [ 962.156925][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'. [ 962.185008][T15578] bond1: (slave bond0): Releasing active interface [ 962.948188][ T5204] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 963.002825][ T5204] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 963.184586][ T5204] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 963.215857][ T5204] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 963.259159][ T5204] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 963.426904][ T5204] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 963.560077][ T5204] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-38) [ 963.614067][ T5204] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -38 [ 963.872797][ T5204] usb 4-1: USB disconnect, device number 21 [ 964.692336][T15629] fido_id[15629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 965.847437][T15648] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 966.403208][T15651] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3240'. [ 967.383122][T15664] loop3: detected capacity change from 0 to 164 [ 967.515680][T15664] Unable to read rock-ridge attributes [ 970.714169][T15731] syz.1.3265[15731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.714322][T15731] syz.1.3265[15731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.916148][T15739] loop3: detected capacity change from 0 to 16 [ 971.055742][T15739] erofs: (device loop3): mounted with root inode @ nid 36. [ 971.124640][T15739] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 971.150102][T15751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3272'. [ 971.206103][T15754] loop5: detected capacity change from 0 to 256 [ 971.219415][T15739] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 971.334356][T15754] FAT-fs (loop5): Directory bread(block 64) failed [ 971.358513][T15754] FAT-fs (loop5): Directory bread(block 65) failed [ 971.368393][T15754] FAT-fs (loop5): Directory bread(block 66) failed [ 971.407467][T15754] FAT-fs (loop5): Directory bread(block 67) failed [ 971.458578][T15754] FAT-fs (loop5): Directory bread(block 68) failed [ 971.498388][T15754] FAT-fs (loop5): Directory bread(block 69) failed [ 971.520767][T15754] FAT-fs (loop5): Directory bread(block 70) failed [ 971.559177][T15754] FAT-fs (loop5): Directory bread(block 71) failed [ 971.565855][T15754] FAT-fs (loop5): Directory bread(block 72) failed [ 971.594865][T15754] FAT-fs (loop5): Directory bread(block 73) failed [ 972.720342][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 972.761774][T15805] loop5: detected capacity change from 0 to 64 [ 972.833776][T15805] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 975.019389][T15869] ip_tables: iptables: counters copy to user failed while replacing table [ 975.098353][T15867] loop5: detected capacity change from 0 to 4096 [ 975.132538][T15867] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 975.190880][T15874] block device autoloading is deprecated and will be removed. [ 975.235129][T15874] XFS (loop0): Invalid device [./loop0], error=-16 [ 975.509130][T11472] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 975.909703][T11472] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.927204][T11472] usb 4-1: config 0 has no interface number 0 [ 975.962660][T11472] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 976.357938][T11472] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 976.370928][T11472] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 976.381854][T11472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.404175][T11472] usb 4-1: config 0 descriptor?? [ 976.502587][T15882] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 976.580655][T11472] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 976.692605][T15922] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 976.717061][T15922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3321'. [ 976.885049][ T4475] usb 4-1: USB disconnect, device number 22 [ 977.710849][T15963] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 977.974757][T15963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3332'. [ 978.016664][T15974] siw: device registration error -23 [ 978.488013][T15983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3337'. [ 978.546508][T15989] loop3: detected capacity change from 0 to 256 [ 978.590367][T15989] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 978.838542][T16001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3343'. [ 979.187815][T16019] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 979.223478][T16024] siw: device registration error -23 [ 979.230497][T16019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3349'. [ 979.271097][T16027] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 980.021191][T16029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3350'. [ 981.672651][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 981.683918][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 981.862385][T16076] siw: device registration error -23 [ 982.163265][T16083] loop5: detected capacity change from 0 to 512 [ 982.250208][T16083] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 982.432780][T16083] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 982.445696][T16083] FAT-fs (loop5): Filesystem has been set read-only [ 982.467614][T16117] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 983.497534][T16143] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 984.320458][T16150] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 984.335826][T16143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3378'. [ 984.872389][T16150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3379'. [ 985.339053][T16108] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 985.639093][T16108] usb 4-1: Using ep0 maxpacket: 16 [ 985.899305][T16108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.912846][T16202] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 985.941875][T16108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.992424][T16108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.005949][T16108] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 986.092893][T16202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3393'. [ 986.102835][T16108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.123158][T16108] usb 4-1: config 0 descriptor?? [ 986.406211][T16103] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 986.835951][T16108] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 986.881691][T16108] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 987.059759][T16108] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 987.837575][T16108] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 987.850150][T16108] microsoft 0003:045E:07DA.0002: no inputs found [ 987.856527][T16108] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 987.886938][T16108] usb 4-1: USB disconnect, device number 23 [ 987.920846][T16103] usb 6-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 987.930870][T16103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.949392][T16103] usb 6-1: config 0 descriptor?? [ 988.001421][T16103] gspca_main: spca505-2.14.0 probing 0733:0430 [ 988.017045][T16233] bond2: option mode: unable to set because the bond device has slaves [ 988.041079][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 988.063329][T16239] fido_id[16239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 988.107284][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3400'. [ 988.573426][T16103] gspca_spca505: reg write: error -71 [ 988.585893][T16103] spca505: probe of 6-1:0.0 failed with error -5 [ 988.619162][T16103] usb 6-1: USB disconnect, device number 9 [ 989.337278][T16281] atomic_op ffff888061380198 conn xmit_atomic 0000000000000000 [ 989.389823][T16108] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 989.687584][T16286] loop5: detected capacity change from 0 to 8192 [ 989.799850][T16108] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 989.862234][T16108] usb 4-1: config 0 has no interface number 0 [ 989.928106][T16108] usb 4-1: config 0 interface 41 has no altsetting 0 [ 990.159886][T16108] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 990.200996][T16108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.284909][T16108] usb 4-1: Product: syz [ 990.362123][T16108] usb 4-1: Manufacturer: syz [ 990.367007][T16286] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 990.397547][T16286] REISERFS (device loop5): using ordered data mode [ 990.407654][T16108] usb 4-1: SerialNumber: syz [ 990.439249][T16286] reiserfs: using flush barriers [ 990.445567][T16108] usb 4-1: config 0 descriptor?? [ 990.479506][T16286] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 990.509515][T16286] REISERFS (device loop5): checking transaction log (loop5) [ 990.546365][T16286] REISERFS (device loop5): Using r5 hash to sort names [ 990.575207][T16286] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 990.773758][T16310] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 990.913925][T16310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3420'. [ 990.949070][T16108] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 990.958670][T16108] CoreChips: probe of 4-1:0.41 failed with error -71 [ 991.332787][T16108] usb 4-1: USB disconnect, device number 24 [ 991.536473][T16330] loop5: detected capacity change from 0 to 512 [ 991.615056][T16339] bond1: option mode: unable to set because the bond device has slaves [ 991.625835][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 991.638504][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'. [ 992.554750][T16330] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 992.722386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.728813][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.755750][T16330] FAT-fs (loop5): Filesystem has been set read-only [ 992.913234][T16367] atomic_op ffff888075365998 conn xmit_atomic 0000000000000000 [ 993.241575][T16377] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 993.262971][T16377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3435'. [ 993.309066][ T8880] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 993.578253][T16384] xt_hashlimit: max too large, truncated to 1048576 [ 993.642417][T16386] atomic_op ffff888022d93998 conn xmit_atomic 0000000000000000 [ 993.819255][T16390] bond1: option mode: unable to set because the bond device is up [ 993.849255][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'. [ 993.862161][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 993.887699][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.895579][ T8880] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 993.909019][ T8880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.931943][ T8880] usb 6-1: Product: syz [ 993.947886][ T8880] usb 6-1: Manufacturer: syz [ 993.953960][T16390] bond1: (slave bond0): making interface the new active one [ 993.961621][ T8880] usb 6-1: SerialNumber: syz [ 993.976828][ T8880] usb 6-1: config 0 descriptor?? [ 994.004330][T16390] bond1: (slave bond0): Enslaving as an active interface with an up link [ 994.031378][ T8880] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 994.093620][ T8880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 994.139930][ T8880] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 994.174283][ T8880] usb 6-1: media controller created [ 994.225122][ T8880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.250945][T16370] dvb-usb: bulk message failed: -22 (7/0) [ 994.636590][ T8880] DVB: Unable to find symbol mt352_attach() [ 995.206404][ T8880] DVB: Unable to find symbol nxt6000_attach() [ 995.238456][ T8880] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 995.311555][ T8880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 995.394087][ T8880] dvb-usb: schedule remote query interval to 1000 msecs. [ 995.421364][ T8880] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 995.452442][ T8880] dvb-usb: bulk message failed: -22 (7/0) [ 995.473425][ T8880] dvb-usb: bulk message failed: -22 (7/0) [ 995.519325][ T8880] usb 6-1: USB disconnect, device number 10 [ 996.509292][ T8880] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 996.510401][T16441] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 996.749196][T16441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3448'. [ 996.856789][T16462] atomic_op ffff888073d20998 conn xmit_atomic 0000000000000000 [ 997.052460][T16466] loop5: detected capacity change from 0 to 1024 [ 997.078285][T16468] bond1: option mode: unable to set because the bond device has slaves [ 997.126682][T16466] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 997.172105][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 997.189171][T16466] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 997.201775][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3454'. [ 997.213095][T16466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 997.221623][T16466] System zones: 0-1, 3-36 [ 997.253107][ T4272] bond1: (slave bond0): link status definitely down, disabling slave [ 997.265972][T16466] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 997.310070][ T4272] bond1: now running without any active interface! [ 997.367861][ T26] audit: type=1800 audit(1790125237.160:569): pid=16466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3453" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 997.680055][T16481] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 997.751314][T16484] atomic_op ffff88801ebcc998 conn xmit_atomic 0000000000000000 [ 997.975995][T16492] netlink: 'syz.0.3459': attribute type 8 has an invalid length. [ 998.012233][T16492] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 999.559091][ T4232] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 999.969194][ T4232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.988937][ T4232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1000.006062][ T4232] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1000.189284][ T4232] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1000.205842][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.218458][ T4232] usb 6-1: Product: syz [ 1000.230142][ T4232] usb 6-1: Manufacturer: syz [ 1000.234794][ T4232] usb 6-1: SerialNumber: syz [ 1000.333524][ T4232] cdc_mbim 6-1:1.0: skipping garbage [ 1000.371012][ T4232] usb 6-1: selecting invalid altsetting 1 [ 1000.539277][ T4232] cdc_mbim 6-1:1.0: bind() failure [ 1000.554919][ T4232] usb 6-1: USB disconnect, device number 11 [ 1000.675596][T16548] atomic_op ffff88802362f198 conn xmit_atomic 0000000000000000 [ 1002.572341][T16579] bond1: option mode: unable to set because the bond device has slaves [ 1002.637266][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1002.719927][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1003.029298][T16601] atomic_op ffff888058f1f198 conn xmit_atomic 0000000000000000 [ 1003.044007][ T4232] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1003.659350][ T4232] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1003.694341][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.749166][ T4232] usb 4-1: Product: syz [ 1003.753397][ T4232] usb 4-1: Manufacturer: syz [ 1003.781335][ T4232] usb 4-1: SerialNumber: syz [ 1003.996299][ T4232] usb 4-1: config 0 descriptor?? [ 1004.061174][ T4232] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1004.133936][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1004.169642][ T4232] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1004.183412][ T4232] usb 4-1: media controller created [ 1004.217301][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1004.266237][T16589] dvb-usb: bulk message failed: -22 (7/0) [ 1004.444458][ T4232] DVB: Unable to find symbol mt352_attach() [ 1004.520755][ T4232] DVB: Unable to find symbol nxt6000_attach() [ 1004.527468][ T4232] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1004.590397][ T4232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 1004.639645][ T4232] dvb-usb: schedule remote query interval to 1000 msecs. [ 1004.661370][ T4232] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1004.689237][ T4232] dvb-usb: bulk message failed: -22 (7/0) [ 1004.701805][ T4232] dvb-usb: bulk message failed: -22 (7/0) [ 1004.739907][ T4232] usb 4-1: USB disconnect, device number 25 [ 1004.887844][ T4232] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1005.376282][T16662] bond2: option mode: unable to set because the bond device has slaves [ 1005.404471][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1005.425204][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1005.729090][ T4597] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1005.822818][T16676] atomic_op ffff88807796e198 conn xmit_atomic 0000000000000000 [ 1006.329814][ T4597] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1006.418252][ T4597] usb 4-1: config 0 has no interface number 0 [ 1006.439059][ T4597] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1006.633088][ T4597] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1006.678704][ T4597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.734057][ T4597] usb 4-1: Product: syz [ 1006.746910][ T4597] usb 4-1: Manufacturer: syz [ 1006.754673][ T4597] usb 4-1: SerialNumber: syz [ 1006.788355][ T4597] usb 4-1: config 0 descriptor?? [ 1007.178099][T16711] loop5: detected capacity change from 0 to 64 [ 1007.279478][ T4597] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1007.289463][ T4597] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1007.309273][ T4597] usb 4-1: USB disconnect, device number 26 [ 1007.901106][T16743] atomic_op ffff88807769f198 conn xmit_atomic 0000000000000000 [ 1008.865118][T16754] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1008.890260][T16750] loop5: detected capacity change from 0 to 4096 [ 1008.931698][T16754] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1008.977724][T16750] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1009.162275][T16750] ntfs: volume version 3.1. [ 1009.687777][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'. [ 1010.049122][ T7643] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1010.344698][T16785] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 1010.630401][ T7643] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1010.709574][ T7643] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1011.955310][T16808] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1012.006769][T16808] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3545'. [ 1012.029376][ T7643] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1012.041139][ T7643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.073549][ T7643] usb 4-1: Product: syz [ 1012.096639][ T7643] usb 4-1: Manufacturer: syz [ 1012.120842][ T7643] usb 4-1: SerialNumber: syz [ 1013.025948][ T7643] usb 4-1: USB disconnect, device number 27 [ 1013.387849][T12281] udevd[12281]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1014.248742][T16890] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1014.283286][T16890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1014.339087][ T7643] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1014.622203][T16908] usb usb8: check_ctrlrecip: process 16908 (syz.5.3569) requesting ep 01 but needs 81 [ 1014.655623][T16908] usb usb8: usbfs: process 16908 (syz.5.3569) did not claim interface 0 before use [ 1014.743622][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1014.753383][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1014.879217][ T7643] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1014.891853][ T7643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.900625][ T7643] usb 4-1: Product: syz [ 1014.905578][ T7643] usb 4-1: Manufacturer: syz [ 1014.911367][ T7643] usb 4-1: SerialNumber: syz [ 1014.918668][ T7643] usb 4-1: config 0 descriptor?? [ 1014.989655][T10866] Bluetooth: hci2: urb ffff8880224ae100 submission failed (2) [ 1015.183938][T16822] usb 4-1: USB disconnect, device number 28 [ 1015.375784][T16948] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1015.416468][T16948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1016.087031][T16968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3586'. [ 1016.258100][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1016.299295][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1016.438325][T16991] bond1: option mode: unable to set because the bond device has slaves [ 1016.449645][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1016.475962][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1016.631865][T16998] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1016.657881][T16998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1016.848997][T16822] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1017.258803][T17023] 9pnet: Insufficient options for proto=fd [ 1017.265405][T16822] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1017.296098][T16822] usb 6-1: config 0 has no interface number 0 [ 1017.307916][T16822] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1017.489567][T16822] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1017.498696][T16822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.519014][T16822] usb 6-1: Product: syz [ 1017.523253][T16822] usb 6-1: Manufacturer: syz [ 1017.527873][T16822] usb 6-1: SerialNumber: syz [ 1018.059676][T16822] usb 6-1: config 0 descriptor?? [ 1018.090476][T17040] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1018.559806][T17057] UBIFS error (pid: 17057): cannot open "./file0", error -22 [ 1018.568734][ T26] audit: type=1326 audit(1790125258.360:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.0.3615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2374794159 code=0x0 [ 1018.585497][T16822] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1018.610338][T16822] CoreChips: probe of 6-1:0.41 failed with error -71 [ 1018.623376][T16822] usb 6-1: USB disconnect, device number 12 [ 1018.940196][ T26] audit: type=1326 audit(1790125258.430:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.0.3615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2374794159 code=0x0 [ 1019.128082][T16819] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 1019.327824][T17074] fido_id[17074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1019.679189][ T7643] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1020.038703][T17084] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 1020.050153][ T7643] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1020.058198][ T7643] usb 4-1: config 0 has no interface number 0 [ 1020.249250][ T7643] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1020.259479][ T7643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.267508][ T7643] usb 4-1: Product: syz [ 1020.289694][ T7643] usb 4-1: Manufacturer: syz [ 1020.294351][ T7643] usb 4-1: SerialNumber: syz [ 1020.312482][ T7643] usb 4-1: config 0 descriptor?? [ 1020.360918][ T7643] usb 4-1: selecting invalid altsetting 1 [ 1020.383690][ T7643] dvb_ttusb_budget: ttusb_init_controller: error [ 1020.400037][ T7643] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1020.553607][ T7643] DVB: Unable to find symbol stv0299_attach() [ 1020.682074][T17124] atomic_op ffff888023cfe198 conn xmit_atomic 0000000000000000 [ 1021.259055][ T7643] DVB: Unable to find symbol tda8083_attach() [ 1021.265316][ T7643] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1021.330312][T17126] __nla_validate_parse: 4 callbacks suppressed [ 1021.330340][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1021.378634][ T7643] usb 4-1: USB disconnect, device number 29 [ 1021.399805][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1021.423232][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.460220][T17126] bond1: (slave bond0): making interface the new active one [ 1021.523489][T17126] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1021.939596][T17153] binder: 17152:17153 ioctl c0306201 200000000080 returned -14 [ 1023.216787][T17190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3646'. [ 1023.427565][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1023.546584][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1023.734221][T17180] loop3: detected capacity change from 0 to 32768 [ 1023.929730][T17180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3642 (17180) [ 1024.110318][T17180] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1024.135373][T17217] loop5: detected capacity change from 0 to 512 [ 1024.138780][T17180] BTRFS info (device loop3): enabling auto defrag [ 1024.162949][T17180] BTRFS info (device loop3): max_inline at 4096 [ 1024.184069][T17180] BTRFS info (device loop3): using free space tree [ 1024.201165][T17180] BTRFS info (device loop3): has skinny extents [ 1024.353034][T17217] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 1024.389286][T17217] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.453300][T17217] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.3652: corrupted inode contents [ 1024.676935][T17217] EXT4-fs (loop5): Remounting filesystem read-only [ 1024.699129][T17217] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.3652: mark_inode_dirty error [ 1024.758815][T17217] EXT4-fs (loop5): Remounting filesystem read-only [ 1024.782585][T17217] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.3652: corrupted inode contents [ 1024.796054][T17217] EXT4-fs (loop5): Remounting filesystem read-only [ 1024.819453][T17217] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.3652: mark_inode_dirty error [ 1024.985317][T17180] BTRFS info (device loop3): enabling ssd optimizations [ 1025.022947][T17217] EXT4-fs (loop5): Remounting filesystem read-only [ 1025.254312][T17265] loop5: detected capacity change from 0 to 164 [ 1025.310011][T17265] Unable to read rock-ridge attributes [ 1025.507681][T17265] Unable to read rock-ridge attributes [ 1025.594044][T17265] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 1025.822716][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1025.849083][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1026.108015][T17294] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3667'. [ 1026.907977][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1026.937121][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1027.503206][T17333] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1027.539646][T17333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1027.633886][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1027.669060][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1028.276913][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3695'. [ 1028.291494][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 1028.420552][T17371] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1028.458827][T17371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3698'. [ 1028.578199][T17379] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1028.599747][T16823] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1028.626732][T17379] bridge0: port 3(syz_tun) entered disabled state [ 1028.633640][T17379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.640936][T17379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.842342][T17384] loop5: detected capacity change from 0 to 64 [ 1028.979136][T16823] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1028.987858][T17384] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1029.002715][T16823] usb 4-1: config 0 has no interface number 0 [ 1029.021800][T16823] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1029.321715][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1029.330793][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1029.427343][T16823] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1029.437392][T16823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.446265][T16823] usb 4-1: Product: syz [ 1029.450493][T16823] usb 4-1: Manufacturer: syz [ 1029.463525][T16823] usb 4-1: SerialNumber: syz [ 1029.491632][T16823] usb 4-1: config 0 descriptor?? [ 1029.942844][T17410] loop5: detected capacity change from 0 to 256 [ 1030.059491][T17410] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1030.226155][T17421] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1030.299038][T16823] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1030.308637][T16823] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1030.451039][T16823] usb 4-1: USB disconnect, device number 30 [ 1030.892649][T17445] loop3: detected capacity change from 0 to 256 [ 1030.943954][T17445] exfat: Deprecated parameter 'utf8' [ 1030.982801][T17445] exfat: Deprecated parameter 'utf8' [ 1031.047663][T17445] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1031.379140][ T23] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1031.749266][ T23] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1031.757538][ T23] usb 6-1: config 0 has no interface number 0 [ 1031.797609][ T23] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1031.979066][ T23] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1031.998436][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.018974][ T23] usb 6-1: Product: syz [ 1032.023183][ T23] usb 6-1: Manufacturer: syz [ 1032.049025][ T23] usb 6-1: SerialNumber: syz [ 1032.075254][ T23] usb 6-1: config 0 descriptor?? [ 1032.499658][T17471] loop3: detected capacity change from 0 to 32768 [ 1032.639807][ T23] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1032.679132][ T23] CoreChips: probe of 6-1:0.41 failed with error -71 [ 1032.721286][ T23] usb 6-1: USB disconnect, device number 13 [ 1032.801280][T17471] XFS (loop3): Mounting V5 Filesystem [ 1032.887261][T17471] XFS (loop3): Ending clean mount [ 1032.934316][ T4188] XFS (loop3): Unmounting Filesystem [ 1033.227291][T17525] loop5: detected capacity change from 0 to 512 [ 1033.313814][T17525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 1033.329394][T17525] System zones: 1-12 [ 1033.400964][T17525] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.3739: Directory hole found for htree index block 0 [ 1033.515219][T17525] EXT4-fs (loop5): Remounting filesystem read-only [ 1033.549918][T17525] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 1033.699258][T17525] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.3739: Directory hole found for htree index block 0 [ 1033.736309][T17525] EXT4-fs (loop5): Remounting filesystem read-only [ 1033.869091][T17525] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1033.896021][T17525] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jblock_validity,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 1034.197567][T17525] EXT4-fs (loop5): shut down requested (2) [ 1034.284568][T17559] __nla_validate_parse: 4 callbacks suppressed [ 1034.284585][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1034.349103][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1034.639624][ T7652] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1035.579484][ T7652] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1035.599123][ T7652] usb 4-1: config 0 has no interface number 0 [ 1035.625788][ T7652] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1035.809641][ T7652] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1035.845787][ T7652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.874764][ T7652] usb 4-1: Product: syz [ 1035.884941][ T7652] usb 4-1: Manufacturer: syz [ 1035.895334][ T7652] usb 4-1: SerialNumber: syz [ 1035.926272][ T7652] usb 4-1: config 0 descriptor?? [ 1036.402532][T17595] loop5: detected capacity change from 0 to 32768 [ 1036.525164][ T7652] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1036.536106][ T7652] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1036.548655][ T7652] usb 4-1: USB disconnect, device number 31 [ 1036.651591][T17629] atomic_op ffff888062403998 conn xmit_atomic 0000000000000000 [ 1037.170787][T17595] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1037.272961][T17595] (syz.5.3760,17595,0):ocfs2_verify_group_and_input:424 ERROR: add a group which is in the current volume. [ 1037.312413][T17595] (syz.5.3760,17595,1):ocfs2_group_add:505 ERROR: status = -22 [ 1037.414739][T11946] ocfs2: Unmounting device (7,5) on (node local) [ 1037.710096][ T26] audit: type=1326 audit(1790125277.500:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1037.918847][ T26] audit: type=1326 audit(1790125277.530:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.148614][ T26] audit: type=1326 audit(1790125277.530:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.213881][T17664] loop5: detected capacity change from 0 to 256 [ 1038.225517][ T26] audit: type=1326 audit(1790125277.530:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.288982][ T26] audit: type=1326 audit(1790125277.530:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.379699][T17664] FAT-fs (loop5): Directory bread(block 64) failed [ 1038.418254][ T26] audit: type=1326 audit(1790125277.530:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.446474][T17664] FAT-fs (loop5): Directory bread(block 65) failed [ 1038.456719][T17664] FAT-fs (loop5): Directory bread(block 66) failed [ 1038.477973][T17664] FAT-fs (loop5): Directory bread(block 67) failed [ 1038.662092][T17664] FAT-fs (loop5): Directory bread(block 68) failed [ 1038.747823][ T26] audit: type=1326 audit(1790125277.530:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.779016][T17664] FAT-fs (loop5): Directory bread(block 69) failed [ 1038.785659][T17664] FAT-fs (loop5): Directory bread(block 70) failed [ 1038.838970][T17664] FAT-fs (loop5): Directory bread(block 71) failed [ 1038.859102][T17664] FAT-fs (loop5): Directory bread(block 72) failed [ 1038.888185][T17664] FAT-fs (loop5): Directory bread(block 73) failed [ 1038.894947][ T26] audit: type=1326 audit(1790125277.530:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1038.978769][ T26] audit: type=1326 audit(1790125277.530:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1039.031219][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1039.062329][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1039.089048][ T26] audit: type=1326 audit(1790125277.530:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.3.3771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1649b51159 code=0x7fc00000 [ 1039.170227][T17652] loop3: detected capacity change from 0 to 32768 [ 1039.311110][T17652] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1039.625271][T17652] syz.3.3776 (17652) used greatest stack depth: 18208 bytes left [ 1039.792232][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 1039.800385][T17695] atomic_op ffff888023be9198 conn xmit_atomic 0000000000000000 [ 1040.268634][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1040.287821][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1042.718158][T17756] loop5: detected capacity change from 0 to 32768 [ 1042.814983][T17756] read_mapping_page failed! [ 1042.844499][T17756] ERROR: (device loop5): txCommit: [ 1042.844499][T17756] [ 1043.509436][T17785] atomic_op ffff88801ebc5998 conn xmit_atomic 0000000000000000 [ 1043.881142][T17791] bridge0: port 2(bridge_slave_1) entered listening state [ 1044.149330][T17799] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1044.193407][T17799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1044.887720][T17820] atomic_op ffff88802b7c9198 conn xmit_atomic 0000000000000000 [ 1045.942177][T17833] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1045.974082][T17833] device eql entered promiscuous mode [ 1046.006004][T17834] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1046.051506][T17834] 0ªX¹¦Dö»: renamed from eql [ 1046.113721][T17834] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 1046.149179][T17834] device 00ªX¹¦Dö» left promiscuous mode [ 1046.217635][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1046.243432][T17842] atomic_op ffff888022526198 conn xmit_atomic 0000000000000000 [ 1046.280768][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1046.605600][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1046.619294][T16722] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1046.680429][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1046.743618][T11074] bond1: (slave bond0): link status definitely down, disabling slave [ 1046.779935][T11074] bond1: now running without any active interface! [ 1047.049261][T16722] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1047.057411][T16722] usb 4-1: config 0 has no interface number 0 [ 1047.084120][T16722] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1047.289301][T16722] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1047.311796][T16722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.334720][T16722] usb 4-1: Product: syz [ 1047.347178][T16722] usb 4-1: Manufacturer: syz [ 1047.368980][T16722] usb 4-1: SerialNumber: syz [ 1047.401948][T16722] usb 4-1: config 0 descriptor?? [ 1047.899080][T16722] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1047.919582][T16722] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1047.978109][T16722] usb 4-1: USB disconnect, device number 32 [ 1048.034348][T17895] atomic_op ffff88807597c998 conn xmit_atomic 0000000000000000 [ 1048.414082][T17904] atomic_op ffff888064d95998 conn xmit_atomic 0000000000000000 [ 1048.970670][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3851'. [ 1049.026640][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'. [ 1049.434009][T17929] atomic_op ffff88802bde1998 conn xmit_atomic 0000000000000000 [ 1050.292848][T17928] loop5: detected capacity change from 0 to 32768 [ 1050.549875][T17928] XFS (loop5): Mounting V5 Filesystem [ 1050.745711][T17928] XFS (loop5): Ending clean mount [ 1050.779059][T17928] XFS (loop5): Quotacheck needed: Please wait. [ 1050.894197][T17977] atomic_op ffff8880241eb998 conn xmit_atomic 0000000000000000 [ 1050.968508][T17928] XFS (loop5): Quotacheck: Done. [ 1050.978317][T17980] bond2: option mode: unable to set because the bond device has slaves [ 1051.019063][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1051.028258][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1051.116368][T11946] XFS (loop5): Unmounting Filesystem [ 1051.309006][T16081] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1051.669209][T16081] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1051.679712][T16081] usb 4-1: config 0 has no interface number 0 [ 1051.685837][T16081] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1051.879130][T16081] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1051.908813][T16081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.927263][T16081] usb 4-1: Product: syz [ 1051.937437][T16081] usb 4-1: Manufacturer: syz [ 1051.956883][T16081] usb 4-1: SerialNumber: syz [ 1051.989822][T16081] usb 4-1: config 0 descriptor?? [ 1052.270537][T18003] atomic_op ffff88805fce0198 conn xmit_atomic 0000000000000000 [ 1052.489147][T16081] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1052.518143][T16081] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1052.596035][T16081] usb 4-1: USB disconnect, device number 33 [ 1052.889810][T18024] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1052.948082][T18024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3879'. [ 1053.209780][T18047] loop3: detected capacity change from 0 to 8 [ 1053.412936][T18047] SQUASHFS error: xz decompression failed, data probably corrupt [ 1053.443448][T18047] SQUASHFS error: Failed to read block 0x60: -5 [ 1053.537119][T18047] SQUASHFS error: xz decompression failed, data probably corrupt [ 1053.565756][T18047] SQUASHFS error: Failed to read block 0x60: -5 [ 1053.610394][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 1053.610410][ T26] audit: type=1800 audit(1790125293.400:618): pid=18047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3883" name="file0" dev="overlay" ino=1 res=0 errno=0 [ 1053.794724][ T4188] SQUASHFS error: Unable to read inode 0x1 [ 1053.837429][ T4188] SQUASHFS error: Unable to read inode 0x1 [ 1054.089913][T11255] bridge0: port 3(syz_tun) entered disabled state [ 1054.108056][T11255] device syz_tun left promiscuous mode [ 1054.113735][T11255] bridge0: port 3(syz_tun) entered disabled state [ 1054.157413][T18071] atomic_op ffff88806224b998 conn xmit_atomic 0000000000000000 [ 1054.172155][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.179107][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.520950][T18077] loop5: detected capacity change from 0 to 512 [ 1054.657820][T18077] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nogrpid,usrquota,,errors=continue. Quota mode: writeback. [ 1054.676034][T18077] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.734447][T11074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.823883][T18077] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 1054.905719][T18077] Quota error (device loop5): write_blk: dquota write failed [ 1054.945811][T18077] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1055.017908][T18077] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.3890: Failed to acquire dquot type 0 [ 1055.062761][T11074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.918027][T11074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.993763][T18091] lo speed is unknown, defaulting to 1000 [ 1056.027001][T11074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.049768][T18103] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1056.079730][T18091] bond0 speed is unknown, defaulting to 1000 [ 1056.087955][T18091] lo speed is unknown, defaulting to 1000 [ 1056.147257][T18103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1056.729756][T11074] tipc: Left network mode [ 1057.390163][T18091] chnl_net:caif_netlink_parms(): no params data found [ 1057.676288][T18207] atomic_op ffff88801f633198 conn xmit_atomic 0000000000000000 [ 1057.719957][T11074] bridge0: port 4(ip6gretap0) entered disabled state [ 1057.931971][T16109] Bluetooth: hci2: command 0x0409 tx timeout [ 1057.979632][T11074] device ip6gretap0 left promiscuous mode [ 1057.985939][T11074] bridge0: port 4(ip6gretap0) entered disabled state [ 1058.737050][T18229] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1058.828305][T18229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3909'. [ 1059.030576][T18277] loop5: detected capacity change from 0 to 256 [ 1059.179411][T18091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.210071][T18091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.245525][T18303] loop5: detected capacity change from 0 to 2048 [ 1059.274417][T18091] device bridge_slave_0 entered promiscuous mode [ 1059.284306][T18303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1059.359707][T18091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.389964][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.425230][T18091] device bridge_slave_1 entered promiscuous mode [ 1059.589108][T18317] loop5: detected capacity change from 0 to 256 [ 1060.009197][T16721] Bluetooth: hci2: command 0x041b tx timeout [ 1060.222294][T18091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.468128][T18091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.730104][T18362] atomic_op ffff88801ef59998 conn xmit_atomic 0000000000000000 [ 1060.745081][T18347] loop5: detected capacity change from 0 to 4096 [ 1060.959028][T18366] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1061.213330][T18091] team0: Port device team_slave_0 added [ 1061.403195][T18368] device bridge_slave_1 entered promiscuous mode [ 1061.444958][T18091] team0: Port device team_slave_1 added [ 1061.599981][T18091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.614322][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.810305][T18091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.909139][T18091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.931763][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.086222][T16706] Bluetooth: hci2: command 0x040f tx timeout [ 1062.147359][T18091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.628059][T18427] atomic_op ffff8880627d2998 conn xmit_atomic 0000000000000000 [ 1063.487443][T18091] device hsr_slave_0 entered promiscuous mode [ 1063.635480][T18091] device hsr_slave_1 entered promiscuous mode [ 1063.655898][T18091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1063.686343][T18091] Cannot create hsr debugfs directory [ 1064.684392][T16716] Bluetooth: hci2: command 0x0419 tx timeout [ 1065.214166][T18510] atomic_op ffff888023450198 conn xmit_atomic 0000000000000000 [ 1065.375688][T18559] loop5: detected capacity change from 0 to 512 [ 1065.522390][T18559] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.3943: bad orphan inode 11862016 [ 1065.567387][T18091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1065.602412][T18091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1065.634947][T18559] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1065.648008][T11074] device hsr_slave_0 left promiscuous mode [ 1065.650277][T18559] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.886224][T11074] device hsr_slave_1 left promiscuous mode [ 1065.912918][T11074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.923478][T11074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.945250][T11074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.975450][T11074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.046779][T11074] device bridge_slave_1 left promiscuous mode [ 1066.068518][T11074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.185160][T11074] device bridge_slave_0 left promiscuous mode [ 1066.193706][T11074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.277446][T11074] device veth1_macvtap left promiscuous mode [ 1066.293172][T11074] device veth0_macvtap left promiscuous mode [ 1066.306027][T11074] device veth1_vlan left promiscuous mode [ 1066.316586][T11074] device veth0_vlan left promiscuous mode [ 1066.748221][T11074] bond4 (unregistering): Released all slaves [ 1067.051503][T11074] bond3 (unregistering): Released all slaves [ 1067.068247][T11074] bond2 (unregistering): (slave bond0): Releasing active interface [ 1067.112617][T11074] bond2 (unregistering): Released all slaves [ 1067.186180][T11074] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1067.203844][T11074] bond1 (unregistering): Released all slaves [ 1067.347865][T11074] team0 (unregistering): Port device team_slave_1 removed [ 1067.373461][T11074] team0 (unregistering): Port device team_slave_0 removed [ 1067.388283][T11074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.417311][T11074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.510900][T11074] bond0 (unregistering): Released all slaves [ 1067.586023][T18091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1067.619139][T18611] netlink: 'syz.5.3946': attribute type 2 has an invalid length. [ 1067.635304][T18091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1067.929394][T18091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.971197][T18091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.012963][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1068.054272][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1068.262538][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1068.275229][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1068.287629][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.294813][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.315881][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1068.328357][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1068.368538][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.375677][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.393348][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1068.403646][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1068.522884][T18674] loop5: detected capacity change from 0 to 512 [ 1068.579677][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1068.600595][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1068.619915][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1068.640800][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1069.256202][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1069.289174][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1069.362675][T18674] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1069.370880][T18674] System zones: 0-2, 18-18, 34-35 [ 1069.424999][T18091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1069.440123][T18674] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1069.489128][T18674] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.559121][T18091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.610366][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1069.631624][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1069.662493][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1069.691662][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1069.728476][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1070.802670][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.820669][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.929736][T18091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.240788][ T26] audit: type=1800 audit(1790125311.040:619): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3982" name="dead_threshold" dev="configfs" ino=70886 res=0 errno=0 [ 1071.431063][T18769] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1072.438676][T18797] atomic_op ffff888023528198 conn xmit_atomic 0000000000000000 [ 1072.872724][T18807] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1072.950500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1072.971113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1073.025590][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1073.838161][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1073.963816][T18091] device veth0_vlan entered promiscuous mode [ 1073.994127][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1074.040212][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1074.077252][T18091] device veth1_vlan entered promiscuous mode [ 1074.344013][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1074.380730][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1074.426201][T18091] device veth0_macvtap entered promiscuous mode [ 1074.492870][T18091] device veth1_macvtap entered promiscuous mode [ 1074.614527][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.678961][T16716] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1074.689491][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.748139][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.790569][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.843079][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.858432][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.868699][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.881271][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.892793][T18091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.904801][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.939771][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.966973][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.008565][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.067219][T18091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.099230][T16716] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1075.108329][T16716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.137575][T18091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.193379][T18091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.202438][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1075.211466][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1075.220031][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1075.229794][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1075.239810][T16716] usb 6-1: config 0 descriptor?? [ 1075.243044][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1075.263787][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1075.295639][T16716] cp210x 6-1:0.0: cp210x converter detected [ 1075.295789][T18091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.329223][T18091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.349247][T18091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.369029][T18091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.469952][T18865] atomic_op ffff888077b44998 conn xmit_atomic 0000000000000000 [ 1075.525035][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.546932][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.607310][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1075.642684][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.659933][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.701024][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1075.709232][T16716] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1075.780009][T16716] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1075.953806][T16081] usb 6-1: USB disconnect, device number 14 [ 1075.965311][T16081] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1076.044526][T16081] cp210x 6-1:0.0: device disconnected [ 1076.528999][ T8881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1077.090160][ T8881] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1077.138876][ T8881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.285551][ T8881] usb 7-1: Product: syz [ 1077.393680][ T8881] usb 7-1: Manufacturer: syz [ 1077.499624][ T8881] usb 7-1: SerialNumber: syz [ 1077.629611][ T8881] usb 7-1: config 0 descriptor?? [ 1077.924998][T16819] usb 7-1: USB disconnect, device number 2 [ 1077.958631][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4014'. [ 1081.027285][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1081.225316][T19046] netlink: 'syz.5.4030': attribute type 62 has an invalid length. [ 1081.243061][T19008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1081.269078][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1081.293804][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1081.359293][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1081.400073][T19013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.409119][T16109] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1081.443031][T19013] bond1: (slave bond0): making interface the new active one [ 1081.507598][T19013] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1081.529791][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1081.654263][T19075] atomic_op ffff88807c87f198 conn xmit_atomic 0000000000000000 [ 1081.779319][T16109] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1081.797050][T16109] usb 7-1: config 0 has no interface number 0 [ 1081.808258][T16109] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1082.679197][T16109] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1082.688290][T16109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.715817][T16109] usb 7-1: Product: syz [ 1082.720455][T16109] usb 7-1: Manufacturer: syz [ 1082.739185][T16109] usb 7-1: SerialNumber: syz [ 1082.747243][T16109] usb 7-1: config 0 descriptor?? [ 1082.920512][T16819] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1083.635552][T16109] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1083.651418][T16109] CoreChips: probe of 7-1:0.41 failed with error -71 [ 1083.662114][T16109] usb 7-1: USB disconnect, device number 3 [ 1083.759332][T16819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.778127][T16819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.805402][T16819] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1083.818522][T18095] Bluetooth: Frame is too long (len 10, expected len 4) [ 1083.939729][T16819] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1083.949286][T16819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1083.957329][T16819] usb 6-1: Product: syz [ 1083.962419][T16819] usb 6-1: Manufacturer: syz [ 1084.020228][T16819] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1084.034998][T16819] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1084.049905][T16819] garmin_gps: probe of ttyUSB0 failed with error -8 [ 1084.352320][ T8881] usb 6-1: USB disconnect, device number 15 [ 1084.359933][ T8881] garmin_gps 6-1:1.0: device disconnected [ 1084.592905][T19148] atomic_op ffff888058f1c198 conn xmit_atomic 0000000000000000 [ 1086.352846][T19167] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 1086.447570][T19167] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1087.556755][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1087.566426][T19184] bond1: option mode: unable to set because the bond device has slaves [ 1087.576351][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1087.585534][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1087.711104][T16109] input: syz0 as /devices/virtual/misc/uhid/0005:0003:0386.0004/input/input14 [ 1087.807496][T16109] hid-generic 0005:0003:0386.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1087.908976][T16768] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1087.945962][T19202] fido_id[19202]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1088.279115][T16768] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1088.329604][T16768] usb 6-1: config 0 has no interface number 0 [ 1088.335764][T16768] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1089.129056][T16768] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1089.164467][T16768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.205598][T16768] usb 6-1: Product: syz [ 1089.216725][T19239] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1089.223391][T16768] usb 6-1: Manufacturer: syz [ 1089.236662][T16768] usb 6-1: SerialNumber: syz [ 1089.270772][T16768] usb 6-1: config 0 descriptor?? [ 1089.330689][T19239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4071'. [ 1089.491573][T19256] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4073'. [ 1089.819115][T16768] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1089.849101][T16768] CoreChips: probe of 6-1:0.41 failed with error -71 [ 1089.899009][ T7643] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1089.909574][T16768] usb 6-1: USB disconnect, device number 16 [ 1090.790129][ T7643] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1090.831575][ T7643] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1090.858960][ T7643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.264019][T19339] bond1: option mode: unable to set because the bond device has slaves [ 1091.284772][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1091.307676][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1091.530004][T19315] loop5: detected capacity change from 0 to 32768 [ 1091.800253][T19315] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.4084 (19315) [ 1092.228682][T19315] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1092.259870][ T4232] usb 7-1: USB disconnect, device number 4 [ 1092.291473][T19315] BTRFS info (device loop5): force zlib compression, level 3 [ 1092.299456][T19315] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1092.309695][T19315] BTRFS info (device loop5): use zstd compression, level 3 [ 1092.316928][T19315] BTRFS info (device loop5): enabling ssd optimizations [ 1092.378932][T19315] BTRFS info (device loop5): using free space tree [ 1092.385496][T19315] BTRFS info (device loop5): has skinny extents [ 1092.516821][T19379] loop6: detected capacity change from 0 to 512 [ 1092.557835][T19379] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1092.629402][T19379] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 1092.629402][T19379] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1092.629402][T19379] [ 1092.826346][T19379] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1092.833327][T19379] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1092.861849][T19379] EXT4-fs (loop6): 1 truncate cleaned up [ 1092.879020][T19379] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nouser_xattr,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 1092.943603][T19403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4108'. [ 1092.964758][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1093.072211][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1093.144687][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1093.369312][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1094.150187][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1094.209921][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1094.243602][T19379] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #15: comm syz.6.4105: bad extra_isize 62 (inode size 256) [ 1094.930056][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4110'. [ 1096.122534][T19432] loop6: detected capacity change from 0 to 32768 [ 1097.152444][T19474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4125'. [ 1097.182747][T19448] loop5: detected capacity change from 0 to 32768 [ 1097.240895][T19432] XFS (loop6): Mounting V5 Filesystem [ 1097.353252][T19432] XFS (loop6): Ending clean mount [ 1097.367161][T19432] XFS (loop6): Quotacheck needed: Please wait. [ 1097.465094][T19432] XFS (loop6): Quotacheck: Done. [ 1097.516432][T19448] XFS (loop5): Mounting V5 Filesystem [ 1097.678515][T19448] XFS (loop5): Ending clean mount [ 1097.704698][T19448] XFS (loop5): Quotacheck needed: Please wait. [ 1097.723943][T18091] XFS (loop6): Unmounting Filesystem [ 1097.902768][T19519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4132'. [ 1097.913700][T19448] XFS (loop5): Quotacheck: Done. [ 1097.970475][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4132'. [ 1098.020722][T19519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'. [ 1098.054789][T19527] bond1: option mode: unable to set because the bond device has slaves [ 1098.085118][T11946] XFS (loop5): Unmounting Filesystem [ 1098.116296][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1098.158511][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1098.576674][T19542] loop6: detected capacity change from 0 to 128 [ 1098.890670][T19561] loop5: detected capacity change from 0 to 164 [ 1098.948452][T19561] Unable to read rock-ridge attributes [ 1099.296872][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4138'. [ 1099.681664][T19561] Unable to read rock-ridge attributes [ 1099.708260][T18091] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 1099.718131][T19561] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 1099.726467][T18091] FAT-fs (loop6): Filesystem has been set read-only [ 1099.899733][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1099.968326][T19579] atomic_op ffff888058f1b998 conn xmit_atomic 0000000000000000 [ 1100.112113][T19593] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4141'. [ 1101.059294][T19600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1101.192224][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1101.212637][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1101.230199][T19616] bond1: option mode: unable to set because the bond device has slaves [ 1101.320974][T19607] device syzkaller1 entered promiscuous mode [ 1101.565863][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.595097][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.619838][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.664298][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.711814][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.796660][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.881814][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1101.967999][T16721] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1102.132512][T16721] hid-generic 0000:0000:0001.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1102.469416][T19663] loop6: detected capacity change from 0 to 128 [ 1102.553608][T19649] fido_id[19649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1102.578554][T19665] netlink: 'syz.5.4158': attribute type 39 has an invalid length. [ 1102.601492][T19663] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 1102.624931][T19663] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.540003][T19691] bond1: option mode: unable to set because the bond device has slaves [ 1103.550464][T19691] __nla_validate_parse: 2 callbacks suppressed [ 1103.550477][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'. [ 1103.572256][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4163'. [ 1103.695375][T19700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1103.729417][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1103.752984][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1103.823223][ T4524] bond1: (slave bond0): link status definitely down, disabling slave [ 1103.853922][ T4524] bond1: now running without any active interface! [ 1104.074306][ T7643] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1104.462332][ T7643] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1104.485011][ T7643] usb 7-1: config 0 has no interface number 0 [ 1104.511648][ T7643] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1104.699568][ T7643] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1104.717659][ T7643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.749502][ T7643] usb 7-1: Product: syz [ 1104.753701][ T7643] usb 7-1: Manufacturer: syz [ 1104.758727][ T7643] usb 7-1: SerialNumber: syz [ 1104.800641][ T7643] usb 7-1: config 0 descriptor?? [ 1105.139680][T19736] netdevsim netdevsim5: Direct firmware load for .® failed with error -2 [ 1105.169977][T19736] netdevsim netdevsim5: Falling back to sysfs fallback for: .® [ 1105.279375][ T7643] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1105.297548][ T7643] CoreChips: probe of 7-1:0.41 failed with error -71 [ 1105.340919][ T7643] usb 7-1: USB disconnect, device number 5 [ 1106.405493][T19784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1106.470560][T16819] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1106.929130][T16819] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1107.057710][T16819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.830861][T16819] usb 6-1: config 0 descriptor?? [ 1107.889133][T19809] xt_hashlimit: size too large, truncated to 1048576 [ 1107.900425][T16819] cp210x 6-1:0.0: cp210x converter detected [ 1108.399156][T16819] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1108.648732][T16819] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1108.710104][T16819] usb 6-1: USB disconnect, device number 17 [ 1108.763490][T16819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1108.855908][T16819] cp210x 6-1:0.0: device disconnected [ 1109.302469][T19836] loop5: detected capacity change from 0 to 512 [ 1109.510151][T19836] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 1109.526199][T19836] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.291443][T19855] EXT4-fs error (device loop5): ext4_get_first_dir_block:3610: inode #12: comm syz.5.4187: directory missing '.' [ 1112.260865][T19855] EXT4-fs (loop5): Remounting filesystem read-only [ 1112.307287][T19858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1113.248361][T19866] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4193'. [ 1113.580505][T19878] loop5: detected capacity change from 0 to 164 [ 1113.659403][T19878] Unable to read rock-ridge attributes [ 1113.769899][T19878] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4194'. [ 1113.843674][T19878] nbd: must specify at least one socket [ 1113.873027][T19890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4197'. [ 1113.887109][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4197'. [ 1113.896321][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4197'. [ 1114.169146][T16080] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1114.573502][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1114.629382][T16080] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1114.801649][T16080] usb 7-1: config 0 has no interface number 0 [ 1114.807821][T16080] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1115.602233][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.608623][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.809419][T16080] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1115.825279][T19907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1115.844717][T16080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.879021][T16080] usb 7-1: Product: syz [ 1115.891530][T16080] usb 7-1: Manufacturer: syz [ 1115.911796][T16080] usb 7-1: SerialNumber: syz [ 1116.789450][T16080] usb 7-1: config 0 descriptor?? [ 1117.167211][T16080] usb 7-1: can't set config #0, error -71 [ 1117.513726][T16080] usb 7-1: USB disconnect, device number 6 [ 1119.491717][T19937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1119.571509][T19947] loop6: detected capacity change from 0 to 164 [ 1119.640694][T19947] Unable to read rock-ridge attributes [ 1119.661184][T19944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4210'. [ 1119.688013][T19947] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4211'. [ 1119.739962][T19947] nbd: must specify at least one socket [ 1121.213206][T19974] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4217'. [ 1121.742592][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4217'. [ 1122.083263][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4217'. [ 1124.696586][T16721] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1124.987198][T20008] loop5: detected capacity change from 0 to 2048 [ 1125.861893][T20018] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4226'. [ 1126.934327][T20008] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1126.970434][T20008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1127.009984][T20013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4223'. [ 1129.832461][T20059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1129.982785][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1130.009046][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1131.618882][T20079] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4240'. [ 1132.501846][T20082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4241'. [ 1134.389899][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4248'. [ 1135.577442][T20139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1136.268018][T20146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4254'. [ 1136.379178][T20152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1136.633896][T20164] loop5: detected capacity change from 0 to 256 [ 1136.754138][T20164] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1138.993282][T20203] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4265'. [ 1139.838686][T20213] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4267'. [ 1140.274187][T20211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1145.067258][T20283] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4282'. [ 1145.199061][ T8881] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1145.433907][T20281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1146.758455][T20293] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4285'. [ 1146.789124][ T8881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1146.804369][ T8881] usb 6-1: config 0 has no interface number 0 [ 1146.837336][ T8881] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1146.988360][ T8881] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1147.000209][ T8881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1147.010602][ T8881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.053625][ T8881] usb 6-1: config 0 descriptor?? [ 1148.000057][ T8881] usb 6-1: can't set config #0, error -71 [ 1148.554256][ T8881] usb 6-1: USB disconnect, device number 18 [ 1150.194983][T20340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1152.137936][T20367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4303'. [ 1152.583895][T20387] loop6: detected capacity change from 0 to 4096 [ 1153.328649][T20387] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1153.466467][T20387] ntfs: volume version 3.1. [ 1153.513021][T20387] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1153.629149][T20387] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1153.761691][T20387] ntfs: (device loop6): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 1153.859760][T20387] ntfs: (device loop6): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 1153.947903][T20387] ntfs: (device loop6): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 1154.128430][T20408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4311'. [ 1154.179188][T18091] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1156.401493][T20438] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1157.897419][T20460] loop5: detected capacity change from 0 to 164 [ 1158.579806][T20460] Unable to read rock-ridge attributes [ 1158.867511][T20467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1160.872088][T20500] overlayfs: failed to clone upperpath [ 1161.652297][T20501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1164.337955][T20534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4341'. [ 1165.574147][T20560] loop6: detected capacity change from 0 to 164 [ 1165.599362][T20560] Unable to read rock-ridge attributes [ 1165.761072][T20559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4346'. [ 1165.778323][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4347'. [ 1166.599562][T20560] Unable to read rock-ridge attributes [ 1166.649383][T20560] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 1169.627467][T20611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1171.469149][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4362'. [ 1172.585938][T20656] BUG: MAX_LOCK_DEPTH too low! [ 1172.590766][T20656] turning off the locking correctness validator. [ 1172.597109][T20656] depth: 48 max: 48! [ 1172.601182][T20656] 48 locks held by syz.2.4367/20656: [ 1172.606487][T20656] #0: ffff888079cb50e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x11d0/0x1710 [ 1172.616278][T20656] #1: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 1172.625626][T20656] #2: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.634980][T20656] #3: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.644453][T20656] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.653836][T20656] #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.663186][T20656] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.672540][T20656] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.681903][T20656] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.691259][T20656] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.700609][T20656] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.710047][T20656] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.719525][T20656] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.728973][T20656] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.738419][T20656] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.747867][T20656] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.757322][T20656] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.766858][T20656] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.776297][T20656] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.785822][T20656] #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.795259][T20656] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.804693][T20656] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.814126][T20656] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.823561][T20656] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.833017][T20656] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.842560][T20656] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.852013][T20656] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.861550][T20656] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.870988][T20656] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.880516][T20656] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.889969][T20656] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.899684][T20656] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.909136][T20656] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.918589][T20656] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.928036][T20656] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.937475][T20656] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.946911][T20656] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.956344][T20656] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.965803][T20656] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.975248][T20656] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.984782][T20656] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1172.994225][T20656] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1173.003671][T20656] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1173.013121][T20656] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1173.022558][T20656] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1173.031998][T20656] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1173.041437][T20656] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1173.050882][T20656] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 1173.060317][T20656] INFO: lockdep is turned off. [ 1173.065095][T20656] CPU: 1 PID: 20656 Comm: syz.2.4367 Not tainted syzkaller #0 [ 1173.072575][T20656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1173.082739][T20656] Call Trace: [ 1173.086048][T20656] [ 1173.089004][T20656] dump_stack_lvl+0x188/0x250 [ 1173.093714][T20656] ? show_regs_print_info+0x20/0x20 [ 1173.098943][T20656] ? load_image+0x410/0x410 [ 1173.103476][T20656] __lock_acquire+0x1247/0x7b50 [ 1173.108369][T20656] ? rpl_output+0x321/0x730 [ 1173.112906][T20656] ? lwtunnel_output+0x27e/0x440 [ 1173.117878][T20656] ? kfree+0xef/0x2a0 [ 1173.121890][T20656] ? verify_lock_unused+0x140/0x140 [ 1173.127123][T20656] ? stack_trace_save+0xa6/0xf0 [ 1173.131996][T20656] ? stack_trace_snprint+0xe0/0xe0 [ 1173.137128][T20656] ? stack_trace_save+0xf0/0xf0 [ 1173.142002][T20656] ? mark_lock+0x94/0x320 [ 1173.146355][T20656] ? __lock_acquire+0x1305/0x7b50 [ 1173.151406][T20656] ? rpl_output+0x178/0x730 [ 1173.155939][T20656] lock_acquire+0x19e/0x400 [ 1173.160467][T20656] ? rcu_lock_acquire+0x9/0x30 [ 1173.165261][T20656] ? rpl_output+0x321/0x730 [ 1173.169795][T20656] ? lwtunnel_output+0x27e/0x440 [ 1173.174784][T20656] ? rpl_output+0x321/0x730 [ 1173.179314][T20656] ? lwtunnel_output+0x27e/0x440 [ 1173.184274][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.189676][T20656] ? verify_lock_unused+0x140/0x140 [ 1173.194906][T20656] ? mark_lock+0x94/0x320 [ 1173.199278][T20656] rcu_lock_acquire+0x2a/0x30 [ 1173.203993][T20656] ? rcu_lock_acquire+0x9/0x30 [ 1173.208797][T20656] ip6_dst_check+0xe2/0x7a0 [ 1173.213346][T20656] ? skb_header_pointer+0x120/0x120 [ 1173.218577][T20656] dst_cache_per_cpu_get+0x1a3/0x310 [ 1173.223898][T20656] rpl_output+0x165/0x730 [ 1173.228284][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.232818][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.237791][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.243209][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.247754][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.252733][T20656] lwtunnel_output+0x27e/0x440 [ 1173.257543][T20656] rpl_output+0x321/0x730 [ 1173.261941][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.266502][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.271475][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.276894][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.281436][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.286511][T20656] lwtunnel_output+0x27e/0x440 [ 1173.291306][T20656] rpl_output+0x321/0x730 [ 1173.295670][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.300208][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.305178][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.310585][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.315132][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.320095][T20656] lwtunnel_output+0x27e/0x440 [ 1173.324887][T20656] rpl_output+0x321/0x730 [ 1173.329354][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.333885][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.338883][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.344292][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.348836][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.353815][T20656] lwtunnel_output+0x27e/0x440 [ 1173.358614][T20656] rpl_output+0x321/0x730 [ 1173.362980][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.367510][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.372472][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.377883][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.382427][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.387388][T20656] lwtunnel_output+0x27e/0x440 [ 1173.392179][T20656] rpl_output+0x321/0x730 [ 1173.396555][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.401094][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.406101][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.411505][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.416048][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.421034][T20656] lwtunnel_output+0x27e/0x440 [ 1173.425851][T20656] rpl_output+0x321/0x730 [ 1173.430223][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.434754][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.439716][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.445120][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.449660][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.454623][T20656] lwtunnel_output+0x27e/0x440 [ 1173.459413][T20656] rpl_output+0x321/0x730 [ 1173.463776][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.468309][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.473273][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.478685][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.483221][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.488188][T20656] lwtunnel_output+0x27e/0x440 [ 1173.492983][T20656] rpl_output+0x321/0x730 [ 1173.497346][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.501886][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.506855][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.512270][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.516840][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.521825][T20656] lwtunnel_output+0x27e/0x440 [ 1173.526628][T20656] rpl_output+0x321/0x730 [ 1173.530986][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.535533][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.540504][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.545916][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.550455][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.555428][T20656] lwtunnel_output+0x27e/0x440 [ 1173.560246][T20656] rpl_output+0x321/0x730 [ 1173.564626][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.569164][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.574130][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.579544][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.584092][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.589065][T20656] lwtunnel_output+0x27e/0x440 [ 1173.593861][T20656] rpl_output+0x321/0x730 [ 1173.598236][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.602776][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.607776][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.613180][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.617829][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.622803][T20656] lwtunnel_output+0x27e/0x440 [ 1173.627606][T20656] rpl_output+0x321/0x730 [ 1173.631959][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.636511][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.641489][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.646896][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.651439][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.656608][T20656] lwtunnel_output+0x27e/0x440 [ 1173.661404][T20656] rpl_output+0x321/0x730 [ 1173.665763][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.670296][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.675281][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.680691][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.685335][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.690309][T20656] lwtunnel_output+0x27e/0x440 [ 1173.695104][T20656] rpl_output+0x321/0x730 [ 1173.699468][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.704006][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.708974][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.714383][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.718930][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.723900][T20656] lwtunnel_output+0x27e/0x440 [ 1173.728699][T20656] rpl_output+0x321/0x730 [ 1173.733055][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.737584][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.742550][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.747955][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.752490][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.757457][T20656] lwtunnel_output+0x27e/0x440 [ 1173.762283][T20656] rpl_output+0x321/0x730 [ 1173.766640][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.771174][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.776154][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.781559][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.786101][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.791068][T20656] lwtunnel_output+0x27e/0x440 [ 1173.795863][T20656] rpl_output+0x321/0x730 [ 1173.800228][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.804769][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.809732][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.815153][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.819692][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.824661][T20656] lwtunnel_output+0x27e/0x440 [ 1173.829453][T20656] rpl_output+0x321/0x730 [ 1173.833822][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.838357][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.843323][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.848746][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.853308][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.858285][T20656] lwtunnel_output+0x27e/0x440 [ 1173.863129][T20656] rpl_output+0x321/0x730 [ 1173.867494][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.872026][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.877007][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.882434][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.886977][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.891989][T20656] lwtunnel_output+0x27e/0x440 [ 1173.896799][T20656] rpl_output+0x321/0x730 [ 1173.901187][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.905718][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.910729][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.916150][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.920687][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.925653][T20656] lwtunnel_output+0x27e/0x440 [ 1173.930616][T20656] rpl_output+0x321/0x730 [ 1173.934979][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.939516][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.944485][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.949900][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.954441][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.959403][T20656] lwtunnel_output+0x27e/0x440 [ 1173.964197][T20656] rpl_output+0x321/0x730 [ 1173.968555][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.973087][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.978055][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1173.983468][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1173.988003][T20656] ? rpl_destroy_state+0x20/0x20 [ 1173.992989][T20656] lwtunnel_output+0x27e/0x440 [ 1173.997790][T20656] rpl_output+0x321/0x730 [ 1174.002160][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.006691][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.011672][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.017083][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.021655][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.026618][T20656] lwtunnel_output+0x27e/0x440 [ 1174.031414][T20656] rpl_output+0x321/0x730 [ 1174.035776][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.040306][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.045279][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.050682][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.055219][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.060204][T20656] lwtunnel_output+0x27e/0x440 [ 1174.064997][T20656] rpl_output+0x321/0x730 [ 1174.069373][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.073912][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.078881][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.084284][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.088823][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.093788][T20656] lwtunnel_output+0x27e/0x440 [ 1174.098588][T20656] rpl_output+0x321/0x730 [ 1174.102946][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.107489][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.112452][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.117873][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.122412][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.127405][T20656] lwtunnel_output+0x27e/0x440 [ 1174.132199][T20656] rpl_output+0x321/0x730 [ 1174.136582][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.141116][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.146078][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.151480][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.156019][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.161002][T20656] lwtunnel_output+0x27e/0x440 [ 1174.165788][T20656] rpl_output+0x321/0x730 [ 1174.170143][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.174672][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.179634][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.185042][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.189579][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.194585][T20656] lwtunnel_output+0x27e/0x440 [ 1174.199376][T20656] rpl_output+0x321/0x730 [ 1174.203759][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.208290][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.213257][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.218673][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.223206][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.228174][T20656] lwtunnel_output+0x27e/0x440 [ 1174.232968][T20656] rpl_output+0x321/0x730 [ 1174.237332][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.241883][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.246850][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.252282][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.256835][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.262237][T20656] lwtunnel_output+0x27e/0x440 [ 1174.267031][T20656] rpl_output+0x321/0x730 [ 1174.271390][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.275939][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.280908][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.286321][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.290854][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.295817][T20656] lwtunnel_output+0x27e/0x440 [ 1174.300610][T20656] rpl_output+0x321/0x730 [ 1174.304971][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.309506][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.314480][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.319880][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.324521][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.329489][T20656] lwtunnel_output+0x27e/0x440 [ 1174.334280][T20656] rpl_output+0x321/0x730 [ 1174.338653][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.343188][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.348163][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.353574][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.358145][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.363108][T20656] lwtunnel_output+0x27e/0x440 [ 1174.367900][T20656] rpl_output+0x321/0x730 [ 1174.372258][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.376803][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.381767][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.387294][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.391835][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.396803][T20656] lwtunnel_output+0x27e/0x440 [ 1174.401606][T20656] rpl_output+0x321/0x730 [ 1174.405976][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.410509][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.415494][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.420905][T20656] ? rpl_do_srh+0x9c1/0xe50 [ 1174.425439][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.430418][T20656] lwtunnel_output+0x27e/0x440 [ 1174.435213][T20656] rpl_output+0x321/0x730 [ 1174.439574][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.444541][T20656] ? read_lock_is_recursive+0x10/0x10 [ 1174.449952][T20656] ? __local_bh_enable_ip+0x136/0x1c0 [ 1174.455498][T20656] ? lockdep_hardirqs_on+0x94/0x140 [ 1174.460742][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.465714][T20656] lwtunnel_output+0x27e/0x440 [ 1174.470513][T20656] rpl_output+0x321/0x730 [ 1174.474879][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.479848][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.484815][T20656] lwtunnel_output+0x27e/0x440 [ 1174.489613][T20656] rpl_output+0x321/0x730 [ 1174.493977][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.498952][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.503919][T20656] lwtunnel_output+0x27e/0x440 [ 1174.508719][T20656] rpl_output+0x321/0x730 [ 1174.513079][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.518042][T20656] ? pskb_expand_head+0x363/0x1100 [ 1174.523194][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.528160][T20656] lwtunnel_output+0x27e/0x440 [ 1174.532949][T20656] rpl_output+0x321/0x730 [ 1174.537312][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.542287][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.547298][T20656] lwtunnel_output+0x27e/0x440 [ 1174.552103][T20656] rpl_output+0x321/0x730 [ 1174.556465][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.561433][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.566408][T20656] lwtunnel_output+0x27e/0x440 [ 1174.571206][T20656] rpl_output+0x321/0x730 [ 1174.575577][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.580552][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.585520][T20656] lwtunnel_output+0x27e/0x440 [ 1174.590313][T20656] rpl_output+0x321/0x730 [ 1174.594675][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.599642][T20656] ? pskb_expand_head+0x363/0x1100 [ 1174.604801][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.609767][T20656] lwtunnel_output+0x27e/0x440 [ 1174.614568][T20656] rpl_output+0x321/0x730 [ 1174.618931][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.623910][T20656] ? rpl_destroy_state+0x20/0x20 [ 1174.628872][T20656] lwtunnel_output+0x27e/0x440 [ 1174.633658][T20656] ip6_send_skb+0x1af/0x350 [ 1174.638190][T20656] rawv6_push_pending_frames+0x665/0x820 [ 1174.643854][T20656] ? rawv6_send_hdrinc+0x1650/0x1650 [ 1174.649166][T20656] ? raw6_getfrag+0x2c0/0x2c0 [ 1174.653871][T20656] ? rawv6_send_hdrinc+0x1650/0x1650 [ 1174.659180][T20656] rawv6_sendmsg+0x1298/0x1710 [ 1174.664000][T20656] ? __might_sleep+0xf0/0xf0 [ 1174.668645][T20656] ? compat_rawv6_ioctl+0x60/0x60 [ 1174.673697][T20656] ? aa_sk_perm+0x7dc/0x910 [ 1174.678231][T20656] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1174.684760][T20656] ? sock_rps_record_flow+0x17/0x3b0 [ 1174.690087][T20656] ? inet_sendmsg+0x7a/0x2a0 [ 1174.694740][T20656] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1174.700184][T20656] ? inet_send_prepare+0x250/0x250 [ 1174.705324][T20656] ____sys_sendmsg+0x5be/0x8f0 [ 1174.710124][T20656] ? __sys_sendmsg_sock+0x30/0x30 [ 1174.715179][T20656] ? import_iovec+0x6f/0xa0 [ 1174.719704][T20656] ___sys_sendmsg+0x236/0x2e0 [ 1174.724417][T20656] ? __sys_sendmsg+0x290/0x290 [ 1174.729221][T20656] ? disable_eprobe+0x270/0x270 [ 1174.734109][T20656] __se_sys_sendmsg+0x1b7/0x2a0 [ 1174.739015][T20656] ? __x64_sys_sendmsg+0x80/0x80 [ 1174.743987][T20656] ? trace_sys_enter+0x1f/0x80 [ 1174.748784][T20656] do_syscall_64+0x4c/0xa0 [ 1174.753276][T20656] ? clear_bhb_loop+0x30/0x80 [ 1174.758012][T20656] ? clear_bhb_loop+0x30/0x80 [ 1174.762718][T20656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1174.768694][T20656] RIP: 0033:0x7fbfc0e84159 [ 1174.773129][T20656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.792789][T20656] RSP: 002b:00007fbfbf0dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.801239][T20656] RAX: ffffffffffffffda RBX: 00007fbfc110bfa0 RCX: 00007fbfc0e84159 [ 1174.809217][T20656] RDX: 0000000004000800 RSI: 0000200000000380 RDI: 0000000000000003 [ 1174.817190][T20656] RBP: 00007fbfc0f1b06b R08: 0000000000000000 R09: 0000000000000000 [ 1174.825162][T20656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.833129][T20656] R13: 00007fbfc110c038 R14: 00007fbfc110bfa0 R15: 00007ffd5736a1c8 [ 1174.841119][T20656] [ 1175.199790][T20656] syz.2.4367 (20656) used greatest stack depth: 7088 bytes left [ 1177.041433][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.047765][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.119194][T16722] Bluetooth: hci2: command 0x0406 tx timeout