last executing test programs: 12m22.456631855s ago: executing program 0 (id=27): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 12m21.148142105s ago: executing program 0 (id=32): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800090, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x6bd, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000280), 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') removexattr(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)=@known='trusted.overlay.opaque\x00') 12m15.903544063s ago: executing program 0 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) wait4(0x0, 0x0, 0x80000000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfff2, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="00000029fc1500", @ANYRES32=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x86800, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x81, 0x37a, &(0x7f0000000480)="$eJzs3c9rI2UYwPEnbZpMumyTgygK0ge96GVoq2c1yC6IBZfuRtwVhNntVEPHpMyESERsPXkVb/4DgsseFzwsuP4DvXhbL170Yi+CoIuII/PjbX500qTZLE233w/s5kne95l53yQNzxuYNwfvffXx9lZgbzktmbNUciIiD0UqMidGLrkpSIY9efnCnw+ev3r9xtvV9fVLG6qXq9deWVPVpeUfPvmslHa7V5T9ygcHYv26//T+swf/XfuoHmg90EazpY7ebP7Scm56rm7Wg21b9YrnOoGr9Ubg+kl7M2nf8po7Ox11GpsXF3d8NwjUaXR02+1oq6ktv6POh069obZt68XFrOE+wawJcmq3Nzac6oQnvDVhHqbtnzAMj2n2/aozL2KXjrTUbj/WcQEAgJkU1/95EUnq/29MjVCRucOCMpeuBQpx3L8MiOp/E8f1f7RY6Nb/d174sXXh3btLaf1/r5BV/7/6c5LfV/9HZ596/f/dwP2jFdGZt3uSzo9U/2M2LPf/Rf7eXbGnovp/UYrdFf0X799ZiQPqfwAAAAAAAAAAAAAAAAAAAAAAzoKHYVgOw7Bsbs2/7iUE6X1z77gLjXHmDHv9i+mOAofvBzyRrl6/IVZ84V5+ScT7sl1r15LbtN10XJGy/Bu/H1LJhhN7caNGKnLf223XFtKE+fj/qoiKJ66sSlkqfflxfPmt9UurmpDfovz4/LvtWi6/GOVvST3OX5OyPJWdv2by7/fmF+SlF3vybSnLT7ekKZ5spp9jJv/zVdU331kfyC/F/bK8/nhfEgAAAAAAps5WtdLlc6V//Zus321bNas9WstL7/r86PcDh+vrlcz1eb78XP505w4AAAAAwHkRFD7ddjzP9YPO0KAko/oU06MNNOVlxJGjID9Gn77gQRwsHNdnvmeG4x65kP6CxrjD8IOOjD1mE/xVlMwn02zh2tdkZT+rYwZm/mN0tk76EvjB3Mnn7vrBcjQenWg6PYH52mhYH7ky6ZGHBWbn3FGdn/n6278nO0Uu3bW3t+m1u9aImcZBbuCRvRFv2j/CcOR4FrI/Lb6f5EdmAAAAAMwIU/SXAvPIG6c7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqGpbpM2JDjtOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz4v8AAAD//98K9HQ=") syz_usbip_server_init(0x4) 12m12.138281002s ago: executing program 0 (id=47): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0xfffffffffffffffc, 0x3000, 0x1000, 0x0, 0x1}, 0x20) 12m11.701165185s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10480, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x10b000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 12m8.855237046s ago: executing program 0 (id=50): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x0, 0x2) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @multicast}, 0x44, {0x2, 0x4e20, @local}, 'syz_tun\x00'}) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)) 11m53.260620411s ago: executing program 32 (id=50): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x0, 0x2) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @multicast}, 0x44, {0x2, 0x4e20, @local}, 'syz_tun\x00'}) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)) 10m26.098606655s ago: executing program 1 (id=272): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 10m24.895179944s ago: executing program 1 (id=274): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@init_itable}, {@acl}]}, 0x0, 0x559, &(0x7f0000000fc0)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b10"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 10m20.934463953s ago: executing program 1 (id=288): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x61) socket(0x1e, 0x80004, 0x0) 10m18.738696929s ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xe4}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x8, 0x6, 0x7, {0x0, 0x2, 0xfffc, 0xf, 0xff}, {0x8, 0x1, 0x1, 0x9, 0x0, 0x3f}, 0x9, 0x9, 0x4}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20008840) 10m17.596773328s ago: executing program 1 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m16.516732846s ago: executing program 1 (id=298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@init_itable}, {@acl}]}, 0x0, 0x559, &(0x7f0000000fc0)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b10"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 10m1.03569291s ago: executing program 33 (id=298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@init_itable}, {@acl}]}, 0x0, 0x559, &(0x7f0000000fc0)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b10"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 9m6.91310239s ago: executing program 4 (id=428): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000005c0)=0x4, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[], 0x0) 9m6.331037664s ago: executing program 4 (id=431): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 9m5.919871807s ago: executing program 4 (id=434): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 9m2.236286124s ago: executing program 4 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r1, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="3a08040bf7400400fc000000000000000000001e00000001fc020000000000000000000000000001fe880000000000000000000020000101fe8000"/68], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0x142}, {0x0}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) splice(r0, &(0x7f0000000240)=0x80, 0xffffffffffffffff, &(0x7f0000000280)=0x3bc282f2, 0x8, 0x0) sendmmsg(r3, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="724dc40b", 0x4}], 0x1, 0x0, 0x60}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3d29d9a", 0x4}], 0x1}}], 0x2, 0x20004841) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000640)=r4, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) recvmmsg(r7, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netpci0\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x37, 0xc, 0x6625, [0x6, 0x8, 0x40d, 0x7, 0x7]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640200000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x1d, 0x301, 0x400, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @generic={{0xf, 0x4, 0x3, 0x23, 0x5c, 0x65, 0x0, 0xf, 0x5c, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @empty, {[@rr={0x7, 0x1b, 0x89, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xfb, 0x0, 0xc, [0x7f, 0xfffffffd]}, @end]}}, "68d512a120a9e1fe408e065010030180f1a7084c6af8922307173c1f19b78ee4"}}}}, 0x0) pipe(0x0) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}, 0x3, 0x0, 0x0, 0x0, 0x64, 0x3}, &(0x7f0000000200)=0x9c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 8m58.680539491s ago: executing program 4 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") 8m56.486208007s ago: executing program 4 (id=457): pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000f28, 0x8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x33fe0, 0x1) socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 8m40.987594641s ago: executing program 34 (id=457): pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000f28, 0x8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x33fe0, 0x1) socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 1m32.890434944s ago: executing program 7 (id=1950): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000003140)={0x1f, @none}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7fffffff, 0x34343452, 0xebfdae46831a75f, 0x2, [{0x3, 0x2}, {0x9c8e4708, 0x8}, {0xf, 0xa0}, {0x2}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0x9, 0x7}, {0x7, 0x10101}], 0x6, 0x7a, 0x2, 0x2, 0x7}}) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e80)={0x14, 0x2a, 0x9, 0x0, 0x1, {0xa, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x8000}, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x106f) syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="305b70b6c5490a71093442024fc04ca287738934e6e78aec2106b1c0fe602c00161e18ed97050ef60b23abd7a916e0702eec27ff8f4cfa4a"], 0x1, 0x9dc3, &(0x7f0000013cc0)="$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") 1m32.353040557s ago: executing program 7 (id=1953): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) close(r0) 1m31.425394414s ago: executing program 7 (id=1956): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000032000048010000180090001006c6173748f23000000000c00018008000100686f67000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x62}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) listen(0xffffffffffffffff, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 1m31.101865336s ago: executing program 7 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 1m29.160727841s ago: executing program 7 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r4, &(0x7f0000000040), 0x373) 1m26.237712033s ago: executing program 7 (id=1967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r2, 0x47ba, 0x2000, 0x0, 0x0, 0x0) 1m10.139649891s ago: executing program 35 (id=1967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r2, 0x47ba, 0x2000, 0x0, 0x0, 0x0) 12.447307848s ago: executing program 3 (id=2140): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7, 0x8}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x12806580, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xc0000484) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006340)="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", 0x2000, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0xf06}}}, 0x108) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 11.464977435s ago: executing program 3 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0x2, 0x5, 0x36, 0x4}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_FPEMU(0x37, 0x1) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x3, 0x80) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f00000000c0)={0x8000004, 0x101, "679c2e845e3ede57000000000000000000000000000000004000", 0x8, 0x0, 0x0, 0x1, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x38) 10.483936352s ago: executing program 3 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 8.837466224s ago: executing program 3 (id=2149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x1}}) 6.69044457s ago: executing program 6 (id=2154): r0 = socket(0x2, 0x80805, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 6.68628969s ago: executing program 5 (id=2155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) keyctl$chown(0x4, 0x0, 0x0, 0xee01) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$tcp_mem(r0, &(0x7f0000000300)={0x8000000, 0x20, 0x4, 0x20, 0x3f}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getpid() r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x8000, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) 6.423380132s ago: executing program 6 (id=2156): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) close(r0) 6.390236882s ago: executing program 6 (id=2157): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x4721, 0x1, 0x1ff, 0x6, {{0x3a, 0x4, 0x1, 0x2, 0xe8, 0x64, 0x0, 0xa, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x12, "c5374844143423eb4fe0399514ea092b"}, {0x3, 0x5, "11a650"}, {0x2, 0x8, "535d00b2e6fa"}, {0x0, 0x3, "aa"}, {0x2, 0x12, "00b64565bc2785ad6c5ee8ea2b9afcb0"}, {0x5, 0x4, 'Zb'}]}, @rr={0x7, 0x3, 0x4f}, @noop, @ssrr={0x89, 0xf, 0x81, [@multicast2, @local, @multicast1]}, @lsrr={0x83, 0x13, 0xda, [@multicast2, @broadcast, @rand_addr=0x64010100, @multicast2]}, @lsrr={0x83, 0x17, 0xc4, [@broadcast, @private=0xa010102, @empty, @private=0xa010101, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xa5, 0x0, 0x1, [0x9]}, @generic={0x83, 0x11, "9ce21e44928f47d2fdf45032370f0a"}, @timestamp_addr={0x44, 0x34, 0x90, 0x1, 0x1, [{@rand_addr=0x64010100, 0x8}, {@private=0xa010102, 0x40}, {@empty, 0x75e}, {@remote, 0x5}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x8001}]}, @generic={0x88, 0x7, "ce4739a80f"}]}}}}}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x18) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x891e, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x2, @pix={0x9, 0x4, 0x36314d4e, 0x3, 0x3, 0xe71, 0x4, 0xfffffffc, 0x1, 0x4, 0x2}}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000fddbdf250100000005000d0025000000080008000100000014000c0000000000000000000000ffff0a01010008000500ac14143308000100", @ANYRES32=r2, @ANYBLOB="14000bffff0000000000000000000000003c10276d5609000000"], 0x5c}}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000a721227700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000300)={0x4, 0x6, 0xfff, 0xfffffffffffffffe, 0x7, 0x401, 0x7, 0x8001}, &(0x7f0000000340)={0x7fffffff, 0x101, 0xd979, 0x9, 0x0, 0x9, 0x3ff, 0x298}, &(0x7f0000000380)={0x800000000001, 0x8, 0x6, 0x4, 0x8, 0x2, 0x3, 0x91}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={&(0x7f00000004c0)={[0x3]}, 0x8}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 5.825659876s ago: executing program 8 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'a', ' *:* ', 'rw\x00'}, 0x9) 5.303125761s ago: executing program 8 (id=2160): r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7ffe, 0x5, 0x9}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x7ffffe00, 0xa, 0x1ff, 0x1}) 5.117506502s ago: executing program 5 (id=2161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x78) syz_open_procfs(0xffffffffffffffff, 0x0) memfd_create(0x0, 0x18) 4.419226407s ago: executing program 8 (id=2162): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14c31b0010005a33d4980000000000000000000a20000000000a03000000000000000000070000000900010073797a00000000"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000032000048010000180090001006c6173748f23000000000c00018008000100686f67000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x62}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) listen(0xffffffffffffffff, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 4.368621567s ago: executing program 5 (id=2163): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12015002020000202505a1a440000102030109026c000201b53933e403c73ec2"], &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xc, 0x0, 0x4, 0x10, 0x7}, 0x5, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0x2a, 0x2, 0x9) fanotify_mark(0xffffffffffffffff, 0x455, 0x48001012, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000280)={0x0, "5b9992bc231a14b414c11655627f7bd00ddbd106c0b1310e703877f17088dae8"}) unshare(0x6a040000) 4.232527748s ago: executing program 8 (id=2164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 4.122838729s ago: executing program 2 (id=2165): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 4.118750129s ago: executing program 3 (id=2166): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3.179231476s ago: executing program 2 (id=2167): socket$inet6(0xa, 0x2, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x1413, 0x211, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x62}]}, 0x18}, 0x2}, 0x0) bind$inet(r7, 0x0, 0x0) 3.162380706s ago: executing program 8 (id=2168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioperm(0x0, 0x2, 0x7e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x59, 0x76, 0x65, 0xd7, 0x177f, 0x164, 0x768c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x20, 0xff, [{{0x9, 0x4, 0x25, 0x9, 0x0, 0x17, 0x28, 0x46, 0x5}}]}}]}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x453, 0x20, 0x70bd2b, 0x25dfdbfb, '\x00'}, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x4884) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 2.051546444s ago: executing program 2 (id=2169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x3}) 1.774738296s ago: executing program 6 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'a', ' *:* ', 'rw\x00'}, 0x9) 1.523240948s ago: executing program 6 (id=2171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x42}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0xf}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xfff2}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0), 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r8}) 1.24957137s ago: executing program 5 (id=2172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x78) syz_open_procfs(0xffffffffffffffff, 0x0) memfd_create(0x0, 0x18) 327.258567ms ago: executing program 5 (id=2174): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14c31b0010005a33d4980000000000000000000a20000000000a03000000000000000000070000000900010073797a00000000"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000032000048010000180090001006c6173748f23000000000c00018008000100686f67000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x62}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) listen(0xffffffffffffffff, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 322.663337ms ago: executing program 6 (id=2175): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000800000015000300", @ANYRES32=r3], 0x34}}, 0x0) 170.762478ms ago: executing program 5 (id=2176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) 137.465798ms ago: executing program 2 (id=2177): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 35.328109ms ago: executing program 3 (id=2178): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x8, 0x0, 0x4, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0xf, 0x0, 0x0, @remote, @private=0xa010102}}}}) 27.019669ms ago: executing program 2 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r3, &(0x7f0000000040), 0x373) 0s ago: executing program 8 (id=2180): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@private0}, &(0x7f0000000540)=0x14) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "2508c313604598823d332948066405437a"}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, r5, 0xffffffffffffffff) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r5, &(0x7f0000000000)) setitimer(0x2, &(0x7f00000003c0)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000400)) kernel console output (not intermixed with test programs): 212': attribute type 1 has an invalid length. [ 459.932827][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 459.968805][ T9623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.976368][ T4286] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 459.997233][ T9631] loop2: detected capacity change from 0 to 2048 [ 460.064623][ T9629] loop6: detected capacity change from 0 to 512 [ 460.194140][ T9629] EXT4-fs (loop6): 1 orphan inode deleted [ 460.200117][ T9629] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 460.225891][ T9631] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 460.237645][ T9629] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.226659][ T4286] usb 8-1: config 1 has an invalid interface number: 6 but max is 2 [ 461.235025][ T4286] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.245291][ T4286] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 461.254335][ T4286] usb 8-1: config 1 has no interface number 1 [ 461.260515][ T4286] usb 8-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 461.274072][ T4286] usb 8-1: config 1 interface 6 has no altsetting 0 [ 461.479324][ T4286] usb 8-1: string descriptor 0 read error: -71 [ 461.518827][ T4286] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.569817][ T4286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.629496][ T4286] usb 8-1: can't set config #1, error -71 [ 461.650864][ T4286] usb 8-1: USB disconnect, device number 8 [ 463.107634][ T9664] loop2: detected capacity change from 0 to 32768 [ 463.204832][ T9664] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 463.264240][ T9664] (syz.2.1219,9664,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 463.276603][ T9664] (syz.2.1219,9664,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 463.310896][ T9664] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 463.521444][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 463.534574][ T9676] loop7: detected capacity change from 0 to 128 [ 463.629692][ T9676] EXT4-fs (loop7): Test dummy encryption mode enabled [ 463.695936][ T9676] EXT4-fs (loop7): Test dummy encryption mode enabled [ 463.797561][ T9683] ALSA: mixer_oss: invalid OSS volume '' [ 463.862929][ T9676] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 463.905177][ T9685] lo speed is unknown, defaulting to 1000 [ 463.931695][ T9676] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 464.306806][ T9690] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 465.547532][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 468.579364][ T5526] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 468.939899][ T5526] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 469.008104][ T5526] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.340347][ T5526] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.449894][ T5526] usb 3-1: config 1 has no interface number 1 [ 469.456032][ T5526] usb 3-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 469.643946][ T9734] loop7: detected capacity change from 0 to 32768 [ 469.742189][ T5526] usb 3-1: config 1 interface 6 has no altsetting 0 [ 469.780965][ T5526] usb 3-1: string descriptor 0 read error: -71 [ 469.787274][ T5526] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.833435][ T9734] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 469.849702][ T9734] (syz.7.1232,9734,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 469.861729][ T9734] (syz.7.1232,9734,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop7 needs checking. [ 469.875410][ T9734] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 469.895862][ T5526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.929959][ T5526] usb 3-1: can't set config #1, error -71 [ 469.931241][ T5526] usb 3-1: USB disconnect, device number 11 [ 470.101472][ T6725] ocfs2: Unmounting device (7,7) on (node local) [ 470.427938][ T9753] lo speed is unknown, defaulting to 1000 [ 471.183280][ T9767] loop7: detected capacity change from 0 to 128 [ 472.088329][ T9767] EXT4-fs (loop7): Test dummy encryption mode enabled [ 472.116488][ T9767] EXT4-fs (loop7): Test dummy encryption mode enabled [ 472.193194][ T9774] lo speed is unknown, defaulting to 1000 [ 472.212796][ T9767] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 472.253364][ T9767] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.470265][ T9786] loop6: detected capacity change from 0 to 2 [ 472.590227][ T9786] jffs2: rp_size unrepresentable [ 472.630261][ T9790] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 473.589772][ T5526] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 474.059666][ T5526] usb 8-1: config 1 has an invalid interface number: 6 but max is 2 [ 474.075821][ T5526] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.098456][ T5526] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 474.124693][ T5526] usb 8-1: config 1 has no interface number 1 [ 474.140687][ T5526] usb 8-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 474.177598][ T5526] usb 8-1: config 1 interface 6 has no altsetting 0 [ 474.377025][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 474.417780][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1244'. [ 474.469489][ T5526] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.479153][ T5526] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.497287][ T5526] usb 8-1: Product: syz [ 474.545937][ T5526] usb 8-1: Manufacturer: syz [ 474.561915][ T5526] usb 8-1: SerialNumber: syz [ 475.916824][ T9819] loop6: detected capacity change from 0 to 32768 [ 476.009351][ T9819] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 476.178156][ T9819] (syz.6.1247,9819,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 476.190747][ T9819] (syz.6.1247,9819,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop6 needs checking. [ 476.203846][ T9819] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 476.359450][ T5526] usb 8-1: 0:2 : does not exist [ 476.469866][ T9829] ALSA: mixer_oss: invalid OSS volume '' [ 476.526158][ T5526] usb 8-1: USB disconnect, device number 9 [ 477.424537][ T5821] ocfs2: Unmounting device (7,6) on (node local) [ 477.623142][ T9836] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1251'. [ 478.350208][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.421258][ T9838] loop7: detected capacity change from 0 to 128 [ 478.495035][ T9838] EXT4-fs (loop7): Test dummy encryption mode enabled [ 478.503732][ T9838] EXT4-fs (loop7): Test dummy encryption mode enabled [ 479.010348][ T9838] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 479.075538][ T9838] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.579722][ T9852] fscrypt (loop7): Error allocating 'cts(cbc(aes))' transform: -4 [ 479.867661][ T9861] lo speed is unknown, defaulting to 1000 [ 480.496441][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 480.533542][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 480.818681][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.864252][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.545457][ T9906] ALSA: mixer_oss: invalid OSS volume '' [ 483.248291][ T9910] loop2: detected capacity change from 0 to 32768 [ 483.259832][ T5622] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 483.473010][ T9910] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 483.485121][ T9910] (syz.2.1262,9910,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 483.497496][ T9910] (syz.2.1262,9910,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 483.797787][ T5622] usb 7-1: config 1 has an invalid interface number: 6 but max is 2 [ 483.810241][ T9910] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 484.049914][ T9913] loop5: detected capacity change from 0 to 2048 [ 484.058152][ T5622] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.058184][ T5622] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 484.058208][ T5622] usb 7-1: config 1 has no interface number 1 [ 484.058256][ T5622] usb 7-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 484.058285][ T5622] usb 7-1: config 1 interface 6 has no altsetting 0 [ 484.242042][ T5622] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.300720][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.318892][ T5622] usb 7-1: Product: syz [ 484.323650][ T5622] usb 7-1: Manufacturer: syz [ 484.329339][ T9913] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 484.340440][ T5622] usb 7-1: SerialNumber: syz [ 484.368073][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 485.053328][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 485.108359][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'. [ 485.277284][ T9941] loop5: detected capacity change from 0 to 128 [ 485.381158][ T9941] ufs: Invalid option: "0[p¶ÅI [ 485.381158][ T9941] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 485.392443][ T9941] ufs: wrong mount options [ 486.059513][ T5622] usb 7-1: 0:2 : does not exist [ 486.119513][ T5622] usb 7-1: USB disconnect, device number 11 [ 486.581368][ T9957] lo speed is unknown, defaulting to 1000 [ 487.565690][ T9962] ALSA: mixer_oss: invalid OSS volume '' [ 487.963842][ T9963] overlayfs: missing 'lowerdir' [ 488.521680][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.080783][ T9966] loop6: detected capacity change from 0 to 32768 [ 489.278884][ T9966] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 489.349404][ T9966] (syz.6.1276,9966,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 489.361369][ T9966] (syz.6.1276,9966,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop6 needs checking. [ 489.373964][ T9966] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 489.405275][ T9971] loop3: detected capacity change from 0 to 2048 [ 489.546072][ T9971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.634015][ T5821] ocfs2: Unmounting device (7,6) on (node local) [ 492.202467][ T4286] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 492.345032][T10004] loop3: detected capacity change from 0 to 128 [ 492.466483][T10004] EXT4-fs (loop3): Test dummy encryption mode enabled [ 492.486504][T10004] EXT4-fs (loop3): Test dummy encryption mode enabled [ 492.551532][T10004] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 492.569609][ T4286] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 492.587939][ T4286] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.619237][ T4286] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.628266][ T4286] usb 3-1: config 1 has no interface number 1 [ 492.729739][ T4286] usb 3-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 492.746830][ T4286] usb 3-1: config 1 interface 6 has no altsetting 0 [ 492.755982][T10004] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 492.789351][ T4286] usb 3-1: string descriptor 0 read error: -71 [ 492.795636][ T4286] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.839273][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.857706][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 492.880642][ T4286] usb 3-1: can't set config #1, error -71 [ 492.925567][ T4286] usb 3-1: USB disconnect, device number 12 [ 492.977966][T10018] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 492.996816][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'. [ 493.931339][T10031] overlayfs: missing 'lowerdir' [ 494.553411][T10037] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1282'. [ 494.988867][T10048] loop3: detected capacity change from 0 to 2 [ 495.092267][T10048] jffs2: rp_size unrepresentable [ 496.040158][T10056] loop3: detected capacity change from 0 to 32768 [ 496.089516][T10056] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 496.133705][T10056] (syz.3.1293,10056,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 496.145745][T10056] (syz.3.1293,10056,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop3 needs checking. [ 496.158458][T10056] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 496.385326][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 497.009574][ T5529] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 497.429496][ T5529] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 497.437540][ T5529] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.498884][ T5529] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 497.529514][ T5529] usb 3-1: config 1 has no interface number 1 [ 497.536539][ T5529] usb 3-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 497.573171][ T5529] usb 3-1: config 1 interface 6 has no altsetting 0 [ 497.769537][ T5529] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.788915][ T5529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.819510][ T5529] usb 3-1: Product: syz [ 497.829656][ T5529] usb 3-1: Manufacturer: syz [ 497.834305][ T5529] usb 3-1: SerialNumber: syz [ 498.089884][T10089] loop5: detected capacity change from 0 to 128 [ 498.186395][T10089] ufs: Invalid option: "0[p¶ÅI [ 498.186395][T10089] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 498.197253][T10089] ufs: wrong mount options [ 498.930232][T10091] loop5: detected capacity change from 0 to 128 [ 498.994334][T10091] EXT4-fs (loop5): Test dummy encryption mode enabled [ 499.039368][T10091] EXT4-fs (loop5): Test dummy encryption mode enabled [ 499.076709][T10091] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 499.109588][T10091] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 499.320303][T10096] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 499.619772][ T5529] usb 3-1: 0:2 : does not exist [ 499.668775][T10104] overlayfs: missing 'lowerdir' [ 500.466064][T10107] netlink: 'syz.6.1302': attribute type 1 has an invalid length. [ 501.315683][ T5529] usb 3-1: USB disconnect, device number 13 [ 501.402152][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1302'. [ 501.490695][T10114] lo speed is unknown, defaulting to 1000 [ 501.551628][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.709280][T10133] ALSA: mixer_oss: invalid OSS volume '' [ 503.810603][T10132] loop7: detected capacity change from 0 to 2 [ 504.519915][T10132] jffs2: rp_size unrepresentable [ 504.526134][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.935371][T10138] loop2: detected capacity change from 0 to 32768 [ 505.147580][T10146] loop6: detected capacity change from 0 to 128 [ 505.516584][T10146] ufs: Invalid option: "0[p¶ÅI [ 505.516584][T10146] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 505.527285][T10146] ufs: wrong mount options [ 505.577413][T10138] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 505.654003][T10138] (syz.2.1307,10138,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 505.666336][T10138] (syz.2.1307,10138,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 505.708108][T10138] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 506.229767][T10153] lo speed is unknown, defaulting to 1000 [ 506.304369][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 507.439386][ T4286] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 507.861832][ T4286] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 507.941642][ T4286] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.141763][ T4286] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 508.151670][ T4286] usb 3-1: config 1 has no interface number 1 [ 508.157830][ T4286] usb 3-1: config 1 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 508.179673][ T4286] usb 3-1: config 1 interface 6 has no altsetting 0 [ 508.311845][T10182] overlayfs: missing 'lowerdir' [ 508.500277][ T4286] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.559264][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.628343][ T4286] usb 3-1: Product: syz [ 508.654035][ T4286] usb 3-1: Manufacturer: syz [ 508.705873][ T4286] usb 3-1: SerialNumber: syz [ 508.897799][T10191] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 509.086829][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 509.125003][T10191] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.214423][T10196] ALSA: mixer_oss: invalid OSS volume '' [ 510.424740][T10200] lo speed is unknown, defaulting to 1000 [ 511.027952][T10202] loop6: detected capacity change from 0 to 128 [ 511.035751][ T4286] usb 3-1: 0:2 : does not exist [ 511.103254][ T4286] usb 3-1: USB disconnect, device number 14 [ 511.145416][T10202] EXT4-fs (loop6): Test dummy encryption mode enabled [ 511.159434][T10202] EXT4-fs (loop6): Test dummy encryption mode enabled [ 511.340013][T10202] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 511.379531][T10202] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 511.391479][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.588700][T10210] loop2: detected capacity change from 0 to 2 [ 511.737163][T10210] jffs2: rp_size unrepresentable [ 512.477499][T10216] lo speed is unknown, defaulting to 1000 [ 512.699585][T10218] loop2: detected capacity change from 0 to 32768 [ 512.846557][T10218] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 512.980666][T10218] (syz.2.1322,10218,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 512.992737][T10218] (syz.2.1322,10218,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 513.005738][T10218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 513.321164][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 514.129051][T10246] netlink: 'syz.7.1328': attribute type 1 has an invalid length. [ 514.294186][T10252] overlayfs: missing 'lowerdir' [ 514.535866][T10246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.794374][T10256] loop3: detected capacity change from 0 to 128 [ 515.420919][T10256] ufs: Invalid option: "0[p¶ÅI [ 515.420919][T10256] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 515.434218][T10256] ufs: wrong mount options [ 515.782946][T10270] loop6: detected capacity change from 0 to 512 [ 516.476370][T10287] lo speed is unknown, defaulting to 1000 [ 516.992362][T10270] EXT4-fs (loop6): 1 orphan inode deleted [ 517.019668][T10270] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 517.049462][T10270] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.274266][T10290] loop3: detected capacity change from 0 to 32768 [ 517.389027][T10290] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 517.449262][T10290] (syz.3.1337,10290,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 517.461266][T10290] (syz.3.1337,10290,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop3 needs checking. [ 517.490367][T10290] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 517.797993][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1338'. [ 517.834880][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 518.066916][T10307] loop6: detected capacity change from 0 to 128 [ 518.218930][T10307] EXT4-fs (loop6): Test dummy encryption mode enabled [ 518.252037][T10307] EXT4-fs (loop6): Test dummy encryption mode enabled [ 518.302756][T10307] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 518.632588][T10312] overlayfs: missing 'lowerdir' [ 519.203110][T10307] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 519.273998][T10317] netlink: 'syz.7.1342': attribute type 1 has an invalid length. [ 519.520478][T10320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.698909][T10330] loop5: detected capacity change from 0 to 128 [ 519.816060][T10330] ufs: Invalid option: "0[p¶ÅI [ 519.816060][T10330] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 519.826720][T10330] ufs: wrong mount options [ 521.022334][T10347] loop3: detected capacity change from 0 to 32768 [ 521.110020][T10347] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 521.128636][T10347] (syz.3.1349,10347,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 521.142464][T10347] (syz.3.1349,10347,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop3 needs checking. [ 521.155331][T10347] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 521.321872][T10360] loop2: detected capacity change from 0 to 512 [ 521.480438][T10360] EXT4-fs (loop2): 1 orphan inode deleted [ 521.486227][T10360] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 521.507670][T10360] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.792137][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 522.048090][T10375] lo speed is unknown, defaulting to 1000 [ 523.052901][T10383] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 523.132602][T10387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.798234][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 523.813790][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1358'. [ 524.691220][T10414] loop2: detected capacity change from 0 to 32768 [ 524.698908][T10416] loop7: detected capacity change from 0 to 128 [ 525.365817][T10422] loop6: detected capacity change from 0 to 2 [ 525.395845][T10414] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 525.407801][T10414] (syz.2.1363,10414,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 525.419794][T10414] (syz.2.1363,10414,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 525.432726][T10414] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 525.569856][T10422] jffs2: rp_size unrepresentable [ 525.581765][T10416] EXT4-fs (loop7): Test dummy encryption mode enabled [ 525.581823][T10416] EXT4-fs (loop7): Test dummy encryption mode enabled [ 525.622272][T10416] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 525.622398][T10416] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 525.967157][T10435] loop5: detected capacity change from 0 to 512 [ 526.008946][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 526.095123][T10435] EXT4-fs (loop5): 1 orphan inode deleted [ 526.101024][T10435] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 526.122114][T10435] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.388131][T10451] infiniband syz0: set active [ 526.437084][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1370'. [ 526.478594][ T5526] lo speed is unknown, defaulting to 1000 [ 526.509389][ T4286] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 526.532117][T10453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1370'. [ 528.286677][ T4286] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 528.324913][ T4286] usb 3-1: can't read configurations, error -61 [ 529.002352][T10483] lo speed is unknown, defaulting to 1000 [ 530.175724][ T4286] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 530.413511][T10500] loop7: detected capacity change from 0 to 128 [ 530.436265][T10497] loop2: detected capacity change from 0 to 512 [ 530.486116][T10500] EXT4-fs (loop7): Test dummy encryption mode enabled [ 530.497236][T10500] EXT4-fs (loop7): Test dummy encryption mode enabled [ 530.554338][T10497] EXT4-fs (loop2): 1 orphan inode deleted [ 530.560184][T10497] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 530.580965][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.587168][T10497] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.652165][T10500] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 530.696994][T10500] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 531.602472][T10533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1384'. [ 531.670713][T10533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1384'. [ 531.696866][T10534] loop3: detected capacity change from 0 to 2 [ 531.742693][T10535] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1384'. [ 531.782196][T10534] jffs2: rp_size unrepresentable [ 531.901725][T10538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1384'. [ 532.086952][T10549] netlink: 'syz.7.1388': attribute type 12 has an invalid length. [ 532.621797][T10560] loop2: detected capacity change from 0 to 512 [ 532.817386][T10560] EXT4-fs (loop2): 1 orphan inode deleted [ 532.823518][T10560] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 532.845144][T10560] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.280272][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 533.280290][ T26] audit: type=1326 audit(1742225563.764:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.336542][ T26] audit: type=1326 audit(1742225563.764:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.385078][ T26] audit: type=1326 audit(1742225563.814:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.476990][ T26] audit: type=1326 audit(1742225563.814:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.540068][T10577] loop2: detected capacity change from 0 to 128 [ 533.571066][ T26] audit: type=1326 audit(1742225563.814:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.648868][ T26] audit: type=1326 audit(1742225563.814:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.693879][T10577] EXT4-fs (loop2): Test dummy encryption mode enabled [ 533.705630][T10577] EXT4-fs (loop2): Test dummy encryption mode enabled [ 533.748171][T10577] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 533.758110][ T26] audit: type=1326 audit(1742225563.814:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 533.787201][T10577] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 533.897066][ T26] audit: type=1326 audit(1742225563.834:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10568 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af3a9c169 code=0x7ffc0000 [ 534.574017][T10606] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 534.583139][T10606] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 534.594948][T10606] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 534.919440][ T4171] Bluetooth: Wrong link type (-22) [ 535.206820][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1409'. [ 535.269304][ T4241] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 535.392996][T10625] netlink: 'syz.7.1410': attribute type 1 has an invalid length. [ 535.479429][T10628] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1410'. [ 535.495782][T10628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.519313][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 535.669512][ T4241] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 535.677761][ T4241] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.723579][ T4241] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 535.760800][ T4241] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 535.799598][ T4241] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.839388][ T4241] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 535.858704][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.179448][ T4241] usb 4-1: usb_control_msg returned -32 [ 536.185238][ T4241] usbtmc 4-1:16.0: can't read capabilities [ 536.216643][T10647] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1417'. [ 536.254442][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1417'. [ 536.498743][T10656] loop6: detected capacity change from 0 to 2 [ 536.579952][T10656] jffs2: rp_size unrepresentable [ 536.635414][T10660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 536.644334][T10660] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 536.656130][T10660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 537.573575][ T5529] usb 4-1: USB disconnect, device number 13 [ 537.879342][ T4286] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 538.016163][T10677] netlink: 'syz.7.1424': attribute type 1 has an invalid length. [ 538.192020][T10680] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1424'. [ 538.214397][T10682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.249620][ T4286] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.289383][ T4286] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.489427][ T4286] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.516983][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.564978][ T4286] usb 3-1: Product: syz [ 538.585549][ T4286] usb 3-1: Manufacturer: syz [ 538.608603][ T4286] usb 3-1: SerialNumber: syz [ 539.402222][T10710] loop3: detected capacity change from 0 to 128 [ 539.509421][T10712] overlayfs: missing 'lowerdir' [ 539.651049][T10710] EXT4-fs (loop3): Test dummy encryption mode enabled [ 539.840667][ T4286] cdc_mbim 3-1:1.0: bind() failure [ 539.858199][T10710] EXT4-fs (loop3): Test dummy encryption mode enabled [ 540.201896][ T4286] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 540.208729][ T4286] cdc_ncm 3-1:1.1: bind() failure [ 540.221003][T10710] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 540.249530][T10710] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 540.280584][ T4286] usb 3-1: USB disconnect, device number 17 [ 541.079548][ T5622] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 542.095673][T10752] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 542.530955][T10751] 9pnet: p9_fd_create_tcp (10751): problem connecting socket to 127.0.0.1 [ 543.341977][T10763] overlayfs: missing 'lowerdir' [ 543.380072][ T5622] usb 8-1: config index 0 descriptor too short (expected 1713, got 1478) [ 543.899846][ T5622] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 543.909595][ T5622] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.921221][ T5622] usb 8-1: config 0 has no interface number 0 [ 543.929547][ T5622] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=d3.f0 [ 543.938619][ T5622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.949734][ T5622] usb 8-1: config 0 descriptor?? [ 543.967759][T10773] loop2: detected capacity change from 0 to 7 [ 543.975050][ T5622] usb 8-1: can't set config #0, error -71 [ 544.015892][ T5622] usb 8-1: USB disconnect, device number 10 [ 544.061260][ T3547] Dev loop2: unable to read RDB block 7 [ 544.067498][ T3547] loop2: AHDI p2 p3 [ 544.089465][ T3547] loop2: partition table partially beyond EOD, truncated [ 544.098668][ T3547] loop2: p2 start 1702059890 is beyond EOD, truncated [ 544.114399][T10773] Dev loop2: unable to read RDB block 7 [ 544.137566][T10773] loop2: AHDI p2 p3 [ 544.171228][T10773] loop2: partition table partially beyond EOD, truncated [ 544.216018][T10773] loop2: p2 start 1702059890 is beyond EOD, truncated [ 544.229276][ T5529] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 544.291693][ T3547] Dev loop2: unable to read RDB block 7 [ 544.297301][ T3547] loop2: AHDI p2 p3 [ 544.307822][ T3547] loop2: partition table partially beyond EOD, truncated [ 544.357423][ T3547] loop2: p2 start 1702059890 is beyond EOD, truncated [ 544.524027][T10783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 544.605235][ T5529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.659510][ T5529] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 544.689056][ T5529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.709352][ T5529] usb 4-1: config 0 descriptor?? [ 544.756459][ T5529] pwc: Askey VC010 type 2 USB webcam detected. [ 544.979361][ T5622] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 545.079303][ T4286] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 545.136287][T10790] loop2: detected capacity change from 0 to 2 [ 545.137973][T10792] loop5: detected capacity change from 0 to 128 [ 545.179337][ T5529] pwc: recv_control_msg error -32 req 02 val 2b00 [ 545.219420][T10792] EXT4-fs (loop5): Test dummy encryption mode enabled [ 545.221902][ T5529] pwc: recv_control_msg error -32 req 02 val 2700 [ 545.226495][T10792] EXT4-fs (loop5): Test dummy encryption mode enabled [ 545.233174][ T5622] usb 8-1: Using ep0 maxpacket: 16 [ 545.261164][T10790] jffs2: rp_size unrepresentable [ 545.294002][T10792] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 545.309641][ T5529] pwc: recv_control_msg error -32 req 02 val 2c00 [ 545.335058][T10792] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 545.349564][ T5529] pwc: recv_control_msg error -32 req 04 val 1000 [ 545.389490][ T5622] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 545.397663][ T5529] pwc: recv_control_msg error -32 req 04 val 1300 [ 545.406815][ T5622] usb 8-1: config 0 has no interface number 0 [ 545.439283][ T5529] pwc: recv_control_msg error -32 req 04 val 1400 [ 545.449354][ T4286] usb 7-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 545.458820][ T4286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.480921][ T4286] usb 7-1: config 0 descriptor?? [ 545.489762][ T5529] pwc: recv_control_msg error -32 req 02 val 2000 [ 545.521437][ T4286] gspca_main: spca505-2.14.0 probing 0733:0430 [ 545.529570][ T5529] pwc: recv_control_msg error -32 req 02 val 2100 [ 545.569479][ T5622] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 545.578562][ T5622] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.586727][ T5529] pwc: recv_control_msg error -32 req 04 val 1500 [ 545.609271][ T5622] usb 8-1: Product: syz [ 545.613480][ T5622] usb 8-1: Manufacturer: syz [ 545.618088][ T5622] usb 8-1: SerialNumber: syz [ 545.639290][ T5529] pwc: recv_control_msg error -32 req 02 val 2500 [ 545.648394][ T5622] usb 8-1: config 0 descriptor?? [ 545.679275][ T5529] pwc: recv_control_msg error -32 req 02 val 2400 [ 545.691535][ T5622] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 545.719288][ T5529] pwc: recv_control_msg error -32 req 02 val 2600 [ 545.759423][ T5529] pwc: recv_control_msg error -32 req 02 val 2900 [ 545.941052][T10788] udc-core: couldn't find an available UDC or it's busy [ 545.948036][T10788] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 545.987383][T10788] udc-core: couldn't find an available UDC or it's busy [ 546.004332][T10788] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 546.023220][ T5529] pwc: recv_control_msg error -71 req 04 val 1100 [ 546.059366][ T5529] pwc: recv_control_msg error -71 req 04 val 1200 [ 546.073124][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 546.077200][ T5529] pwc: Registered as video103. [ 546.118865][ T5529] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 546.179325][ T4286] gspca_spca505: reg write: error -71 [ 546.184879][ T4286] spca505: probe of 7-1:0.0 failed with error -5 [ 546.192890][ T5529] usb 4-1: USB disconnect, device number 14 [ 546.218032][ T4286] usb 7-1: USB disconnect, device number 12 [ 546.349289][ T5622] gspca_spca1528: reg_w err -71 [ 546.379701][ T5622] spca1528: probe of 8-1:0.1 failed with error -71 [ 546.403318][ T5622] usb 8-1: USB disconnect, device number 11 [ 546.914779][T10815] overlayfs: missing 'lowerdir' [ 547.283172][T10819] loop3: detected capacity change from 0 to 2048 [ 547.547692][T10819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.676209][T10844] lo speed is unknown, defaulting to 1000 [ 550.559476][T10854] dccp_close: ABORT with 88 bytes unread [ 550.799232][ T5529] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 550.819197][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 550.969257][ T5529] usb 4-1: device descriptor read/64, error -32 [ 551.239295][ T5529] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 551.769373][ T5529] usb 4-1: config 0 has no interfaces? [ 552.616199][T10875] overlayfs: missing 'workdir' [ 553.055458][ T5529] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 553.065787][ T5529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.079605][ T5529] usb 4-1: Product: syz [ 553.084388][ T5529] usb 4-1: Manufacturer: syz [ 553.089029][ T5529] usb 4-1: SerialNumber: syz [ 553.095966][ T5529] usb 4-1: config 0 descriptor?? [ 553.136491][T10878] loop2: detected capacity change from 0 to 128 [ 553.206977][T10880] loop7: detected capacity change from 0 to 2048 [ 553.342857][T10885] loop5: detected capacity change from 0 to 128 [ 553.417560][T10885] ufs: Invalid option: "0[p¶ÅI [ 553.417560][T10885] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 553.428595][T10885] ufs: wrong mount options [ 553.532577][T10878] EXT4-fs (loop2): Test dummy encryption mode enabled [ 554.051021][ T4211] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 554.081266][T10880] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 554.096505][T10878] EXT4-fs (loop2): Test dummy encryption mode enabled [ 554.166349][T10878] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 554.370756][ T4211] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 554.378911][T10878] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 554.959434][ T4211] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 554.979100][ T4211] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 555.009390][ T4211] usb 7-1: config 0 interface 0 has no altsetting 0 [ 555.719372][ T4211] usb 7-1: unable to read config index 1 descriptor/start: -71 [ 555.726998][ T4211] usb 7-1: can't read configurations, error -71 [ 556.368156][ T6494] usb 4-1: USB disconnect, device number 16 [ 557.027555][T10915] lo speed is unknown, defaulting to 1000 [ 557.782732][T10926] overlayfs: missing 'workdir' [ 558.814379][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1493'. [ 558.955332][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1493'. [ 559.868197][T10940] loop7: detected capacity change from 0 to 2048 [ 560.008194][T10944] loop3: detected capacity change from 0 to 128 [ 560.146177][T10940] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 560.459526][T10944] EXT4-fs (loop3): Test dummy encryption mode enabled [ 560.466391][T10944] EXT4-fs (loop3): Test dummy encryption mode enabled [ 561.008639][T10944] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 561.317597][T10944] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.106620][T10963] ipt_CLUSTERIP: Please specify destination IP [ 562.146711][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 562.280899][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1501'. [ 562.560067][T10970] overlayfs: missing 'workdir' [ 562.809770][T10973] zonefs (nullb0) ERROR: Not a zoned block device [ 562.874253][T10974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'. [ 563.019801][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.588497][T11010] loop2: detected capacity change from 0 to 2048 [ 565.618319][T11011] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 565.723353][T11011] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1513'. [ 565.746956][T11010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 565.804590][T11021] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.896459][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1516'. [ 567.030270][T11033] loop6: detected capacity change from 0 to 128 [ 567.275023][T11033] EXT4-fs (loop6): Test dummy encryption mode enabled [ 567.290483][T11033] EXT4-fs (loop6): Test dummy encryption mode enabled [ 567.353486][T11033] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 567.419543][T11033] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.558312][T11045] tmpfs: Bad value for 'mpol' [ 568.699783][T11057] kvm [11054]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 568.747781][T11057] kvm [11054]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 568.806825][T11057] kvm [11054]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 570.044968][T11080] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 570.686296][T11085] loop5: detected capacity change from 0 to 2048 [ 570.711598][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1530'. [ 570.790236][T11087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1529'. [ 570.872094][T11085] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 570.923495][T11080] 8021q: adding VLAN 0 to HW filter on device bond8 [ 571.737904][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1532'. [ 571.902800][T11105] loop2: detected capacity change from 0 to 128 [ 571.919749][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1532'. [ 572.019033][T11105] EXT4-fs (loop2): Test dummy encryption mode enabled [ 572.029225][T11105] EXT4-fs (loop2): Test dummy encryption mode enabled [ 572.104676][T11105] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 572.212104][T11105] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 572.191821][T11114] infiniband syz0: set active [ 572.357312][ T4241] lo speed is unknown, defaulting to 1000 [ 574.279431][ T5529] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 574.559737][ T5529] usb 6-1: Using ep0 maxpacket: 16 [ 574.850512][ T5529] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 574.924824][ T5529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.071712][ T5529] usb 6-1: Product: syz [ 575.141681][ T5529] usb 6-1: Manufacturer: syz [ 575.213258][ T5529] usb 6-1: SerialNumber: syz [ 575.408830][ T5529] r8152-cfgselector 6-1: config 0 descriptor?? [ 575.951241][ T5529] r8152-cfgselector 6-1: Unknown version 0x0000 [ 576.010572][T11140] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 576.150422][T11128] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 576.957638][T11144] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1545'. [ 577.291722][T11145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.789298][ T5529] r8152-cfgselector 6-1: Unknown version 0x0000 [ 577.799407][ T5529] r8152-cfgselector 6-1: bad CDC descriptors [ 577.859758][ T5529] r8152-cfgselector 6-1: Unknown version 0x0000 [ 577.929918][ T5529] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 577.972639][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1550'. [ 578.035628][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1550'. [ 579.390288][T11177] loop3: detected capacity change from 0 to 128 [ 579.452253][T11177] EXT4-fs (loop3): Test dummy encryption mode enabled [ 579.482478][T11177] EXT4-fs (loop3): Test dummy encryption mode enabled [ 579.673663][T11177] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 579.847952][T11182] Invalid ELF header magic: != ELF [ 580.602881][T11182] xt_CT: No such helper "pptp" [ 580.769890][T11177] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.355194][T11195] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 582.340078][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1562'. [ 582.557884][T11211] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1562'. [ 582.574727][T11217] ubi31: attaching mtd0 [ 582.979210][T11217] ubi31: scanning is finished [ 583.947861][T11217] ubi31: empty MTD device detected [ 584.348747][T11217] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 584.513731][T11217] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 584.523063][T11217] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 584.526937][T11214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.540166][T11217] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 585.374421][T11217] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 585.388405][T11217] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 585.388426][T11217] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2111825903 [ 585.388442][T11217] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 585.390736][T11230] ubi31: background thread "ubi_bgt31d" started, PID 11230 [ 588.170080][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'. [ 588.417105][T11268] syz.2.1579 sent an empty control message without MSG_MORE. [ 588.608756][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1578'. [ 589.889541][T10348] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 590.129381][T11292] loop2: detected capacity change from 0 to 32768 [ 590.419062][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1566'. [ 590.466474][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1566'. [ 590.759475][T11292] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 590.779368][T11292] (syz.2.1586,11292,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 590.791450][T11292] (syz.2.1586,11292,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 590.805338][T11292] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 590.869305][T10348] usb 7-1: Using ep0 maxpacket: 16 [ 592.405851][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 592.469323][T10348] usb 7-1: unable to read config index 0 descriptor/all [ 592.476345][T10348] usb 7-1: can't read configurations, error -71 [ 592.500636][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'. [ 592.550291][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1594'. [ 592.959636][T11326] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1595'. [ 593.001809][T11324] loop7: detected capacity change from 0 to 128 [ 593.713716][T11324] EXT4-fs (loop7): Test dummy encryption mode enabled [ 593.867832][T11324] EXT4-fs (loop7): Test dummy encryption mode enabled [ 593.937557][T11324] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 593.962089][T11324] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 595.959737][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 596.217999][T11356] ksmbd: Unknown IPC event: 8, ignore. [ 597.487020][T11363] loop2: detected capacity change from 0 to 32768 [ 597.566223][T11363] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 597.581936][T11363] (syz.2.1604,11363,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 597.593979][T11363] (syz.2.1604,11363,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 597.610047][T11363] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 598.438437][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 598.663269][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 598.723121][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1606'. [ 600.176177][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1614'. [ 600.200982][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1614'. [ 600.284299][T11400] loop3: detected capacity change from 0 to 128 [ 600.325509][T11400] EXT4-fs (loop3): Test dummy encryption mode enabled [ 600.335934][T11400] EXT4-fs (loop3): Test dummy encryption mode enabled [ 600.365401][T11400] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 600.389047][T11400] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 600.985138][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1618'. [ 601.027965][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1618'. [ 601.297080][T11418] ubi: mtd0 is already attached to ubi31 [ 601.823898][T11416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.836555][ T26] audit: type=1326 audit(1742225632.324:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 602.043425][ T26] audit: type=1326 audit(1742225632.354:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 602.065691][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.085796][ T26] audit: type=1326 audit(1742225632.354:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 602.115602][ T26] audit: type=1326 audit(1742225632.354:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 602.230880][ T26] audit: type=1326 audit(1742225632.354:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 602.969095][ T26] audit: type=1326 audit(1742225632.354:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 603.141400][T11429] loop2: detected capacity change from 0 to 128 [ 603.866765][ T26] audit: type=1326 audit(1742225632.354:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 603.871688][T11429] ufs: Invalid option: "0[p¶ÅI [ 603.871688][T11429] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 603.903253][T11429] ufs: wrong mount options [ 604.112627][ T26] audit: type=1326 audit(1742225632.354:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 604.849453][T11435] tipc: Started in network mode [ 604.854381][T11435] tipc: Node identity ac14140f, cluster identity 4711 [ 604.861453][T11435] tipc: New replicast peer: 255.255.255.255 [ 604.868968][T11435] tipc: Enabled bearer , priority 10 [ 605.801347][ T26] audit: type=1326 audit(1742225632.354:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 605.859228][ T6494] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 605.902491][T11440] ipt_CLUSTERIP: Please specify destination IP [ 605.971710][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 605.981200][ T26] audit: type=1326 audit(1742225632.354:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.7.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b15c169 code=0x7ffc0000 [ 605.989457][ T5529] tipc: Node number set to 2886997007 [ 606.150038][ T6494] usb 8-1: device descriptor read/64, error -71 [ 606.166967][T11444] loop6: detected capacity change from 0 to 2 [ 606.307118][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1626'. [ 606.360336][T11444] jffs2: rp_size unrepresentable [ 606.829681][ T6494] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 607.210128][T11464] netlink: 'syz.2.1630': attribute type 4 has an invalid length. [ 607.218003][T11464] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1630'. [ 607.980787][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1631'. [ 608.011018][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1631'. [ 608.625715][T11479] loop2: detected capacity change from 0 to 128 [ 608.734945][T11479] EXT4-fs (loop2): Test dummy encryption mode enabled [ 608.809398][T11479] EXT4-fs (loop2): Test dummy encryption mode enabled [ 608.925083][T11486] loop7: detected capacity change from 0 to 128 [ 609.014685][ T4241] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 609.115968][T11479] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 609.701737][T11479] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 609.711646][T11486] ufs: Invalid option: "0[p¶ÅI [ 609.711646][T11486] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 609.722834][T11486] ufs: wrong mount options [ 609.840477][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 609.969905][ T4241] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.997963][ T4241] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.135030][ T4241] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.178532][ T4241] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.429775][T11497] lo speed is unknown, defaulting to 1000 [ 611.031858][ T4241] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.041310][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.280687][T11502] ipt_CLUSTERIP: Please specify destination IP [ 611.316875][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1641'. [ 611.365947][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1641'. [ 611.377346][ T4241] usb 4-1: GET_CAPABILITIES returned 0 [ 611.398382][T11503] loop5: detected capacity change from 0 to 2 [ 611.415340][ T4241] usbtmc 4-1:16.0: can't read capabilities [ 611.430083][T11503] jffs2: rp_size unrepresentable [ 611.669344][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 611.691765][ T4241] usb 4-1: USB disconnect, device number 17 [ 612.402138][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 612.415521][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1646'. [ 613.429280][T11534] loop2: detected capacity change from 0 to 128 [ 613.601058][T11534] EXT4-fs (loop2): Test dummy encryption mode enabled [ 613.893409][T11537] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.902253][T11537] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.910645][T11537] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.918934][T11537] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.932588][T11534] EXT4-fs (loop2): Test dummy encryption mode enabled [ 614.000048][ T5622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 614.033137][T11534] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 614.086977][T11541] ipt_CLUSTERIP: Please specify destination IP [ 614.141686][T11534] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 614.198593][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 614.286842][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 617.172415][ T1280] Bluetooth: hci3: Frame reassembly failed (-84) [ 618.332376][T11569] lo speed is unknown, defaulting to 1000 [ 619.089440][ T4176] Bluetooth: hci3: command 0x1003 tx timeout [ 619.099518][T11566] Bluetooth: hci3: sending frame failed (-49) [ 619.622325][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1661'. [ 620.752770][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1661'. [ 621.157021][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 621.179306][ T4241] Bluetooth: hci3: command 0x1001 tx timeout [ 621.191323][T11603] hub 9-0:1.0: USB hub found [ 621.196282][T11603] hub 9-0:1.0: 1 port detected [ 621.510719][T11602] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1666'. [ 622.094028][T11566] Bluetooth: hci3: sending frame failed (-49) [ 622.370807][T11605] loop6: detected capacity change from 0 to 32768 [ 622.422103][T11610] loop2: detected capacity change from 0 to 128 [ 622.448602][T11605] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 622.472472][T11605] (syz.6.1667,11605,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 622.484606][T11605] (syz.6.1667,11605,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop6 needs checking. [ 622.497352][T11605] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 622.553522][T11610] EXT4-fs (loop2): Test dummy encryption mode enabled [ 622.656151][T11610] EXT4-fs (loop2): Test dummy encryption mode enabled [ 622.743589][T11610] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 622.996066][T11610] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 624.129324][ T4241] Bluetooth: hci3: command 0x1009 tx timeout [ 624.283345][ T5821] ocfs2: Unmounting device (7,6) on (node local) [ 624.383538][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.690944][T11632] lo speed is unknown, defaulting to 1000 [ 625.214574][T11639] ipt_CLUSTERIP: Please specify destination IP [ 625.224127][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1675'. [ 625.242961][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1675'. [ 626.045651][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 626.075754][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1677'. [ 627.446276][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 627.649281][ T4211] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 628.649707][ T4211] usb 8-1: Using ep0 maxpacket: 32 [ 628.832152][T11675] loop6: detected capacity change from 0 to 128 [ 629.038408][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 629.050407][T11675] EXT4-fs (loop6): Test dummy encryption mode enabled [ 629.057628][T11675] EXT4-fs (loop6): Test dummy encryption mode enabled [ 629.065992][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 629.079475][ T4211] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 629.111847][ T4211] usb 8-1: config 0 has no interface number 0 [ 629.118230][ T4211] usb 8-1: config 0 interface 12 has no altsetting 0 [ 629.148862][T11675] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 629.174892][T11675] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 629.368490][ T4211] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 629.930089][ T4211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.938931][T11686] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 629.976201][ T4211] usb 8-1: Product: syz [ 630.001344][ T4211] usb 8-1: Manufacturer: syz [ 630.012892][ T4211] usb 8-1: SerialNumber: syz [ 630.031399][ T4211] usb 8-1: config 0 descriptor?? [ 632.666872][T11703] lo speed is unknown, defaulting to 1000 [ 632.945057][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1699'. [ 633.045259][ T4211] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 633.059395][ T4211] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 633.081898][ T4211] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 633.830762][ T4211] f81534: probe of 8-1:0.12 failed with error -71 [ 633.846164][ T4211] usb 8-1: USB disconnect, device number 14 [ 634.629412][T11741] loop7: detected capacity change from 0 to 128 [ 634.659262][ T5529] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 634.694028][T11741] EXT4-fs (loop7): Test dummy encryption mode enabled [ 634.733830][T11741] EXT4-fs (loop7): Test dummy encryption mode enabled [ 634.777223][T11741] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 634.803585][T11741] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 635.043873][ T5529] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 635.057623][ T5529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.100858][ T5529] usb 7-1: config 0 descriptor?? [ 635.151952][ T5529] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 636.039871][ T5529] gp8psk: usb in 138 operation failed. [ 636.056870][ T5529] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 636.430648][ T5529] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 636.442842][ T5529] usb 7-1: USB disconnect, device number 17 [ 636.731187][T11759] lo speed is unknown, defaulting to 1000 [ 637.259715][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 637.302791][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'. [ 640.029363][T10348] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 640.100528][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1724'. [ 640.237384][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1724'. [ 641.072517][T11806] loop7: detected capacity change from 0 to 128 [ 641.345716][T11811] loop5: detected capacity change from 0 to 2 [ 641.610940][T11813] lo speed is unknown, defaulting to 1000 [ 642.105404][T11811] jffs2: rp_size unrepresentable [ 642.111774][T10348] usb 3-1: device not accepting address 18, error -71 [ 642.126886][T11806] EXT4-fs (loop7): Test dummy encryption mode enabled [ 642.151050][T11806] EXT4-fs (loop7): Test dummy encryption mode enabled [ 642.233692][T11806] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 642.266906][T11806] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 644.022585][T11832] overlayfs: unrecognized mount option "verity=on" or missing value [ 644.662107][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1737'. [ 644.682598][T11843] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1737'. [ 645.198797][T11847] loop3: detected capacity change from 0 to 32768 [ 645.286915][T11837] netlink: 'syz.5.1735': attribute type 2 has an invalid length. [ 645.298822][T11837] netlink: 'syz.5.1735': attribute type 1 has an invalid length. [ 645.306625][T11837] netlink: 'syz.5.1735': attribute type 2 has an invalid length. [ 645.520654][T11847] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 646.601563][T11847] (syz.3.1739,11847,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 646.613898][T11847] (syz.3.1739,11847,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop3 needs checking. [ 646.627631][T11847] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 648.278234][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 648.675583][T11876] ALSA: mixer_oss: invalid OSS volume '' [ 649.700218][T11880] lo speed is unknown, defaulting to 1000 [ 654.369047][T11892] ipt_CLUSTERIP: Please specify destination IP [ 654.475612][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 654.533592][T11892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1746'. [ 654.895000][T11902] loop6: detected capacity change from 0 to 2 [ 655.629713][T11902] jffs2: rp_size unrepresentable [ 656.147615][T11906] loop2: detected capacity change from 0 to 32768 [ 656.503849][T11906] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 656.548797][T11906] (syz.2.1756,11906,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 656.560913][T11906] (syz.2.1756,11906,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 656.577347][T11906] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 657.569030][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1759'. [ 657.611061][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1759'. [ 658.846229][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 659.567589][T11943] ipt_CLUSTERIP: Please specify destination IP [ 659.595432][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1768'. [ 660.469391][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1768'. [ 660.496585][T11960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 660.714680][T11964] loop3: detected capacity change from 0 to 32768 [ 660.777230][T11964] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 660.798039][T11964] (syz.3.1772,11964,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 660.810192][T11964] (syz.3.1772,11964,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop3 needs checking. [ 660.832308][T11964] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 661.589260][T10348] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 662.938597][T10348] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.189507][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 663.207518][T10348] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.273564][T10348] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 663.329410][T10348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.462366][T10348] usb 8-1: config 0 descriptor?? [ 663.824193][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 664.808483][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.403237][T12003] loop6: detected capacity change from 0 to 2 [ 665.449631][T10348] usbhid 8-1:0.0: can't add hid device: -71 [ 665.458438][T10348] usbhid: probe of 8-1:0.0 failed with error -71 [ 665.494010][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1784'. [ 665.825906][T12001] ipt_CLUSTERIP: Please specify destination IP [ 665.829949][T10348] usb 8-1: USB disconnect, device number 15 [ 665.847556][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1784'. [ 665.851589][T12003] jffs2: rp_size unrepresentable [ 665.864459][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1783'. [ 665.975397][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1783'. [ 666.497012][T12013] loop6: detected capacity change from 0 to 32768 [ 667.407788][T12013] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 667.425783][T12013] (syz.6.1787,12013,0):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 667.438192][T12013] (syz.6.1787,12013,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop6 needs checking. [ 667.452694][T12013] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 669.505484][T12030] loop3: detected capacity change from 0 to 128 [ 670.239235][T12031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1789'. [ 670.248205][T12031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1789'. [ 670.257293][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1789'. [ 670.571253][T12030] ufs: Invalid option: "0[p¶ÅI [ 670.571253][T12030] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 670.581936][T12030] ufs: wrong mount options [ 671.253898][ T5821] ocfs2: Unmounting device (7,6) on (node local) [ 671.593258][T12044] device veth0_to_team entered promiscuous mode [ 672.330650][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1796'. [ 672.650035][T12058] ipt_CLUSTERIP: Please specify destination IP [ 672.704560][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1796'. [ 672.714000][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 672.791030][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'. [ 673.104212][ T4211] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 673.819821][ T4211] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.157414][ T4211] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.182754][ T4211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.225580][ T4211] usb 7-1: config 0 descriptor?? [ 674.304329][ T4211] pwc: Askey VC010 type 2 USB webcam detected. [ 674.321831][T12068] syz.3.1801 uses old SIOCAX25GETINFO [ 674.336332][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 674.705081][T12081] loop7: detected capacity change from 0 to 128 [ 674.868951][T12081] ufs: Invalid option: "0[p¶ÅI [ 674.868951][T12081] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 674.869016][T12081] ufs: wrong mount options [ 675.039459][ T4211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 675.089540][ T4211] pwc: recv_control_msg error -32 req 02 val 2700 [ 675.129590][ T4211] pwc: recv_control_msg error -32 req 02 val 2c00 [ 675.182713][ T4211] pwc: recv_control_msg error -32 req 04 val 1000 [ 675.219452][ T4211] pwc: recv_control_msg error -32 req 04 val 1300 [ 675.259870][ T4211] pwc: recv_control_msg error -32 req 04 val 1400 [ 675.309751][ T4211] pwc: recv_control_msg error -32 req 02 val 2000 [ 675.359650][ T4211] pwc: recv_control_msg error -32 req 02 val 2100 [ 675.399980][ T4211] pwc: recv_control_msg error -32 req 04 val 1500 [ 675.439505][ T4211] pwc: recv_control_msg error -32 req 02 val 2500 [ 675.479467][ T4211] pwc: recv_control_msg error -32 req 02 val 2400 [ 675.529402][ T4211] pwc: recv_control_msg error -32 req 02 val 2600 [ 675.975333][T12089] loop2: detected capacity change from 0 to 32768 [ 676.037241][T12089] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 676.065569][T12089] (syz.2.1805,12089,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 676.077589][T12089] (syz.2.1805,12089,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 676.101386][T12089] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 676.249254][ T4211] pwc: recv_control_msg error -71 req 02 val 2800 [ 676.397908][ T4211] pwc: recv_control_msg error -71 req 04 val 1100 [ 676.419267][ T4211] pwc: recv_control_msg error -71 req 04 val 1200 [ 676.459356][T10345] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 676.568625][ T4211] pwc: Registered as video103. [ 676.622094][ T4211] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 676.638350][T12102] ipt_CLUSTERIP: Please specify destination IP [ 676.645871][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1811'. [ 676.660608][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 676.700538][ T4211] usb 7-1: USB disconnect, device number 18 [ 676.751321][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 676.760645][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1811'. [ 676.784093][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 677.049523][T10345] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 677.058702][T10345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.087295][T10345] usb 8-1: Product: syz [ 677.123654][T10345] usb 8-1: Manufacturer: syz [ 677.143162][T10345] usb 8-1: SerialNumber: syz [ 677.168810][T12117] xt_CT: No such helper "pptp" [ 677.204719][T10345] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 677.361169][T12125] loop6: detected capacity change from 0 to 128 [ 677.506163][T12125] ufs: Invalid option: "0[p¶ÅI [ 677.506163][T12125] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 677.516808][T12125] ufs: wrong mount options [ 678.038209][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1818'. [ 678.392687][T12136] loop5: detected capacity change from 0 to 32768 [ 678.470520][T12140] ipt_CLUSTERIP: Please specify destination IP [ 678.488307][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'. [ 678.577794][T12136] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 678.620678][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1823'. [ 678.639401][T10345] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 678.650678][T12136] (syz.5.1822,12136,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 678.662901][T12136] (syz.5.1822,12136,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 678.681936][T12136] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 679.549538][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1825'. [ 679.590310][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1825'. [ 679.621272][T12153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1827'. [ 679.641292][ T4574] ocfs2: Unmounting device (7,5) on (node local) [ 679.661872][T11881] usb 8-1: USB disconnect, device number 16 [ 679.959224][T10345] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 679.967882][T10345] ath9k_htc: Failed to initialize the device [ 679.978622][T11881] usb 8-1: ath9k_htc: USB layer deinitialized [ 680.115414][T12168] ALSA: mixer_oss: invalid OSS volume '' [ 680.131661][T12168] loop7: detected capacity change from 0 to 2 [ 680.782420][ T4176] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 680.901844][T12168] jffs2: rp_size unrepresentable [ 681.379599][ T4176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.494149][ T4176] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 681.503888][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.516234][ T4176] usb 3-1: config 0 descriptor?? [ 681.670854][ T4176] pwc: Askey VC010 type 2 USB webcam detected. [ 681.754039][T12183] loop6: detected capacity change from 0 to 524287999 [ 681.759786][ C0] blk_update_request: I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 681.774905][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 681.775264][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 682.223140][ T4176] pwc: recv_control_msg error -32 req 02 val 2b00 [ 682.460138][ T4176] pwc: recv_control_msg error -32 req 02 val 2700 [ 682.523429][ T4176] pwc: recv_control_msg error -32 req 02 val 2c00 [ 682.564052][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 682.569823][ T4176] pwc: recv_control_msg error -32 req 04 val 1000 [ 682.684465][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 682.696363][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 683.472603][T12194] loop7: detected capacity change from 0 to 32768 [ 683.538665][T12196] ipt_CLUSTERIP: Please specify destination IP [ 683.539531][ T4176] pwc: recv_control_msg error -32 req 04 val 1300 [ 683.549169][T12194] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 683.572142][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 683.599512][T12194] (syz.7.1838,12194,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 683.611766][T12194] (syz.7.1838,12194,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop7 needs checking. [ 683.631732][T12194] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 683.749602][ T4176] pwc: recv_control_msg error -71 req 04 val 1400 [ 683.769496][ T4176] pwc: recv_control_msg error -71 req 02 val 2000 [ 683.789479][ T4176] pwc: recv_control_msg error -71 req 02 val 2100 [ 683.824246][ T4176] pwc: recv_control_msg error -71 req 04 val 1500 [ 683.919786][ T4176] pwc: recv_control_msg error -71 req 02 val 2500 [ 684.042363][ T4176] pwc: recv_control_msg error -71 req 02 val 2400 [ 684.152260][ T4176] pwc: recv_control_msg error -71 req 02 val 2600 [ 684.192546][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1839'. [ 684.193273][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1841'. [ 684.222672][ T4176] pwc: recv_control_msg error -71 req 02 val 2900 [ 684.269637][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1841'. [ 684.285506][ T4176] pwc: recv_control_msg error -71 req 02 val 2800 [ 684.548793][ T4176] pwc: recv_control_msg error -71 req 04 val 1100 [ 684.567152][ T6725] ocfs2: Unmounting device (7,7) on (node local) [ 684.579427][ T4176] pwc: recv_control_msg error -71 req 04 val 1200 [ 685.213601][T12224] ALSA: mixer_oss: invalid OSS volume '' [ 685.411836][ T4176] pwc: Registered as video103. [ 685.418010][ T4176] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 685.468090][ T4176] usb 3-1: USB disconnect, device number 20 [ 685.564735][T12223] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1844'. [ 685.852965][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.506586][ T4176] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 688.528207][T12249] loop5: detected capacity change from 0 to 32768 [ 688.545201][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 688.619847][T12249] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 688.635090][T12251] device bridge0 entered promiscuous mode [ 688.642320][T12249] (syz.5.1854,12249,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 688.654388][T12249] (syz.5.1854,12249,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 688.667558][T12249] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 688.700650][T12251] device macvlan2 entered promiscuous mode [ 688.869960][ T4176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.977303][ T4176] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 688.993002][T12251] bridge0: port 3(macvlan2) entered blocking state [ 689.075920][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1855'. [ 689.086232][T12251] bridge0: port 3(macvlan2) entered disabled state [ 689.125013][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.163233][T12251] device bridge0 left promiscuous mode [ 689.178013][ T4176] usb 3-1: config 0 descriptor?? [ 689.213207][ T4574] ocfs2: Unmounting device (7,5) on (node local) [ 689.451835][T12267] loop6: detected capacity change from 0 to 128 [ 689.708428][ T4176] pwc: Askey VC010 type 2 USB webcam detected. [ 689.889388][ T4176] pwc: send_video_command error -71 [ 689.894639][ T4176] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 689.924337][ T4176] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 689.952733][ T4176] usb 3-1: USB disconnect, device number 21 [ 690.000625][T12267] ufs: Invalid option: "0[p¶ÅI [ 690.000625][T12267] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 690.011317][T12267] ufs: wrong mount options [ 690.387939][T12279] ALSA: mixer_oss: invalid OSS volume '' [ 690.402919][T12279] loop2: detected capacity change from 0 to 2 [ 690.525986][T12279] jffs2: rp_size unrepresentable [ 691.950115][T12288] ipt_CLUSTERIP: Please specify destination IP [ 692.008272][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'. [ 692.110786][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1857'. [ 692.216801][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 692.497467][T12297] loop2: detected capacity change from 0 to 32768 [ 693.128050][T12297] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 693.171155][T12297] (syz.2.1868,12297,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 693.183644][T12297] (syz.2.1868,12297,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 693.196629][T12297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 693.553935][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'. [ 693.589428][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 693.930713][T12314] loop5: detected capacity change from 0 to 128 [ 694.252367][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 694.330909][T12314] ufs: Invalid option: "0[p¶ÅI [ 694.330909][T12314] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 694.341511][T12314] ufs: wrong mount options [ 694.596570][ T4241] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 695.779596][ T4241] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.825501][ T4241] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 695.868149][ T4241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.914322][ T4241] usb 8-1: config 0 descriptor?? [ 695.961698][ T4241] pwc: Askey VC010 type 2 USB webcam detected. [ 696.973840][T12341] ipt_CLUSTERIP: Please specify destination IP [ 697.041269][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 697.059244][ T4241] pwc: recv_control_msg error -32 req 02 val 2b00 [ 697.109325][ T4241] pwc: recv_control_msg error -32 req 02 val 2700 [ 697.116546][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1879'. [ 697.149354][ T4241] pwc: recv_control_msg error -32 req 02 val 2c00 [ 697.209277][ T4241] pwc: recv_control_msg error -32 req 04 val 1000 [ 697.249426][ T4241] pwc: recv_control_msg error -32 req 04 val 1300 [ 697.289402][ T4241] pwc: recv_control_msg error -32 req 04 val 1400 [ 697.339259][ T4241] pwc: recv_control_msg error -32 req 02 val 2000 [ 698.182708][T12349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'. [ 698.247955][ T4241] pwc: recv_control_msg error -32 req 02 val 2100 [ 698.289411][ T4241] pwc: recv_control_msg error -32 req 04 val 1500 [ 698.339315][ T4241] pwc: recv_control_msg error -32 req 02 val 2500 [ 698.439342][ T4241] pwc: recv_control_msg error -71 req 02 val 2400 [ 698.474219][ T4241] pwc: recv_control_msg error -71 req 02 val 2600 [ 698.545960][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 699.043365][ T4241] pwc: recv_control_msg error -71 req 02 val 2900 [ 700.216394][ T4241] pwc: recv_control_msg error -71 req 02 val 2800 [ 700.239253][ T4241] pwc: recv_control_msg error -71 req 04 val 1100 [ 700.259246][ T4241] pwc: recv_control_msg error -71 req 04 val 1200 [ 700.269444][ T4241] pwc: Registered as video103. [ 700.285824][ T4241] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15 [ 700.517931][ T4241] usb 8-1: USB disconnect, device number 17 [ 701.579338][T12371] loop3: detected capacity change from 0 to 128 [ 701.772960][T12371] ufs: Invalid option: "0[p¶ÅI [ 701.772960][T12371] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 701.783671][T12371] ufs: wrong mount options [ 702.284180][T12376] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 702.303942][T12378] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1889'. [ 704.080459][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1893'. [ 704.278520][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1897'. [ 704.295682][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1897'. [ 707.256884][T12419] XFS (nullb0): Invalid superblock magic number [ 707.661448][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1907'. [ 709.889640][T11881] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 710.269255][T11881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.289475][T11881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.300526][T11881] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 710.312120][T11881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.350743][T11881] usb 7-1: config 0 descriptor?? [ 711.710010][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1921'. [ 711.905802][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1921'. [ 711.951530][T11881] usbhid 7-1:0.0: can't add hid device: -71 [ 711.958233][T11881] usbhid: probe of 7-1:0.0 failed with error -71 [ 712.022401][T11881] usb 7-1: USB disconnect, device number 19 [ 715.614496][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 717.858521][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1934'. [ 719.755212][T12519] ipt_CLUSTERIP: Please specify destination IP [ 720.786242][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1935'. [ 720.917460][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1935'. [ 721.063325][T12533] syz.2.1940 (12533) used obsolete PPPIOCDETACH ioctl [ 721.756765][T12544] tmpfs: Bad value for 'mpol' [ 725.106731][T12574] loop7: detected capacity change from 0 to 128 [ 725.942434][T12574] ufs: Invalid option: "0[p¶ÅI [ 725.942434][T12574] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 725.953229][T12574] ufs: wrong mount options [ 727.061701][T12585] ipt_CLUSTERIP: Please specify destination IP [ 727.086345][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1954'. [ 727.130770][T12585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1954'. [ 727.393162][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1956'. [ 729.208716][T12614] affs: No valid root block on device nullb0 [ 730.938676][T12631] loop2: detected capacity change from 0 to 128 [ 732.260894][T12631] ufs: Invalid option: "0[p¶ÅI [ 732.260894][T12631] q 4BOÀL¢‡s‰4æçŠì!±Àþ`" or missing value [ 732.271666][T12631] ufs: wrong mount options [ 732.503777][T12645] program syz.2.1968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.515728][T12641] ipt_CLUSTERIP: Please specify destination IP [ 732.561279][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 732.602284][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1970'. [ 732.623673][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1969'. [ 733.399571][T12658] tmpfs: Bad value for 'mpol' [ 733.507873][T12652] 9pnet: p9_fd_create_unix (12652): problem connecting socket: ./cgroup: -111 [ 739.367451][T12689] ipt_CLUSTERIP: Please specify destination IP [ 739.810571][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1983'. [ 739.834574][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1983'. [ 740.705511][T12706] infiniband syz1: set down [ 740.710106][T12706] infiniband syz1: added team_slave_0 [ 740.720177][T12706] infiniband syz1: Couldn't open port 1 [ 740.740877][ T4211] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 740.749932][T12706] RDS/IB: syz1: added [ 740.754000][T12706] smc: adding ib device syz1 with port count 1 [ 740.760312][T12706] smc: ib device syz1 port 1 has pnetid [ 741.493695][ T4211] usb 3-1: Using ep0 maxpacket: 32 [ 743.089287][ T4211] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 743.097057][ T4211] usb 3-1: can't read configurations, error -71 [ 744.669660][T10345] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 744.739141][ T4211] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 745.216843][T12739] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1996'. [ 745.879334][ T4211] usb 3-1: Using ep0 maxpacket: 16 [ 746.000729][T10345] usb 7-1: config 0 has no interfaces? [ 746.006515][ T4211] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 746.857262][T10345] usb 7-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 746.909222][T10345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.918835][T10345] usb 7-1: Product: syz [ 746.935751][T10345] usb 7-1: config 0 descriptor?? [ 746.941094][ T4211] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 746.999303][T10345] usb 7-1: can't set config #0, error -71 [ 747.013977][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.058485][T10345] usb 7-1: USB disconnect, device number 20 [ 747.252893][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.426325][ T4211] usb 3-1: Product: syz [ 748.439127][ T4211] usb 3-1: Manufacturer: syz [ 748.465915][ T4211] usb 3-1: config 0 descriptor?? [ 748.550686][ T4211] usb 3-1: can't set config #0, error -71 [ 750.262249][ T4211] usb 3-1: USB disconnect, device number 23 [ 751.113799][T12785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2008'. [ 751.179607][ T4176] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 751.331792][T12788] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[12788] [ 751.989177][ T4176] usb 6-1: device not accepting address 11, error -71 [ 753.345223][T10900] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.904498][T10900] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 755.214832][ T4241] Bluetooth: hci3: command 0x0409 tx timeout [ 755.663004][T12823] netlink: 'syz.6.2016': attribute type 1 has an invalid length. [ 756.281395][T12792] lo speed is unknown, defaulting to 1000 [ 756.729516][T10900] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.743457][T10900] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 757.023211][T10900] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.087943][T10900] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 757.194856][T10900] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.242745][T10900] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 757.253218][ T4176] Bluetooth: hci3: command 0x041b tx timeout [ 759.455583][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 760.328813][T12792] chnl_net:caif_netlink_parms(): no params data found [ 760.429267][ T4286] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 760.440231][T10900] tipc: Disabling bearer [ 760.446909][T10900] tipc: Left network mode [ 760.769240][ T4286] usb 7-1: device descriptor read/64, error -71 [ 761.169591][ T4286] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 761.489612][ T4176] Bluetooth: hci3: command 0x0419 tx timeout [ 762.287897][T12792] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.305499][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.313356][ T4286] usb 7-1: device descriptor read/64, error -71 [ 762.889979][ T4286] usb usb7-port1: attempt power cycle [ 763.255811][T12792] device bridge_slave_0 entered promiscuous mode [ 763.308855][T12792] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.319574][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.659568][ T4286] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 763.787480][T12792] device bridge_slave_1 entered promiscuous mode [ 763.929350][ T4286] usb 7-1: device descriptor read/8, error -71 [ 765.163730][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.205959][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.695988][T12915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2036'. [ 766.239328][T12792] team0: Port device team_slave_0 added [ 766.274493][T12792] team0: Port device team_slave_1 added [ 766.309775][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2037'. [ 766.321938][T12913] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 56539 - 0 [ 766.330888][T12913] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 56539 - 0 [ 766.339685][T12913] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 56539 - 0 [ 766.348469][T12913] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 56539 - 0 [ 766.477762][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.504903][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.643211][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.731055][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.738105][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.790383][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.802570][T12930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2038'. [ 767.282883][T12792] device hsr_slave_0 entered promiscuous mode [ 767.319611][T12792] device hsr_slave_1 entered promiscuous mode [ 772.505492][T12792] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 772.683469][T12792] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 772.749232][T10900] device hsr_slave_0 left promiscuous mode [ 772.809230][ T4176] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 772.827481][T10900] device hsr_slave_1 left promiscuous mode [ 772.914349][T10900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.058666][T10900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.100748][T10900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.109426][T10900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.159605][ T4176] usb 6-1: Using ep0 maxpacket: 16 [ 773.195962][T10900] device bridge_slave_1 left promiscuous mode [ 773.204683][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.470175][ T4176] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 773.559239][ T4176] usb 6-1: can't read configurations, error -71 [ 773.730003][T10900] device bridge_slave_0 left promiscuous mode [ 773.736292][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.015787][T10900] device veth1_macvtap left promiscuous mode [ 774.542894][T10900] device veth0_macvtap left promiscuous mode [ 774.549025][T10900] device veth1_vlan left promiscuous mode [ 774.567042][T10900] device veth0_vlan left promiscuous mode [ 776.060124][T10900] bond6 (unregistering): Released all slaves [ 776.073888][T10900] bond5 (unregistering): Released all slaves [ 776.087355][T10900] bond4 (unregistering): Released all slaves [ 776.103120][T10900] bond3 (unregistering): Released all slaves [ 776.282550][T10900] bond2 (unregistering): Released all slaves [ 776.346146][T10900] bond1 (unregistering): Released all slaves [ 776.631719][T10900] team0 (unregistering): Port device team_slave_1 removed [ 776.985918][T10900] team0 (unregistering): Port device team_slave_0 removed [ 777.008310][T10900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.035784][T10900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.188793][T10900] bond0 (unregistering): Released all slaves [ 777.433397][T12792] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 777.442814][T13039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2059'. [ 778.085624][T12792] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 778.594128][T12792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.650746][T13071] lo speed is unknown, defaulting to 1000 [ 779.891531][ T5526] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 779.927014][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 779.936695][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.111484][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.169254][ T5526] usb 6-1: Using ep0 maxpacket: 16 [ 780.183769][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 780.203077][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 780.211816][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.218936][T10050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.227187][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 780.390173][T13086] loop6: detected capacity change from 0 to 2 [ 780.533736][ T5526] usb 6-1: unable to read config index 0 descriptor/all [ 780.544910][T13086] jffs2: rp_size unrepresentable [ 780.578527][ T5526] usb 6-1: can't read configurations, error -71 [ 780.597926][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 780.608146][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 780.806226][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.813441][ T9374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.260232][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 781.385442][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 781.560330][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 781.592035][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 781.653147][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 781.680228][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 781.720128][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 781.786752][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 781.810355][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 781.857771][T12792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.995021][T12792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 782.041740][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 782.051524][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 782.799719][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2075'. [ 784.377268][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.389776][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.439776][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.564007][ T4241] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 785.009862][T13150] lo speed is unknown, defaulting to 1000 [ 785.441398][ T1108] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 785.448307][ T4241] usb 3-1: Using ep0 maxpacket: 16 [ 785.741849][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 785.759144][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 785.761381][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 785.799959][ T4241] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 785.810323][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.818373][ T4241] usb 3-1: Product: syz [ 785.840189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 785.859769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 785.875409][ T4241] usb 3-1: Manufacturer: syz [ 785.881714][ T4241] usb 3-1: SerialNumber: syz [ 785.889443][ T1108] usb 4-1: config 1 has an invalid interface number: 111 but max is 1 [ 785.889474][ T1108] usb 4-1: config 1 has an invalid interface number: 62 but max is 1 [ 785.889497][ T1108] usb 4-1: config 1 has no interface number 0 [ 785.889516][ T1108] usb 4-1: config 1 has no interface number 1 [ 785.889548][ T1108] usb 4-1: config 1 interface 62 has no altsetting 0 [ 785.891263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 785.946527][ T4241] r8152-cfgselector 3-1: config 0 descriptor?? [ 786.046115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 786.109602][ T1108] usb 4-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice=97.63 [ 786.136780][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.148655][ T4241] r8152-cfgselector 3-1: Unknown version 0x0000 [ 786.150479][T12792] device veth0_vlan entered promiscuous mode [ 786.169292][ T4241] r8152-cfgselector 3-1: Unknown version 0x0000 [ 786.175730][ T4241] r8152-cfgselector 3-1: bad CDC descriptors [ 786.218409][ T1108] usb 4-1: Product: syz [ 786.219322][ T4241] r8152-cfgselector 3-1: Unknown version 0x0000 [ 786.234293][T12792] device veth1_vlan entered promiscuous mode [ 786.239252][ T4241] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 786.244939][ T1108] usb 4-1: Manufacturer: syz [ 786.279148][ T1108] usb 4-1: SerialNumber: syz [ 786.425147][T12792] device veth0_macvtap entered promiscuous mode [ 786.479936][T12792] device veth1_macvtap entered promiscuous mode [ 786.510143][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.521482][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.533646][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.544414][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.554344][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.582812][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.433420][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.447973][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 787.640630][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 787.675734][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 787.694028][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 787.716646][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 787.736242][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 787.754821][ T1108] usb 4-1: USB disconnect, device number 18 [ 787.798865][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 787.840748][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 788.087673][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.419800][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.583329][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.637756][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.758915][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.804869][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.837765][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.872262][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 788.889903][T12792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.915415][T12792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.947726][T12792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.975616][T12792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.151390][T13192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2090'. [ 789.176167][ T9806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 789.203512][ T9806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 789.852317][T11570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.478753][T11570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.749909][ T5622] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 790.968548][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 791.037201][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.048963][ T5622] usb 3-1: Using ep0 maxpacket: 16 [ 791.157996][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.349496][ T5622] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 791.384014][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.400547][ T9989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 792.099640][ T5622] usb 3-1: Product: syz [ 792.109333][ T5622] usb 3-1: Manufacturer: syz [ 792.113981][ T5622] usb 3-1: SerialNumber: syz [ 792.134265][T13221] lo speed is unknown, defaulting to 1000 [ 792.375641][ T5622] r8152-cfgselector 3-1: config 0 descriptor?? [ 792.649475][ T5622] r8152-cfgselector 3-1: Unknown version 0x0000 [ 792.731841][ T1108] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 792.862131][T13202] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 793.169564][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.185122][ T1108] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 793.208958][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.230742][ T1108] usb 4-1: config 0 descriptor?? [ 793.486527][T13231] udc-core: couldn't find an available UDC or it's busy [ 793.533237][T13231] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 793.812275][ T1108] sony 0003:1345:3008.0006: unknown main item tag 0x0 [ 793.826894][ T1108] sony 0003:1345:3008.0006: item fetching failed at offset 4/5 [ 793.852239][ T1108] sony 0003:1345:3008.0006: parse failed [ 793.866538][ T1108] sony: probe of 0003:1345:3008.0006 failed with error -22 [ 794.013739][ T1108] usb 4-1: USB disconnect, device number 19 [ 794.126905][ T5622] r8152-cfgselector 3-1: Unknown version 0x0000 [ 794.136040][ T5622] r8152-cfgselector 3-1: bad CDC descriptors [ 794.179391][ T5622] r8152-cfgselector 3-1: Unknown version 0x0000 [ 794.236299][ T5622] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 795.528715][T13291] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 797.003310][T13307] tmpfs: Unknown parameter 'usrquota' [ 797.580480][T13321] lo speed is unknown, defaulting to 1000 [ 799.055782][T13322] tmpfs: Bad value for 'mpol' [ 799.061387][T13325] 9pnet: p9_fd_create_unix (13325): problem connecting socket: ./cgroup: -111 [ 799.891701][T13330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.899144][T13330] IPv6: NLM_F_CREATE should be set when creating new route [ 799.906405][T13330] IPv6: NLM_F_CREATE should be set when creating new route [ 800.461213][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 800.476646][T13334] device macvtap1 entered promiscuous mode [ 800.482622][T13334] device bond0 entered promiscuous mode [ 800.488200][T13334] device bond_slave_0 entered promiscuous mode [ 800.495733][T13334] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 800.597230][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 800.636236][T13334] device bond0 left promiscuous mode [ 800.642059][T13334] device bond_slave_0 left promiscuous mode [ 801.138216][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2120'. [ 801.483836][T13349] kvm [13347]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x92 [ 801.535630][T13349] kvm [13347]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4092 [ 801.702053][ T6494] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 801.767730][ T1108] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 802.532396][T13373] lo speed is unknown, defaulting to 1000 [ 803.299177][ T1108] usb 9-1: Using ep0 maxpacket: 8 [ 803.304370][ T6494] usb 7-1: Using ep0 maxpacket: 32 [ 803.499741][ T6494] usb 7-1: unable to get BOS descriptor or descriptor too short [ 803.630262][ T6494] usb 7-1: config 7 has an invalid interface number: 128 but max is 0 [ 803.689683][ T1108] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 803.741525][ T6494] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 803.849083][ T1108] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 803.981089][ T6494] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 804.058472][ T1108] usb 9-1: Product: syz [ 804.151227][ T1108] usb 9-1: Manufacturer: syz [ 804.170849][ T6494] usb 7-1: config 7 has no interface number 0 [ 804.181428][ T1108] usb 9-1: SerialNumber: syz [ 804.204006][ T6494] usb 7-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 804.230127][ T1108] usb 9-1: config 0 descriptor?? [ 804.266877][ T6494] usb 7-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 804.313593][ T1108] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 804.362555][ T6494] usb 7-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 804.389203][ T6494] usb 7-1: config 7 interface 128 has no altsetting 0 [ 804.459368][ T1108] gspca_zc3xx: reg_w_i err -71 [ 804.464342][ T1108] gspca_zc3xx: probe of 9-1:0.0 failed with error -71 [ 804.489172][ T6494] usb 7-1: string descriptor 0 read error: -71 [ 804.504162][ T6494] usb 7-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 804.540531][ T1108] usb 9-1: USB disconnect, device number 2 [ 804.549324][ T4286] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 804.631954][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2134'. [ 804.738288][ T6494] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.779788][ T6494] usb 7-1: can't set config #7, error -71 [ 804.797288][ T6494] usb 7-1: USB disconnect, device number 25 [ 804.998868][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2135'. [ 805.025230][T13407] ipt_CLUSTERIP: Please specify destination IP [ 805.052306][T13406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.336379][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 805.399166][ T1110] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 806.067440][T13410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'. [ 806.209581][ T4286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.227900][ T4286] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 806.249168][ T1110] usb 6-1: Using ep0 maxpacket: 16 [ 806.362019][ T4286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.373978][ T4286] usb 3-1: config 0 descriptor?? [ 806.913939][ T4286] pwc: Askey VC010 type 2 USB webcam detected. [ 806.972148][T13406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.989590][ T1110] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 806.998679][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.009666][ T4286] pwc: send_video_command error -71 [ 807.015342][ T4286] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 807.038700][ T1110] usb 6-1: Product: syz [ 807.045693][ T4286] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 807.053304][ T1110] usb 6-1: Manufacturer: syz [ 807.057994][ T1110] usb 6-1: SerialNumber: syz [ 807.079549][ T4286] usb 3-1: USB disconnect, device number 26 [ 807.161234][ T1110] r8152-cfgselector 6-1: config 0 descriptor?? [ 807.770890][T13408] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 808.079112][ T1110] r8152-cfgselector 6-1: Unknown version 0x0000 [ 808.686405][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2143'. [ 808.694201][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.889752][ T1110] r8152-cfgselector 6-1: Unknown version 0x0000 [ 808.896196][ T1110] r8152-cfgselector 6-1: bad CDC descriptors [ 808.919247][ T1110] r8152-cfgselector 6-1: Unknown version 0x0000 [ 808.949361][ T1110] r8152-cfgselector 6-1: USB disconnect, device number 17 [ 809.341335][T13441] netlink: 'syz.6.2144': attribute type 9 has an invalid length. [ 809.684379][T13441] netlink: 'syz.6.2144': attribute type 6 has an invalid length. [ 809.693435][T13447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2147'. [ 809.726542][T13446] lo speed is unknown, defaulting to 1000 [ 813.469386][ T4286] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 813.809458][ T4286] usb 7-1: Using ep0 maxpacket: 16 [ 814.089406][ T4286] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 814.143326][ T4286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.207410][ T4286] usb 7-1: Product: syz [ 814.218413][ T4286] usb 7-1: Manufacturer: syz [ 814.224182][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2162'. [ 814.233635][ T4286] usb 7-1: SerialNumber: syz [ 814.254025][ T4286] r8152-cfgselector 7-1: config 0 descriptor?? [ 814.550641][ T4286] r8152-cfgselector 7-1: Unknown version 0x0000 [ 814.747875][T13516] lo speed is unknown, defaulting to 1000 [ 814.754758][T13485] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 815.450460][T11881] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 815.551462][T13527] loop8: detected capacity change from 0 to 128 [ 815.816479][T13527] EXT4-fs (loop8): Test dummy encryption mode enabled [ 815.825095][T13527] EXT4-fs (loop8): Test dummy encryption mode enabled [ 816.358742][T13527] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 816.529439][T13527] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 816.789305][ T4286] r8152-cfgselector 7-1: Unknown version 0x0000 [ 816.797065][ T4286] r8152-cfgselector 7-1: bad CDC descriptors [ 816.819963][ T4286] r8152-cfgselector 7-1: Unknown version 0x0000 [ 816.842386][ T4286] r8152-cfgselector 7-1: USB disconnect, device number 26 [ 816.899573][T11881] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 816.938215][T11881] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 816.950074][T11881] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 816.965833][T11881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.009766][T13515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 818.302697][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2174'. [ 818.412549][T13579] netlink: 'syz.6.2175': attribute type 3 has an invalid length. [ 818.426931][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2175'. [ 818.505311][ T4241] usb 4-1: USB disconnect, device number 20 [ 818.627892][T13579] [ 818.630269][T13579] ====================================================== [ 818.637292][T13579] WARNING: possible circular locking dependency detected [ 818.644324][T13579] 5.15.179-syzkaller #0 Not tainted [ 818.649539][T13579] ------------------------------------------------------ [ 818.656559][T13579] syz.6.2175/13579 is trying to acquire lock: [ 818.662631][T13579] ffff88807e590d00 (team->team_lock_key#7){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1f0 [ 818.672240][T13579] [ 818.672240][T13579] but task is already holding lock: [ 818.679611][T13579] ffff888061ab8628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 818.689471][T13579] [ 818.689471][T13579] which lock already depends on the new lock. [ 818.689471][T13579] [ 818.699877][T13579] [ 818.699877][T13579] the existing dependency chain (in reverse order) is: [ 818.708895][T13579] [ 818.708895][T13579] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 818.716648][T13579] lock_acquire+0x1db/0x4f0 [ 818.721689][T13579] __mutex_lock_common+0x1da/0x25a0 [ 818.727429][T13579] mutex_lock_nested+0x17/0x20 [ 818.732741][T13579] ieee80211_open+0x13a/0x1f0 [ 818.737964][T13579] __dev_open+0x2c3/0x430 [ 818.742873][T13579] dev_open+0xaa/0x1a0 [ 818.747495][T13579] team_add_slave+0x9b9/0x2810 [ 818.752812][T13579] do_setlink+0xddd/0x3d80 [ 818.757781][T13579] rtnl_newlink+0x17bf/0x2050 [ 818.763013][T13579] rtnetlink_rcv_msg+0x99d/0xef0 [ 818.768587][T13579] netlink_rcv_skb+0x1cf/0x410 [ 818.773914][T13579] netlink_unicast+0x7c0/0x990 [ 818.779221][T13579] netlink_sendmsg+0xa30/0xd60 [ 818.784515][T13579] ____sys_sendmsg+0x59e/0x8f0 [ 818.789805][T13579] ___sys_sendmsg+0x252/0x2e0 [ 818.795002][T13579] __se_sys_sendmsg+0x19a/0x260 [ 818.800376][T13579] do_syscall_64+0x3b/0xb0 [ 818.805317][T13579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 818.811734][T13579] [ 818.811734][T13579] -> #0 (team->team_lock_key#7){+.+.}-{3:3}: [ 818.819903][T13579] validate_chain+0x1649/0x5930 [ 818.825269][T13579] __lock_acquire+0x1295/0x1ff0 [ 818.830636][T13579] lock_acquire+0x1db/0x4f0 [ 818.835676][T13579] __mutex_lock_common+0x1da/0x25a0 [ 818.841395][T13579] mutex_lock_nested+0x17/0x20 [ 818.846679][T13579] team_del_slave+0x2e/0x1f0 [ 818.851790][T13579] team_device_event+0x264/0x580 [ 818.857244][T13579] raw_notifier_call_chain+0xd0/0x170 [ 818.863130][T13579] unregister_netdevice_many+0xe98/0x1840 [ 818.869459][T13579] unregister_netdevice_queue+0x2e6/0x350 [ 818.875909][T13579] _cfg80211_unregister_wdev+0x181/0x510 [ 818.882082][T13579] ieee80211_if_remove+0x1cc/0x2c0 [ 818.887730][T13579] ieee80211_del_iface+0x15/0x20 [ 818.893189][T13579] nl80211_del_interface+0x1f5/0x370 [ 818.899007][T13579] genl_rcv_msg+0xfc2/0x14a0 [ 818.904142][T13579] netlink_rcv_skb+0x1cf/0x410 [ 818.909433][T13579] genl_rcv+0x24/0x40 [ 818.913937][T13579] netlink_unicast+0x7c0/0x990 [ 818.919230][T13579] netlink_sendmsg+0xa30/0xd60 [ 818.924512][T13579] ____sys_sendmsg+0x59e/0x8f0 [ 818.929793][T13579] ___sys_sendmsg+0x252/0x2e0 [ 818.935000][T13579] __se_sys_sendmsg+0x19a/0x260 [ 818.940393][T13579] do_syscall_64+0x3b/0xb0 [ 818.945341][T13579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 818.951764][T13579] [ 818.951764][T13579] other info that might help us debug this: [ 818.951764][T13579] [ 818.961986][T13579] Possible unsafe locking scenario: [ 818.961986][T13579] [ 818.969429][T13579] CPU0 CPU1 [ 818.974785][T13579] ---- ---- [ 818.980226][T13579] lock(&rdev->wiphy.mtx); [ 818.984726][T13579] lock(team->team_lock_key#7); [ 818.992182][T13579] lock(&rdev->wiphy.mtx); [ 818.999196][T13579] lock(team->team_lock_key#7); [ 819.004134][T13579] [ 819.004134][T13579] *** DEADLOCK *** [ 819.004134][T13579] [ 819.012273][T13579] 3 locks held by syz.6.2175/13579: [ 819.017477][T13579] #0: ffffffff8dca15f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 819.025656][T13579] #1: ffffffff8dc43ac8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x550 [ 819.034875][T13579] #2: ffff888061ab8628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 819.045142][T13579] [ 819.045142][T13579] stack backtrace: [ 819.051027][T13579] CPU: 0 PID: 13579 Comm: syz.6.2175 Not tainted 5.15.179-syzkaller #0 [ 819.059259][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 819.069317][T13579] Call Trace: [ 819.072599][T13579] [ 819.075526][T13579] dump_stack_lvl+0x1e3/0x2d0 [ 819.080206][T13579] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 819.085839][T13579] ? print_circular_bug+0x12b/0x1a0 [ 819.091037][T13579] check_noncircular+0x2f8/0x3b0 [ 819.095972][T13579] ? add_chain_block+0x850/0x850 [ 819.100910][T13579] ? lockdep_lock+0x11f/0x2a0 [ 819.105588][T13579] ? lockdep_unlock+0x166/0x300 [ 819.110431][T13579] ? lockdep_lock+0x2a0/0x2a0 [ 819.115111][T13579] validate_chain+0x1649/0x5930 [ 819.119959][T13579] ? validate_chain+0x13bd/0x5930 [ 819.124984][T13579] ? reacquire_held_locks+0x660/0x660 [ 819.130357][T13579] ? reacquire_held_locks+0x660/0x660 [ 819.135734][T13579] ? mark_lock+0x98/0x340 [ 819.140058][T13579] __lock_acquire+0x1295/0x1ff0 [ 819.144908][T13579] lock_acquire+0x1db/0x4f0 [ 819.149405][T13579] ? team_del_slave+0x2e/0x1f0 [ 819.154169][T13579] ? read_lock_is_recursive+0x10/0x10 [ 819.159540][T13579] ? __might_sleep+0xc0/0xc0 [ 819.164177][T13579] ? xsk_notifier+0x37b/0x390 [ 819.168855][T13579] __mutex_lock_common+0x1da/0x25a0 [ 819.174050][T13579] ? team_del_slave+0x2e/0x1f0 [ 819.178815][T13579] ? __local_bh_enable_ip+0x164/0x1f0 [ 819.184182][T13579] ? team_del_slave+0x2e/0x1f0 [ 819.188962][T13579] ? bond_netdev_event+0xd8/0xe90 [ 819.193985][T13579] ? mutex_lock_io_nested+0x60/0x60 [ 819.199183][T13579] ? mutex_unlock+0x10/0x10 [ 819.203680][T13579] ? bond_ipsec_offload_ok+0x3f0/0x3f0 [ 819.209135][T13579] ? memset+0x1f/0x40 [ 819.213113][T13579] mutex_lock_nested+0x17/0x20 [ 819.217873][T13579] team_del_slave+0x2e/0x1f0 [ 819.222459][T13579] team_device_event+0x264/0x580 [ 819.227397][T13579] raw_notifier_call_chain+0xd0/0x170 [ 819.232780][T13579] unregister_netdevice_many+0xe98/0x1840 [ 819.238500][T13579] ? lockdep_hardirqs_on+0x94/0x130 [ 819.243692][T13579] ? alloc_netdev_mqs+0xc10/0xc10 [ 819.248725][T13579] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 819.254616][T13579] ? _raw_spin_unlock+0x40/0x40 [ 819.259462][T13579] ? wake_up_q+0x9f/0xd0 [ 819.263704][T13579] ? up_write+0x31f/0x580 [ 819.268030][T13579] unregister_netdevice_queue+0x2e6/0x350 [ 819.273746][T13579] ? list_netdevice+0x470/0x470 [ 819.278605][T13579] _cfg80211_unregister_wdev+0x181/0x510 [ 819.284282][T13579] ieee80211_if_remove+0x1cc/0x2c0 [ 819.289406][T13579] ieee80211_del_iface+0x15/0x20 [ 819.294363][T13579] nl80211_del_interface+0x1f5/0x370 [ 819.299654][T13579] genl_rcv_msg+0xfc2/0x14a0 [ 819.304248][T13579] ? genl_bind+0x420/0x420 [ 819.308661][T13579] ? local_bh_enable+0x5/0x20 [ 819.313339][T13579] ? mark_lock+0x98/0x340 [ 819.317676][T13579] ? __lock_acquire+0x1295/0x1ff0 [ 819.322697][T13579] ? nl80211_new_interface+0xfa0/0xfa0 [ 819.328160][T13579] netlink_rcv_skb+0x1cf/0x410 [ 819.333037][T13579] ? genl_bind+0x420/0x420 [ 819.337475][T13579] ? netlink_ack+0xb10/0xb10 [ 819.342083][T13579] ? down_read+0x1b3/0x2e0 [ 819.346517][T13579] ? genl_rcv+0x9/0x40 [ 819.350618][T13579] genl_rcv+0x24/0x40 [ 819.354606][T13579] netlink_unicast+0x7c0/0x990 [ 819.359639][T13579] ? netlink_detachskb+0x90/0x90 [ 819.364579][T13579] ? __virt_addr_valid+0x3bb/0x460 [ 819.369687][T13579] ? 0xffffffff81000000 [ 819.373833][T13579] ? __check_object_size+0x300/0x410 [ 819.379118][T13579] ? bpf_lsm_netlink_send+0x5/0x10 [ 819.384225][T13579] netlink_sendmsg+0xa30/0xd60 [ 819.388990][T13579] ? netlink_getsockopt+0x5b0/0x5b0 [ 819.394191][T13579] ? plist_check_list+0x20d/0x220 [ 819.399212][T13579] ? aa_sock_msg_perm+0x91/0x150 [ 819.404147][T13579] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 819.409430][T13579] ? security_socket_sendmsg+0x7d/0xa0 [ 819.414883][T13579] ? netlink_getsockopt+0x5b0/0x5b0 [ 819.420081][T13579] ____sys_sendmsg+0x59e/0x8f0 [ 819.424844][T13579] ? iovec_from_user+0x300/0x390 [ 819.429779][T13579] ? __sys_sendmsg_sock+0x30/0x30 [ 819.434814][T13579] ___sys_sendmsg+0x252/0x2e0 [ 819.439494][T13579] ? __sys_sendmsg+0x260/0x260 [ 819.444272][T13579] ? __fdget+0x191/0x220 [ 819.448515][T13579] __se_sys_sendmsg+0x19a/0x260 [ 819.453364][T13579] ? __x64_sys_sendmsg+0x80/0x80 [ 819.458302][T13579] ? syscall_enter_from_user_mode+0x2e/0x240 [ 819.464282][T13579] ? lockdep_hardirqs_on+0x94/0x130 [ 819.469484][T13579] ? syscall_enter_from_user_mode+0x2e/0x240 [ 819.475463][T13579] do_syscall_64+0x3b/0xb0 [ 819.479879][T13579] ? clear_bhb_loop+0x15/0x70 [ 819.484570][T13579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 819.490480][T13579] RIP: 0033:0x7f6af3a9c169 [ 819.494903][T13579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.514525][T13579] RSP: 002b:00007f6af18e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.522946][T13579] RAX: ffffffffffffffda RBX: 00007f6af3cb5080 RCX: 00007f6af3a9c169 [ 819.530917][T13579] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000005 [ 819.538883][T13579] RBP: 00007f6af3b1d2a0 R08: 0000000000000000 R09: 0000000000000000 [ 819.546850][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.554822][T13579] R13: 0000000000000000 R14: 00007f6af3cb5080 R15: 00007ffe46d5a688 [ 819.562797][T13579] [ 819.749625][T13579] team0: Port device wlan1 removed [ 819.783260][T13591] loop8: detected capacity change from 0 to 2048 [ 819.902563][T13591] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.