last executing test programs: 7m43.066869253s ago: executing program 2 (id=30): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x44) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x1, 0x4, 0x3, 0x6, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}]}, &(0x7f0000000680)='syzkaller\x00', 0xc, 0x49, &(0x7f00000006c0)=""/73, 0x41000, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000740)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x0, 0x40, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[r2, r1, r2, r1, r2], &(0x7f0000000800)=[{0x2, 0x4, 0xb, 0x6}, {0x3, 0x3, 0x9, 0x5}, {0x3, 0x3, 0x1, 0x7}, {0x1, 0x5, 0xb, 0x5}, {0x0, 0x1}, {0x3, 0x3, 0xa, 0xb}], 0x10, 0x2, @void, @value}, 0x94) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa2, &(0x7f00000004c0)=""/162, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000940)={@mcast1={0xff, 0x5}, 0x0, 0x1, 0x0, 0x1, 0x2006, 0x7fff}, 0x20) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f000000000000000000030090000000000400000000"], 0x54}}, 0x0) 7m42.935731335s ago: executing program 2 (id=33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 7m42.873766247s ago: executing program 2 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendfile(r1, r4, 0x0, 0xffffffff000) 7m40.625003948s ago: executing program 2 (id=43): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r3}, 0x2a) r4 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x23a}, &(0x7f0000002480), &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) 7m38.44288267s ago: executing program 2 (id=53): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xfbefcc6b23f2fad3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) r2 = fanotify_init(0x8, 0x80000) fanotify_mark(r2, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m36.882195092s ago: executing program 2 (id=58): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 7m21.832884197s ago: executing program 32 (id=58): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 7.232601369s ago: executing program 3 (id=2101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 5.978778907s ago: executing program 3 (id=2111): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) fsmount(r0, 0x0, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) request_key(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 5.908787017s ago: executing program 0 (id=2112): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0x8000000, {0x60, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x44080) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="1221e144f6e744a2b4ba9cbd79f3be42ec2ec5d8e5b42666e734976a62c3cd2fac5594ea7bdeef3fc580b4db3767e8b66490ad4c5686a7a6cd49e1af830afd62e5b8d969c96def2976", @ANYRESHEX], 0x4, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r6, 0x80079a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000009c0)={0x7}, 0x1) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) getpriority(0x2, 0x0) 5.845413798s ago: executing program 3 (id=2115): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc, 0x0, 0x10}]) 5.627030861s ago: executing program 3 (id=2117): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x189000, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x10d9}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40c0084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fsopen(&(0x7f0000000100)='nfs4\x00', 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000cc0)={'syz0\x00', {}, 0x10, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x2], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x7f, 0x7b20bb14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x27fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffd], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x56a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) 4.96541766s ago: executing program 0 (id=2118): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffefffff, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x2, 0x2, 0x0, 0x0, 0x9, 0xda9a, 0xff, 0x4000000, 0xa000, 0x0, 0x0, r2, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x20000000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.756210623s ago: executing program 0 (id=2120): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) unshare(0x22020400) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="a78af357", 0x4}], 0x1, 0x0) 4.471110517s ago: executing program 0 (id=2126): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000804) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x4000010) socket$key(0xf, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000021849ac301ce03743b01e606000000000000000076828aa7", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.854026996s ago: executing program 3 (id=2131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) sched_setattr(0x0, 0x0, 0x0) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') write$apparmor_current(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$l2tp6(0xa, 0x2, 0x73) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = fspick(r6, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 3.523462301s ago: executing program 5 (id=2134): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0xffffffff, 0x5, 0x0, 0x2}, 0x10) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x80) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3.130704656s ago: executing program 5 (id=2140): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x75, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "e706d30bd224f8caaebb85471f8e8998"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad00"/16}, {0x0, 0x7, "c8f46976e7"}]}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}}}}}, 0x0) 2.949186429s ago: executing program 5 (id=2142): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) rt_sigsuspend(&(0x7f0000000140), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000880), 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0xe30c}, {r2, 0x14}, {r2, 0x50}, {r2, 0x5000}], 0x4, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xfffffff8, 0x1, 0x3, "ff3a55f32eb68900d10052d00020ecfff2f7fb81d7ef0c000000e800", 0x47524247}) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.709241262s ago: executing program 4 (id=2145): socket$inet6_sctp(0xa, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd45, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x20}], 0x1}, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) 2.609130193s ago: executing program 4 (id=2146): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0x8000000, {0x60, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x44080) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="1221e144f6e744a2b4ba9cbd79f3be42ec2ec5d8e5b42666e734976a62c3cd2fac5594ea7bdeef3fc580b4db3767e8b66490ad4c5686a7a6cd49e1af830afd62e5b8d969c96def2976", @ANYRESHEX], 0x4, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r6, 0x80079a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000009c0)={0x7}, 0x1) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0) getpriority(0x2, 0x0) 2.366316097s ago: executing program 1 (id=2148): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000040)="3e320f9a5be288000f8900000fc79e00009a43b2ee00260f01c3baf80c66b8616cadbb6d8c6d8cbafc0cec660f64485ed9f32e0f016600", 0x37}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x36f2e317, 0x40080) 2.12371222s ago: executing program 1 (id=2149): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) fsmount(r0, 0x0, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) request_key(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.035823511s ago: executing program 1 (id=2150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}, [@private2]}}}]}, 0x4c}}, 0x0) 2.034652181s ago: executing program 5 (id=2151): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, 0x0, 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f0000000100", 0x6) io_setup(0x3fe, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfffc, r0, 0x0}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x454, &(0x7f0000000c00)="$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") 1.888007043s ago: executing program 4 (id=2152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006dc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r0, 0x10000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 1.835632254s ago: executing program 3 (id=2153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x21, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x2, {0x0, 0x0, 0x2}}, 0x18) connect$can_j1939(r6, &(0x7f0000000480)={0x1d, r7, 0x7, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendfile(r6, r5, 0x0, 0x1000000000000a) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 1.279772142s ago: executing program 1 (id=2154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797af11f"], 0x98}}, 0x0) 1.025268635s ago: executing program 0 (id=2155): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x4, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 898.207677ms ago: executing program 4 (id=2156): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 882.502097ms ago: executing program 0 (id=2157): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x5000000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffe, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f00000000c0)='\b\x00\fj\bH', 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x22, 0x2, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000100)) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000040)=0x2a, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, "37bb54f0"}}) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000300000005000000000000f6f2c5d7475ae4874847f76000000000000000000000000001ffffffffffffff7f01000000be6d31265dacf494ca8a47a083f1c5f203b5a1fb05ba034955321b6e4d888bba934783c20cea773ffa3ca59f4a317da5de10eb2e30595cc508d814ea2a0d8357ab6f82fc05102ae0adaaa63a7c5f4c364c8dfe8adef06868dfdb77ca95"]) 795.620348ms ago: executing program 1 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) listen(0xffffffffffffffff, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c1c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 714.77246ms ago: executing program 5 (id=2159): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000040)="3e320f9a5be288000f8900000fc79e00009a43b2ee00260f01c3baf80c66b8616cadbb6d8c6d8cbafc0cec660f64485ed9f32e0f016600", 0x37}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x36f2e317, 0x40080) 654.0066ms ago: executing program 4 (id=2160): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) fsmount(r0, 0x0, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) request_key(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 447.563174ms ago: executing program 5 (id=2161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd6000000000140600fe800000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r2 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0xf04d, 0x1, 0xfffffffc, 0x211}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f000000a380)=""/4107, 0x41100, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="03acf217e70c0eab0e30450f0cde7ae9b34ee28587343c6c6c126f324a5bcced3e028d0f03328b4e729d468c1092795f98d5fae3a9cafef68f4a42fd5d20f9a2fe9e25b394561010975bc417d8701c2e77b1e5bc9a5474982d5e54b5a8a6520c7cb358c6eef788e6580de416f1dc1c635c07", 0x72}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c}}], 0x20, 0x5}, 0x48000) close(r2) ioctl$TCSETSW2(0xffffffffffffffff, 0x5425, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff50, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800", @ANYRES16=r1], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl(0xffffffffffffffff, 0x8, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r6, 0x21b857c7cf062cf, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) ioctl$FBIOGETCMAP(r4, 0x4604, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket(0x10, 0x2, 0x0) 440.746083ms ago: executing program 4 (id=2162): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0x8000000, {0x60, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x44080) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="1221e144f6e744a2b4ba9cbd79f3be42ec2ec5d8e5b42666e734976a62c3cd2fac5594ea7bdeef3fc580b4db3767e8b66490ad4c5686a7a6cd49e1af830afd62e5b8d969c96def2976", @ANYRESHEX], 0x4, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r6, 0x80079a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000009c0)={0x7}, 0x1) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0) getpriority(0x2, 0x0) 0s ago: executing program 1 (id=2163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x14) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYBLOB, @ANYBLOB="1cda588aa45a5a92943bc36860c71fc68c928a6103ce2d66e47cfc3cd0218d9c7f98b4cc9461d70aa8849618bc18f508c194dbc54ba2ef8245fb5d833937a1c30fa900145706dc9025bb103d60cd698af520f00a38ce18f4f34628fac16507c714055b46b5939944528520dda8c0c6503247252e6eaa44c9f5d338", @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRES8=r3], 0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x8, 0x3, 0xff, 0x7, @time={0x4, 0x80}, {0x8, 0xa}, {0xc8, 0x5}, @result={0xc, 0x5}}], 0x1c) semget$private(0x0, 0x0, 0x402) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 53] loop1: detected capacity change from 0 to 512 [ 319.488260][ T7853] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 319.542978][ T25] audit: type=1326 audit(1747460223.589:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.1.965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 320.438964][ T7868] device netdevsim0 entered promiscuous mode [ 320.448623][ T7868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.750630][ T7876] No such timeout policy "syz0" [ 321.895147][ T7903] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 321.908116][ T7903] netlink: 56 bytes leftover after parsing attributes in process `syz.4.979'. [ 322.142908][ T7909] capability: warning: `syz.5.981' uses deprecated v2 capabilities in a way that may be insecure [ 322.224569][ T7912] netlink: 'syz.4.983': attribute type 11 has an invalid length. [ 322.810824][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.817326][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.646821][ T4395] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.906764][ T4395] usb 1-1: Using ep0 maxpacket: 32 [ 324.026935][ T4395] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 324.061528][ T4395] usb 1-1: config 0 has no interfaces? [ 324.079842][ T4395] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 324.106871][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.148243][ T4395] usb 1-1: config 0 descriptor?? [ 324.328980][ T7941] bridge0: port 1(vlan2) entered blocking state [ 324.335482][ T7941] bridge0: port 1(vlan2) entered disabled state [ 324.353821][ T7941] device vlan2 entered promiscuous mode [ 324.363319][ T7941] device bond0 entered promiscuous mode [ 324.484378][ T4395] usb 1-1: string descriptor 0 read error: -71 [ 324.496187][ T4395] usb 1-1: USB disconnect, device number 5 [ 324.933341][ T7963] loop3: detected capacity change from 0 to 512 [ 325.017048][ T7963] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 325.050699][ T25] audit: type=1326 audit(1747460229.099:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94d361969 code=0x0 [ 325.053717][ T7968] No such timeout policy "syz0" [ 326.544884][ T8005] device vlan2 entered promiscuous mode [ 326.693164][ T8011] loop4: detected capacity change from 0 to 512 [ 326.754508][ T8011] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 326.776306][ T25] audit: type=1326 audit(1747460230.819:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.4.1014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6676dbd969 code=0x0 [ 327.194940][ T8019] No such timeout policy "syz0" [ 327.290315][ T8022] input: syz0 as /devices/virtual/input/input8 [ 327.876840][ T4394] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.123622][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 328.306985][ T4394] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 328.325226][ T4394] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.345282][ T4394] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.355365][ T4394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.407368][ T8048] program syz.5.1028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.415983][ T4394] usb 4-1: config 0 descriptor?? [ 328.447580][ T8050] No such timeout policy "syz0" [ 328.457459][ T8033] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 328.479282][ T4394] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 328.774449][ T8064] tipc: Enabling of bearer rejected, failed to enable media [ 328.979890][ T8077] No such timeout policy "syz0" [ 329.706812][ T4394] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 329.887918][ T4215] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 329.922638][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 330.136833][ T4215] usb 5-1: Using ep0 maxpacket: 8 [ 330.147122][ T4394] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.162602][ T4394] usb 6-1: config 0 has no interfaces? [ 330.169345][ T4394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.185262][ T4394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.204220][ T4394] usb 6-1: config 0 descriptor?? [ 330.256913][ T4215] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 330.264348][ T4215] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 330.279609][ T4215] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 330.367745][ T4215] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 330.375346][ T4215] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 330.388309][ T4215] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 330.480715][ T4215] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 330.511360][ T4215] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 330.533277][ T4395] usb 6-1: USB disconnect, device number 4 [ 330.538515][ T4215] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 330.550078][ T8103] program syz.1.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.646352][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 330.741131][ T4394] usb 4-1: USB disconnect, device number 4 [ 330.809169][ T4215] usb 5-1: string descriptor 0 read error: -22 [ 330.815571][ T4215] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 330.844182][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.898852][ T4215] adutux 5-1:168.0: interrupt endpoints not found [ 330.922983][ T8118] No such timeout policy "syz0" [ 331.187683][ T4394] usb 5-1: USB disconnect, device number 3 [ 331.320415][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'. [ 331.503705][ T8136] loop3: detected capacity change from 0 to 512 [ 331.663460][ T8136] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 331.888948][ T25] audit: type=1326 audit(1747460235.939:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.3.1059" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94d361969 code=0x0 [ 333.460515][ T8145] loop5: detected capacity change from 0 to 2048 [ 334.941915][ T4187] Alternate GPT is invalid, using primary GPT. [ 334.996897][ T4187] loop5: p1 p2 p3 [ 335.050583][ T8145] Alternate GPT is invalid, using primary GPT. [ 335.066181][ T8145] loop5: p1 p2 p3 [ 335.297763][ T5084] udevd[5084]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 335.297879][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 335.338089][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 335.487770][ T4394] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 336.270859][ T8166] No such timeout policy "syz0" [ 336.291354][ T5084] udevd[5084]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 336.331806][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 336.363090][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 336.725455][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 336.736941][ T4394] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 336.762942][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.813210][ T4394] usb 1-1: config 0 descriptor?? [ 336.870173][ T4394] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 336.897543][ T4394] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 337.119795][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1065'. [ 337.156825][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1065'. [ 337.239409][ T8157] device team0 entered promiscuous mode [ 337.272618][ T8157] device batadv_slave_1 entered promiscuous mode [ 337.293549][ T8157] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 337.335264][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 337.395715][ T1325] usb 1-1: USB disconnect, device number 6 [ 337.806881][ T4250] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 338.274366][ T8191] loop0: detected capacity change from 0 to 2048 [ 338.277003][ T4250] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.337803][ T4160] Alternate GPT is invalid, using primary GPT. [ 338.381148][ T4160] loop0: p1 p2 p3 [ 338.563372][ T8191] Alternate GPT is invalid, using primary GPT. [ 338.570292][ T8191] loop0: p1 p2 p3 [ 338.971903][ T4250] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 338.981906][ T4250] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.991525][ T4250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.027053][ T8182] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 339.616388][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 339.616520][ T5084] udevd[5084]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 339.644879][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 340.694630][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 340.695107][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 340.710465][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 340.737394][ T4250] usb 5-1: USB disconnect, device number 4 [ 340.838257][ T8213] No such timeout policy "syz0" [ 340.843743][ T8208] device vlan2 entered promiscuous mode [ 341.028618][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1083'. [ 341.152079][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.542721][ T8234] loop4: detected capacity change from 0 to 2048 [ 341.556788][ T4394] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 343.857012][ T4394] usb 2-1: config 0 has no interfaces? [ 343.921409][ T8234] Alternate GPT is invalid, using primary GPT. [ 343.939598][ T8234] loop4: p1 p2 p3 [ 344.017160][ T4394] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 344.057621][ T4394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.109426][ T4394] usb 2-1: Product: syz [ 344.125006][ T4394] usb 2-1: Manufacturer: syz [ 344.132536][ T8240] device syzkaller0 entered promiscuous mode [ 344.138885][ T4394] usb 2-1: SerialNumber: syz [ 344.167933][ T4394] usb 2-1: config 0 descriptor?? [ 344.193350][ T5084] udevd[5084]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 344.193501][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 344.216211][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 344.390845][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 345.671934][ T8258] loop5: detected capacity change from 0 to 512 [ 345.804919][ T8258] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 345.851312][ T8258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 346.001940][ T8258] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.1095: corrupted in-inode xattr [ 346.040399][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 346.081571][ T8258] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1095: couldn't read orphan inode 15 (err -117) [ 346.114518][ T8258] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 347.198448][ T4394] usb 2-1: can't set config #0, error -71 [ 347.227527][ T4394] usb 2-1: USB disconnect, device number 4 [ 347.294170][ T8276] vxcan1 speed is unknown, defaulting to 1000 [ 347.786816][ T1108] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 350.156933][ T1108] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 350.281180][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 350.338866][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.349403][ T1108] usb 6-1: config 0 descriptor?? [ 350.376914][ T1108] usb 6-1: can't set config #0, error -71 [ 350.386887][ T1108] usb 6-1: USB disconnect, device number 5 [ 358.692922][ T8405] vxcan1 speed is unknown, defaulting to 1000 [ 359.034582][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 364.254122][ T8461] loop5: detected capacity change from 0 to 512 [ 364.335260][ T8461] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 364.388423][ T8461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 364.409791][ T8461] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.1156: corrupted in-inode xattr [ 364.424859][ T8461] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1156: couldn't read orphan inode 15 (err -117) [ 364.445453][ T8461] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 364.480604][ T8467] device syzkaller0 entered promiscuous mode [ 365.947419][ T4394] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 366.226837][ T4394] usb 1-1: Using ep0 maxpacket: 32 [ 366.381508][ T4394] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 366.401077][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.808845][ T4394] usb 1-1: config 0 descriptor?? [ 367.526906][ T4394] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 367.545888][ T4394] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.647267][ T4394] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 367.655086][ T4394] usb 1-1: media controller created [ 367.679477][ T4394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.748193][ T4394] az6027: usb out operation failed. (-71) [ 367.793681][ T4394] az6027: usb out operation failed. (-71) [ 367.806926][ T4394] stb0899_attach: Driver disabled by Kconfig [ 367.836649][ T4394] az6027: no front-end attached [ 367.836649][ T4394] [ 367.876815][ T4394] az6027: usb out operation failed. (-71) [ 367.882618][ T4394] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 367.916040][ T4394] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 367.982160][ T4394] dvb-usb: schedule remote query interval to 400 msecs. [ 368.031632][ T4394] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 368.084180][ T4394] usb 1-1: USB disconnect, device number 7 [ 368.335975][ T4394] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 368.376855][ T4395] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 368.551770][ T8514] loop0: detected capacity change from 0 to 512 [ 368.690431][ T8514] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 368.738169][ T8514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 368.774644][ T8514] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.1170: corrupted in-inode xattr [ 368.787743][ T4395] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 368.798761][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.826172][ T8514] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1170: couldn't read orphan inode 15 (err -117) [ 368.874202][ T8514] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 368.916929][ T4395] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 368.947546][ T4395] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 369.073531][ T4395] usb 4-1: Manufacturer: syz [ 369.083023][ T4395] usb 4-1: config 0 descriptor?? [ 369.937397][ T4395] rc_core: IR keymap rc-hauppauge not found [ 369.954189][ T4395] Registered IR keymap rc-empty [ 369.959517][ T8525] loop1: detected capacity change from 0 to 512 [ 369.983981][ T4395] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 369.998536][ T8525] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 370.045339][ T8525] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.1171: bad orphan inode 17 [ 370.081036][ T8525] EXT4-fs (loop1): Remounting filesystem read-only [ 370.106540][ T8525] ext4_test_bit(bit=16, block=4) = 1 [ 370.144952][ T4395] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 370.158800][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 370.185686][ T8525] is_bad_inode(inode)=0 [ 370.202630][ T8525] NEXT_ORPHAN(inode)=2147418128 [ 370.226872][ T8525] max_ino=32 [ 370.234729][ T8525] i_nlink=0 [ 370.273979][ T8525] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 370.541127][ T4178] usb 4-1: USB disconnect, device number 5 [ 371.054451][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 371.276865][ T4394] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 371.436825][ T4395] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 371.536918][ T4178] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 371.690011][ T4395] usb 6-1: Using ep0 maxpacket: 32 [ 371.806906][ T4394] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 371.806945][ T4178] usb 2-1: Using ep0 maxpacket: 32 [ 371.816469][ T4394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.816496][ T4394] usb 1-1: Product: syz [ 371.816512][ T4394] usb 1-1: Manufacturer: syz [ 371.816527][ T4394] usb 1-1: SerialNumber: syz [ 371.876860][ T4395] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.886575][ T4394] usb 1-1: config 0 descriptor?? [ 371.940043][ T8565] loop4: detected capacity change from 0 to 512 [ 371.957063][ T4395] usb 6-1: config 7 has an invalid interface number: 111 but max is 0 [ 371.957331][ T4178] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 371.979973][ T4395] usb 6-1: config 7 has no interface number 0 [ 371.980199][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.995754][ T8565] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 372.025890][ T8565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 372.027902][ T4178] usb 2-1: config 0 descriptor?? [ 372.041274][ T8565] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1183: corrupted in-inode xattr [ 372.054266][ T8565] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1183: couldn't read orphan inode 15 (err -117) [ 372.068639][ T8565] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 372.136116][ T4178] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 372.151408][ T4395] usb 6-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 372.171064][ T4395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.179154][ T4395] usb 6-1: Product: syz [ 372.193834][ T4395] usb 6-1: Manufacturer: syz [ 372.198519][ T4395] usb 6-1: SerialNumber: syz [ 372.296158][ T8568] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 372.367544][ T8563] udc-core: couldn't find an available UDC or it's busy [ 372.375000][ T8563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.537908][ T8545] udc-core: couldn't find an available UDC or it's busy [ 372.556794][ T8563] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[8563] [ 372.619356][ T8545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.967817][ T4395] usb 6-1: bad CDC descriptors [ 373.016972][ T4395] usb 6-1: USB disconnect, device number 6 [ 373.020993][ T4178] gspca_vc032x: reg_r err -71 [ 373.027628][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.032931][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.038366][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.043774][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.049158][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.054470][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.059834][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.065133][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.070548][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.075865][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.088887][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.094232][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.123350][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.129010][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.134317][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.146728][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.152079][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.203502][ T4178] gspca_vc032x: I2c Bus Busy Wait 00 [ 373.222555][ T4178] gspca_vc032x: Unknown sensor... [ 373.226890][ T4394] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -110 [ 373.236816][ T4178] vc032x: probe of 2-1:0.0 failed with error -22 [ 373.255252][ T4178] usb 2-1: USB disconnect, device number 5 [ 373.261561][ T4394] usb 1-1: Firmware version (0.0) predates our first public release. [ 373.288517][ T4394] usb 1-1: Please update to version 0.2 or newer [ 373.356977][ T4394] usb 1-1: atusb_probe: initialization failed, error = -110 [ 373.381585][ T4394] atusb: probe of 1-1:0.0 failed with error -110 [ 373.687104][ T4250] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 374.387098][ T4250] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 374.402077][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.414748][ T4250] usb 5-1: Product: syz [ 374.419992][ T4250] usb 5-1: Manufacturer: syz [ 374.424924][ T4250] usb 5-1: SerialNumber: syz [ 374.449432][ T4250] usb 5-1: config 0 descriptor?? [ 374.494666][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1190'. [ 374.652931][ T4395] usb 1-1: USB disconnect, device number 8 [ 374.803745][ T8602] fuse: Unknown parameter 'group_i00000000000000000000' [ 375.075533][ T8609] loop3: detected capacity change from 0 to 512 [ 375.120630][ T8609] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 375.145738][ T8612] No such timeout policy "syz0" [ 375.239797][ T8609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 375.291127][ T8609] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1196: corrupted in-inode xattr [ 375.309518][ T8609] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1196: couldn't read orphan inode 15 (err -117) [ 375.324110][ T8609] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 375.466973][ T4250] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1c, error -71 [ 375.475188][ T4250] usb 5-1: Firmware version (0.0) predates our first public release. [ 375.530993][ T4250] usb 5-1: Please update to version 0.2 or newer [ 375.631528][ T4250] usb 5-1: atusb_probe: initialization failed, error = -71 [ 375.737833][ T4250] atusb: probe of 5-1:0.0 failed with error -71 [ 376.039921][ T4250] usb 5-1: USB disconnect, device number 5 [ 376.370693][ T8621] vxcan1 speed is unknown, defaulting to 1000 [ 377.877811][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1207'. [ 378.138185][ T8642] vxcan1 speed is unknown, defaulting to 1000 [ 378.278770][ T8662] No such timeout policy "syz0" [ 378.932079][ T8669] loop5: detected capacity change from 0 to 512 [ 379.029336][ T8669] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 379.096446][ T8669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 379.157321][ T8669] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.1211: corrupted in-inode xattr [ 379.257531][ T8669] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1211: couldn't read orphan inode 15 (err -117) [ 379.311089][ T8669] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 380.423632][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 380.772476][ T8716] loop3: detected capacity change from 0 to 512 [ 380.833196][ T8716] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 380.860040][ T8716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 380.871253][ T8716] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1227: corrupted in-inode xattr [ 380.885057][ T8716] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1227: couldn't read orphan inode 15 (err -117) [ 380.905102][ T8716] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 382.877651][ T8749] loop1: detected capacity change from 0 to 512 [ 382.987072][ T8749] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 383.047883][ T8749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 383.091508][ T8749] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.1239: corrupted in-inode xattr [ 383.127845][ T8749] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1239: couldn't read orphan inode 15 (err -117) [ 383.199925][ T8749] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 384.199117][ T8762] No such timeout policy "syz0" [ 384.248560][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.254892][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.546813][ T4394] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 385.733841][ T8791] loop5: detected capacity change from 0 to 512 [ 385.793875][ T8791] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 385.796881][ T4394] usb 5-1: Using ep0 maxpacket: 8 [ 385.893578][ T8791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 385.913675][ T8791] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.1251: corrupted in-inode xattr [ 385.927257][ T4394] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.975077][ T4394] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.997339][ T8791] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1251: couldn't read orphan inode 15 (err -117) [ 386.024540][ T8791] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 386.080045][ T4394] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.292628][ T4394] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.588815][ T4394] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.656364][ T4394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.673982][ T8802] No such timeout policy "syz0" [ 387.052191][ T4394] usb 5-1: GET_CAPABILITIES returned 0 [ 387.058910][ T8813] process 'syz.3.1259' launched './file0' with NULL argv: empty string added [ 387.062247][ T4394] usbtmc 5-1:16.0: can't read capabilities [ 387.276839][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.323324][ T4250] usb 5-1: USB disconnect, device number 6 [ 388.329742][ T8846] vxcan1 speed is unknown, defaulting to 1000 [ 388.896818][ T4250] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 389.178187][ T4250] usb 1-1: Using ep0 maxpacket: 32 [ 389.232866][ T8857] device syzkaller0 entered promiscuous mode [ 389.376848][ T4250] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.407921][ T4250] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.462714][ T4250] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 389.533422][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.573260][ T4250] usb 1-1: config 0 descriptor?? [ 390.496880][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 390.867009][ T1108] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 390.878455][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 390.916887][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.946312][ T1108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.963114][ T4178] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 391.001709][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.111985][ T1108] usb 5-1: config 0 descriptor?? [ 391.157078][ T8887] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.179635][ T1108] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 391.497161][ T4178] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 391.529700][ T4178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.572676][ T4178] usb 6-1: Product: syz [ 391.595558][ T4178] usb 6-1: Manufacturer: syz [ 391.622835][ T4178] usb 6-1: SerialNumber: syz [ 391.663317][ T4178] usb 6-1: config 0 descriptor?? [ 391.778972][ T4178] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 007 [ 392.206886][ T4178] (null): failure reading functionality [ 392.345859][ T4178] i2c i2c-1: connected i2c-tiny-usb device [ 392.452565][ T4215] usb 6-1: USB disconnect, device number 7 [ 392.854561][ T8852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.884440][ T4215] usb 1-1: USB disconnect, device number 9 [ 393.266212][ T4395] usb 5-1: USB disconnect, device number 7 [ 393.742392][ T8982] loop0: detected capacity change from 0 to 512 [ 393.786758][ T4395] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 393.800436][ T8982] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 393.934559][ T8985] loop3: detected capacity change from 0 to 512 [ 394.004510][ T25] audit: type=1326 audit(1747460298.049:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.0.1304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aad321969 code=0x0 [ 394.026278][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.122964][ T8985] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 394.457025][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.558060][ T8985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 394.646054][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.656222][ T8985] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1308: corrupted in-inode xattr [ 394.669785][ T4395] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 394.680408][ T8985] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1308: couldn't read orphan inode 15 (err -117) [ 394.696805][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.725614][ T8985] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 394.752520][ T4395] usb 5-1: config 0 descriptor?? [ 395.606817][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.627079][ T4395] usbhid 5-1:0.0: can't add hid device: -71 [ 395.633205][ T4395] usbhid: probe of 5-1:0.0 failed with error -71 [ 395.658470][ T4395] usb 5-1: USB disconnect, device number 8 [ 396.074586][ T9030] loop1: detected capacity change from 0 to 512 [ 396.159616][ T9030] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 396.454261][ T25] audit: type=1326 audit(1747460300.509:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.1.1321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 396.475822][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.646854][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.686860][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 398.371841][ T9073] overlayfs: missing 'lowerdir' [ 398.726765][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.115859][ T9071] device syzkaller0 entered promiscuous mode [ 399.329962][ T9078] loop5: detected capacity change from 0 to 512 [ 399.386192][ T9078] EXT4-fs (loop5): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 399.448260][ T25] audit: type=1326 audit(1747460303.499:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.5.1336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98237a6969 code=0x0 [ 399.766786][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.806757][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.846781][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 402.236133][ T9109] ALSA: mixer_oss: invalid OSS volume '' [ 402.873520][ T9115] netlink: 336 bytes leftover after parsing attributes in process `syz.5.1349'. [ 402.886758][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.196845][ T4395] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 403.227809][ T9124] overlayfs: missing 'lowerdir' [ 403.696967][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.926784][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.966759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.006830][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.319363][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.812813][ T4395] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 406.822117][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.832743][ T4395] usb 2-1: config 0 descriptor?? [ 406.861220][ T4395] usb 2-1: can't set config #0, error -71 [ 406.869315][ T4395] usb 2-1: USB disconnect, device number 6 [ 407.046780][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.266950][ T4215] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 407.656948][ T4215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.676811][ T4178] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 408.237020][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.327019][ T4215] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 408.367892][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.376947][ T4178] usb 6-1: Using ep0 maxpacket: 32 [ 408.392409][ T4215] usb 4-1: Product: syz [ 408.423476][ T4215] usb 4-1: Manufacturer: syz [ 408.438580][ T4215] usb 4-1: SerialNumber: syz [ 408.487757][ T4215] usb 4-1: config 0 descriptor?? [ 408.496974][ T4178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.515227][ T4178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.536795][ T4178] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 408.561269][ T4178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.569819][ T4215] usb 4-1: can't set config #0, error -71 [ 408.585088][ T4215] usb 4-1: USB disconnect, device number 6 [ 408.626053][ T4178] usb 6-1: config 0 descriptor?? [ 408.998148][ T9189] overlayfs: missing 'lowerdir' [ 409.251863][ T4178] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 409.286759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.835396][ T9159] batman_adv: batadv0: Adding interface: vxlan0 [ 409.883631][ T9159] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.062752][ T9159] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 410.159944][ T4396] usb 6-1: USB disconnect, device number 8 [ 410.326775][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.366766][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.940107][ T9249] loop3: detected capacity change from 0 to 512 [ 411.972625][ T9249] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 412.034613][ T25] audit: type=1326 audit(1747460316.079:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.3.1391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94d361969 code=0x0 [ 412.406841][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 413.446956][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.486782][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.158755][ T9264] device syzkaller0 entered promiscuous mode [ 415.526754][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.770434][ T9287] kvm: pic: non byte write [ 415.819340][ T9285] kvm: pic: non byte write [ 416.192070][ T9298] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 416.201174][ T9298] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 416.245668][ T9282] syz.3.1401 (9282) used greatest stack depth: 19616 bytes left [ 416.566769][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 417.088861][ T9307] IPVS: set_ctl: invalid protocol: 43 172.20.20.15:20003 [ 417.606749][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 417.645603][ T9329] device syzkaller0 entered promiscuous mode [ 417.752164][ T9333] kvm: pic: non byte write [ 417.804510][ T9333] kvm: pic: non byte write [ 418.056445][ T9347] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 418.065462][ T9347] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.646770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.686768][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.844785][ T9365] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 419.979905][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 420.656844][ T4396] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 420.726944][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.097457][ T4394] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 421.256895][ T4396] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 421.276434][ T4396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.286605][ T4396] usb 6-1: Product: syz [ 421.290942][ T4396] usb 6-1: Manufacturer: syz [ 421.295550][ T4396] usb 6-1: SerialNumber: syz [ 421.329014][ T4396] usb 6-1: config 0 descriptor?? [ 421.346788][ T4394] usb 5-1: Using ep0 maxpacket: 32 [ 421.527068][ T4394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.619514][ T9405] netlink: 'syz.1.1439': attribute type 12 has an invalid length. [ 421.627676][ T4250] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 421.639867][ T4394] usb 5-1: config 7 has an invalid interface number: 111 but max is 0 [ 421.656746][ T4394] usb 5-1: config 7 has no interface number 0 [ 421.766770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.857234][ T4394] usb 5-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 421.904617][ T4394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.914841][ T4394] usb 5-1: Product: syz [ 421.946924][ T4394] usb 5-1: Manufacturer: syz [ 421.951798][ T4394] usb 5-1: SerialNumber: syz [ 422.046905][ T4250] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.304170][ T4394] usb 5-1: bad CDC descriptors [ 422.316897][ T4250] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 422.336536][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.352428][ T4394] usb 5-1: USB disconnect, device number 9 [ 422.356889][ T4250] usb 1-1: Product: syz [ 422.362455][ T4250] usb 1-1: Manufacturer: syz [ 422.391905][ T9405] xt_connbytes: Forcing CT accounting to be enabled [ 422.398753][ T4250] usb 1-1: SerialNumber: syz [ 422.426153][ T4250] usb 1-1: config 0 descriptor?? [ 422.431890][ T9405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.500077][ T4250] ims_pcu 1-1:0.0: Zero length descriptor [ 422.501342][ T4396] usb 6-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 422.516248][ T4250] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 422.525940][ T4396] usb 6-1: Firmware version (0.0) predates our first public release. [ 422.566827][ T4396] usb 6-1: Please update to version 0.2 or newer [ 422.609011][ T4396] usb 6-1: atusb_probe: initialization failed, error = -71 [ 422.617231][ T4396] atusb: probe of 6-1:0.0 failed with error -71 [ 422.648626][ T4396] usb 6-1: USB disconnect, device number 9 [ 422.816331][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.823777][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 422.854294][ T4394] usb 1-1: USB disconnect, device number 10 [ 422.932991][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.947462][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.972884][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 423.302810][ T9427] KVM: debugfs: duplicate directory 9427-4 [ 423.334482][ T9346] Set syz1 is full, maxelem 65536 reached [ 423.342374][ T4396] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 423.596874][ T4396] usb 6-1: Using ep0 maxpacket: 32 [ 423.722513][ T4396] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 423.762317][ T4396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.808370][ T4396] usb 6-1: config 0 descriptor?? [ 423.856798][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 423.862875][ T4396] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 424.082969][ T9419] udc-core: couldn't find an available UDC or it's busy [ 424.124704][ T9419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.256877][ T4396] gspca_vc032x: reg_r err -71 [ 424.264758][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.281159][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.292288][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.308468][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.323783][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.335902][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.351071][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.363953][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.374973][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.389374][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.401076][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.409957][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.423362][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.431015][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.438637][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.446275][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.462119][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.475027][ T4396] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.483896][ T4396] gspca_vc032x: Unknown sensor... [ 424.498101][ T4396] vc032x: probe of 6-1:0.0 failed with error -22 [ 424.524630][ T4396] usb 6-1: USB disconnect, device number 10 [ 424.873355][ T9461] KVM: debugfs: duplicate directory 9461-4 [ 424.886775][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.963637][ T9467] usb usb8: usbfs: process 9467 (syz.0.1456) did not claim interface 0 before use [ 425.936750][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 426.106790][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 426.576885][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.588089][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.598811][ T26] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 426.608255][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.627961][ T26] usb 4-1: config 0 descriptor?? [ 426.840913][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 426.976817][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 427.086828][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 427.157018][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 427.163081][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 427.181584][ T26] usb 4-1: USB disconnect, device number 7 [ 427.207170][ T21] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 427.215504][ T21] usb 2-1: config 0 has no interface number 0 [ 427.222045][ T21] usb 2-1: config 0 interface 126 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 427.233378][ T21] usb 2-1: config 0 interface 126 has no altsetting 0 [ 427.397646][ T21] usb 2-1: New USB device found, idVendor=0411, idProduct=0001, bcdDevice= 7.f4 [ 427.416961][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.440565][ T21] usb 2-1: Product: syz [ 427.444868][ T21] usb 2-1: Manufacturer: syz [ 427.456740][ T21] usb 2-1: SerialNumber: syz [ 427.470182][ T21] usb 2-1: config 0 descriptor?? [ 428.016779][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.399086][ T9547] nvme_fabrics: missing parameter 'transport=%s' [ 428.406587][ T9547] nvme_fabrics: missing parameter 'nqn=%s' [ 428.487252][ T21] pegasus: probe of 2-1:0.126 failed with error -71 [ 428.498303][ T21] usb 2-1: USB disconnect, device number 7 [ 428.545026][ T4215] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 428.956895][ T4215] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.967151][ T4250] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 429.046914][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 429.072776][ T4215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 429.197251][ T4215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 429.208993][ T4215] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 429.219446][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.717811][ T9541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 429.724926][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.803694][ T4215] hub 4-1:1.0: bad descriptor, ignoring hub [ 429.821587][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.838798][ T4215] hub: probe of 4-1:1.0 failed with error -5 [ 429.870255][ T4215] cdc_wdm 4-1:1.0: skipping garbage [ 429.895734][ T4250] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 429.906769][ T4215] cdc_wdm 4-1:1.0: skipping garbage [ 429.936216][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.947197][ T4215] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 429.953148][ T4215] cdc_wdm 4-1:1.0: Unknown control protocol [ 429.961167][ T4250] usb 6-1: config 0 descriptor?? [ 430.096770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 430.116800][ T4394] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 430.510335][ T4250] usbhid 6-1:0.0: can't add hid device: -71 [ 430.520484][ T4250] usbhid: probe of 6-1:0.0 failed with error -71 [ 430.552230][ T4250] usb 6-1: USB disconnect, device number 11 [ 430.616962][ T4394] usb 1-1: unable to get BOS descriptor or descriptor too short [ 430.727030][ T4394] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 430.736743][ T4394] usb 1-1: config 6 has no interface number 0 [ 430.759086][ T4394] usb 1-1: config 6 interface 200 has no altsetting 0 [ 430.946876][ T4394] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 430.966237][ T4394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.983564][ T4394] usb 1-1: Product: syz [ 430.988327][ T4394] usb 1-1: Manufacturer: syz [ 431.026461][ T4394] usb 1-1: SerialNumber: syz [ 431.126761][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.599358][ T4178] usb 4-1: USB disconnect, device number 8 [ 431.616940][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 431.896759][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 432.017418][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.041999][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.081290][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 432.120898][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.151856][ T21] usb 5-1: config 0 descriptor?? [ 432.166754][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 432.574816][ T9615] fuse: Bad value for 'fd' [ 432.654482][ T21] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 432.741580][ T9615] vxcan1 speed is unknown, defaulting to 1000 [ 432.938416][ T4394] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 432.962234][ T21] usb 5-1: USB disconnect, device number 10 [ 432.978532][ T4394] dvb-usb: bulk message failed: -71 (3/0) [ 433.030376][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 433.108508][ T4394] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.139605][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 433.157155][ T4394] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 433.165041][ T4394] usb 1-1: media controller created [ 433.186387][ T4394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.216756][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 433.253717][ T4394] dvb-usb: bulk message failed: -71 (6/0) [ 433.306871][ T4394] dvb-usb: bulk message failed: -71 (6/0) [ 433.314647][ T4394] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 433.378204][ T4394] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 433.410540][ T4394] dvb-usb: schedule remote query interval to 150 msecs. [ 433.417714][ T4394] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 433.485576][ T4394] usb 1-1: USB disconnect, device number 11 [ 433.510221][ T21] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 433.574895][ T4394] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 433.886806][ T4396] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 433.906839][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.968658][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.996779][ T26] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 434.048607][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 434.071276][ T21] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 434.114323][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.176982][ T9626] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 434.217992][ T21] hub 4-1:1.0: bad descriptor, ignoring hub [ 434.246775][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 434.256734][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 434.266918][ T4396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.411137][ T4396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.438874][ T4178] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 434.446806][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.466004][ T21] hub: probe of 4-1:1.0 failed with error -5 [ 434.610254][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 434.615480][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 434.626838][ T26] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 434.740655][ T4396] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 434.806853][ T26] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 434.817181][ T4178] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.851040][ T4178] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 434.862349][ T4396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.878835][ T21] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 434.897740][ T21] cdc_wdm 4-1:1.0: Unknown control protocol [ 434.912729][ T4396] usb 5-1: config 0 descriptor?? [ 434.960645][ T4178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.086914][ T26] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 435.119813][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.160382][ T26] usb 6-1: Product: syz [ 435.164569][ T26] usb 6-1: Manufacturer: syz [ 435.190142][ T26] usb 6-1: SerialNumber: syz [ 435.223218][ T21] usb 4-1: USB disconnect, device number 9 [ 435.248021][ T4178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 435.286771][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 435.467136][ T4396] usbhid 5-1:0.0: can't add hid device: -71 [ 435.473222][ T4396] usbhid: probe of 5-1:0.0 failed with error -71 [ 435.485814][ T4178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 435.528952][ T4396] usb 5-1: USB disconnect, device number 11 [ 435.727096][ T4178] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.746935][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.780975][ T4178] usb 2-1: Product: syz [ 435.785163][ T4178] usb 2-1: Manufacturer: syz [ 435.860398][ T4178] cdc_wdm 2-1:1.0: skipping garbage [ 435.866942][ T4178] cdc_wdm 2-1:1.0: skipping garbage [ 435.889311][ T4178] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 435.906938][ T4178] cdc_wdm 2-1:1.0: Unknown control protocol [ 436.108485][ T9664] vxcan1 speed is unknown, defaulting to 1000 [ 436.326753][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 436.559659][ T9670] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 436.601891][ T9670] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 436.630730][ T4215] usb 2-1: USB disconnect, device number 8 [ 437.382343][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 438.060970][ T4178] usb 6-1: USB disconnect, device number 12 [ 438.406894][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 438.437023][ T9706] loop4: detected capacity change from 0 to 512 [ 438.522189][ T9706] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 438.543229][ T9709] loop0: detected capacity change from 0 to 512 [ 438.612779][ T9709] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 438.678584][ T25] audit: type=1326 audit(1747460342.719:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.4.1533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6676dbd969 code=0x0 [ 438.714770][ T9709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 439.057706][ T9709] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.1534: corrupted in-inode xattr [ 439.074726][ T9709] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1534: couldn't read orphan inode 15 (err -117) [ 439.093910][ T9709] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 439.446768][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 440.190116][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 440.203781][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 440.486770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 440.748095][ T26] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 441.156876][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.186951][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.234725][ T26] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 441.274232][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.306053][ T26] usb 4-1: config 0 descriptor?? [ 441.355189][ T9761] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 441.526766][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 442.576741][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 442.756214][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.825631][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.881242][ T9780] infiniband syz2: set active [ 443.044272][ T9780] device vlan2 left promiscuous mode [ 443.249497][ T9780] device bond0 left promiscuous mode [ 443.307321][ T9780] bridge0: port 1(vlan2) entered disabled state [ 443.345468][ T4395] vxcan1 speed is unknown, defaulting to 1000 [ 443.606766][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 444.466386][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 444.646748][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 444.894880][ T9820] loop4: detected capacity change from 0 to 512 [ 445.034511][ T9820] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 445.067108][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 445.073123][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 445.082162][ T9820] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 445.103538][ T9820] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1563: corrupted in-inode xattr [ 445.116885][ T26] usb 4-1: USB disconnect, device number 10 [ 445.134568][ T9820] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1563: couldn't read orphan inode 15 (err -117) [ 445.157140][ T9820] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 445.304355][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 445.407803][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 445.453598][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 445.480965][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 445.543716][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 445.611646][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 445.646991][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 445.686877][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 445.696365][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 445.706800][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.706871][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.724429][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 446.009680][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.027169][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.125542][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 446.367122][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.415412][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.445855][ T26] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 446.466259][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.495201][ T26] usb 4-1: config 0 descriptor?? [ 446.726894][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 447.066818][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 447.072962][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 447.180180][ T26] usb 4-1: USB disconnect, device number 11 [ 447.766814][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 447.887499][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 448.806826][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 449.618042][ T9924] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 449.846909][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 450.226990][ T9941] loop4: detected capacity change from 0 to 512 [ 450.292841][ T9941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.339275][ T9941] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1601: bad orphan inode 17 [ 450.367189][ T9941] EXT4-fs (loop4): Remounting filesystem read-only [ 450.373740][ T9941] ext4_test_bit(bit=16, block=4) = 1 [ 450.379170][ T9941] is_bad_inode(inode)=0 [ 450.383341][ T9941] NEXT_ORPHAN(inode)=2147418128 [ 450.388245][ T9941] max_ino=32 [ 450.391453][ T9941] i_nlink=0 [ 450.394760][ T9941] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 450.896727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 451.251907][ T4396] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 451.926864][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.535229][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 452.565636][ T9993] bridge0: port 1(bond0) entered disabled state [ 452.670082][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.716241][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.773678][ T9993] team0: Port device geneve0 removed [ 452.876737][ T4396] usb 6-1: Using ep0 maxpacket: 32 [ 452.916976][T10003] loop0: detected capacity change from 0 to 512 [ 452.954120][T10003] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 452.966732][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.997129][ T4396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.008631][T10003] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1615: bad orphan inode 17 [ 453.019320][T10003] EXT4-fs (loop0): Remounting filesystem read-only [ 453.025869][T10003] ext4_test_bit(bit=16, block=4) = 1 [ 453.031500][T10003] is_bad_inode(inode)=0 [ 453.035799][T10003] NEXT_ORPHAN(inode)=2147418128 [ 453.040703][T10003] max_ino=32 [ 453.043912][T10003] i_nlink=0 [ 453.047202][T10003] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 453.075823][ T4396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.085859][ T4396] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 453.094988][ T4396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.114988][ T4396] usb 6-1: config 0 descriptor?? [ 453.283578][T10016] device syzkaller0 entered promiscuous mode [ 453.918640][ T4396] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 454.006807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 454.011112][T10023] loop1: detected capacity change from 0 to 512 [ 454.098758][T10023] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 454.266952][ T4396] usb 6-1: USB disconnect, device number 13 [ 454.284902][ T25] audit: type=1326 audit(1747460358.329:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.1.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 455.046779][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 455.899709][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 455.923530][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 455.941477][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 455.952335][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 455.971505][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 455.980517][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 455.992878][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 456.004695][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 456.031933][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.085274][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.092801][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 456.144405][T10041] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 456.157995][ T4396] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 456.610451][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 457.126776][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 457.167830][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 457.446968][ T4396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.458339][ T4396] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 457.467498][ T4396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.496791][ T4250] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 457.547387][ T4396] usb 6-1: config 0 descriptor?? [ 457.676884][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 457.749840][T10078] loop4: detected capacity change from 0 to 512 [ 457.792172][T10078] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 457.856838][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.868055][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.877892][ T4250] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 457.888212][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.904767][ T4250] usb 1-1: config 0 descriptor?? [ 457.911680][ T25] audit: type=1326 audit(1747460361.949:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10077 comm="syz.4.1639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6676dbd969 code=0x0 [ 457.933325][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.946750][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 458.028114][ T4396] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 458.067777][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.121948][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.166793][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 458.205161][ T1108] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 458.240154][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.249753][ T4396] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000F/input/input12 [ 458.281916][ T1108] usb 2-1: config 0 descriptor?? [ 458.379505][ T4396] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 458.496932][ T4250] usbhid 1-1:0.0: can't add hid device: -71 [ 458.505389][ T4250] usbhid: probe of 1-1:0.0 failed with error -71 [ 458.676811][ T4250] usb 1-1: USB disconnect, device number 12 [ 458.786474][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 458.880341][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.914800][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.072608][ T1108] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 459.095443][ T4396] usb 2-1: USB disconnect, device number 9 [ 459.206734][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 459.299676][ T1108] usb 6-1: USB disconnect, device number 14 [ 459.849992][T10109] fido_id[10109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 459.983709][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 460.033453][T10127] loop0: detected capacity change from 0 to 512 [ 460.096957][T10127] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 460.127949][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1651'. [ 460.139634][ T25] audit: type=1326 audit(1747460364.189:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.0.1653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aad321969 code=0x0 [ 460.194424][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 460.246766][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 460.613563][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.624467][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.633225][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.681811][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 461.236736][ T4396] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 461.286792][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 461.485798][T10161] device geneve2 entered promiscuous mode [ 461.791390][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.804096][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.818656][ T4396] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 461.838616][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.204972][ T4396] usb 4-1: config 0 descriptor?? [ 462.326926][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 462.456917][ T4395] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 462.739588][ T4395] usb 5-1: Using ep0 maxpacket: 32 [ 462.745045][ T4396] usbhid 4-1:0.0: can't add hid device: -71 [ 462.755234][ T4396] usbhid: probe of 4-1:0.0 failed with error -71 [ 462.762099][ T21] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 462.779139][ T4396] usb 4-1: USB disconnect, device number 12 [ 462.902109][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.913628][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.927993][ T4395] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 462.939945][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.966262][ T4395] usb 5-1: config 0 descriptor?? [ 463.187520][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.205840][ T21] usb 6-1: config 0 has no interfaces? [ 463.242774][ T21] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.270080][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.366750][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 463.411808][ T21] usb 6-1: config 0 descriptor?? [ 463.426797][ T4250] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 463.454463][ T4395] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 463.527588][T10198] loop3: detected capacity change from 0 to 512 [ 463.561780][T10198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 463.598501][T10198] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.1672: bad orphan inode 17 [ 463.610492][T10198] EXT4-fs (loop3): Remounting filesystem read-only [ 463.617159][T10198] ext4_test_bit(bit=16, block=4) = 1 [ 463.622524][T10198] is_bad_inode(inode)=0 [ 463.626791][T10198] NEXT_ORPHAN(inode)=2147418128 [ 463.631663][T10198] max_ino=32 [ 463.634851][T10198] i_nlink=0 [ 463.638092][T10198] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 463.695989][T10177] device batadv0 entered promiscuous mode [ 463.729937][T10177] device macsec1 entered promiscuous mode [ 463.897381][T10177] device batadv0 left promiscuous mode [ 463.966875][ T4250] usb 2-1: config 0 has no interfaces? [ 464.416823][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.474624][ T21] usb 6-1: USB disconnect, device number 15 [ 464.481487][ T26] usb 5-1: USB disconnect, device number 12 [ 464.638472][ T4250] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 464.679439][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.696046][ T4250] usb 2-1: Product: syz [ 464.713660][ T4250] usb 2-1: Manufacturer: syz [ 464.732097][ T4250] usb 2-1: SerialNumber: syz [ 464.752376][ T4250] usb 2-1: config 0 descriptor?? [ 465.087171][T10226] netlink: 'syz.4.1681': attribute type 3 has an invalid length. [ 465.446727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.576823][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 465.655548][ T4395] usb 2-1: USB disconnect, device number 10 [ 466.346828][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.364884][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.375466][ T21] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 466.395772][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.426261][ T21] usb 4-1: config 0 descriptor?? [ 466.486751][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 466.782434][T10264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.819097][T10264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.857611][T10264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.886918][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 467.007048][T10264] batman_adv: batadv0: Removing interface: vxlan0 [ 467.037271][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 467.043418][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 467.096909][ T21] usb 4-1: USB disconnect, device number 13 [ 467.136732][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 467.277006][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.345370][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.376845][ T26] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 467.410256][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.455670][ T26] usb 2-1: config 0 descriptor?? [ 467.526723][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 467.707148][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 467.770643][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 467.947105][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 467.998154][ T26] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 468.006408][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 468.017568][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 468.024936][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 468.314198][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 468.485774][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 468.566759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 468.665409][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 468.710360][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 468.760841][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.783180][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.821391][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 468.898554][ T4250] usb 2-1: USB disconnect, device number 11 [ 468.960468][ T4395] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 469.336983][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.347868][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 469.348703][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.385988][ T4395] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 469.398720][ T4395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.419394][ T4395] usb 4-1: config 0 descriptor?? [ 469.458838][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 469.616730][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 470.357269][ T4395] usbhid 4-1:0.0: can't add hid device: -71 [ 470.363389][ T4395] usbhid: probe of 4-1:0.0 failed with error -71 [ 470.397653][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.405672][ T4395] usb 4-1: USB disconnect, device number 14 [ 470.511640][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.527202][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.656851][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 470.726259][T10363] loop4: detected capacity change from 0 to 512 [ 470.781515][T10363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 470.827669][T10363] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1724: bad orphan inode 17 [ 470.838378][T10363] EXT4-fs (loop4): Remounting filesystem read-only [ 470.844915][T10363] ext4_test_bit(bit=16, block=4) = 1 [ 470.850324][T10363] is_bad_inode(inode)=0 [ 470.854495][T10363] NEXT_ORPHAN(inode)=2147418128 [ 470.859420][T10363] max_ino=32 [ 470.862942][T10363] i_nlink=0 [ 470.866762][T10363] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 471.437015][ T4250] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 471.696767][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 472.314211][ T4250] usb 6-1: Using ep0 maxpacket: 32 [ 472.446995][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.494821][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.533212][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 472.540467][ T4250] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 472.549152][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 472.601609][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 472.608152][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.619670][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 472.641577][ T4250] usb 6-1: config 0 descriptor?? [ 472.691448][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 472.712734][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 472.726793][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 472.747141][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 472.837686][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.873355][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.912506][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.950062][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 473.146523][ T4250] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 473.234244][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 473.512338][T10426] device veth3 entered promiscuous mode [ 473.545327][ T4395] usb 6-1: USB disconnect, device number 16 [ 473.611477][T10433] loop0: detected capacity change from 0 to 512 [ 473.661189][T10433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 473.681959][T10433] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1744: bad orphan inode 17 [ 473.693213][T10433] EXT4-fs (loop0): Remounting filesystem read-only [ 473.699997][T10433] ext4_test_bit(bit=16, block=4) = 1 [ 473.705296][T10433] is_bad_inode(inode)=0 [ 473.709606][T10433] NEXT_ORPHAN(inode)=2147418128 [ 473.714501][T10433] max_ino=32 [ 473.717831][T10433] i_nlink=0 [ 473.721095][T10433] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 473.766767][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 474.842051][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 475.621302][T10496] No such timeout policy "syz0" [ 475.729497][T10495] loop0: detected capacity change from 0 to 512 [ 475.842849][T10495] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 475.846743][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 475.885946][T10495] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1759: bad orphan inode 17 [ 475.896308][T10495] EXT4-fs (loop0): Remounting filesystem read-only [ 475.902861][T10495] ext4_test_bit(bit=16, block=4) = 1 [ 475.908157][T10495] is_bad_inode(inode)=0 [ 475.912297][T10495] NEXT_ORPHAN(inode)=2147418128 [ 475.917159][T10495] max_ino=32 [ 475.920344][T10495] i_nlink=0 [ 475.923557][T10495] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 476.886759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 477.820705][T10523] device syzkaller0 entered promiscuous mode [ 477.926762][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 478.966847][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 480.006727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 481.046759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 482.086709][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 482.266037][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'. [ 482.452789][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1787'. [ 482.636812][ T1325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 482.976829][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 483.126755][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 483.629189][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.896989][ T1325] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.930071][ T1325] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 483.976777][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.012522][ T1325] usb 2-1: config 0 descriptor?? [ 484.166727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 484.396961][T10623] sctp: [Deprecated]: syz.0.1796 (pid 10623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.396961][T10623] Use struct sctp_sack_info instead [ 484.427230][T10621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1797'. [ 484.548456][T10628] No such timeout policy "syz0" [ 484.754691][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 484.842428][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 484.895312][T10643] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1803'. [ 484.975510][T10643] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 484.981847][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 485.206813][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 485.236775][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 485.356795][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.373939][ T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.405045][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 485.443710][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.503909][ T21] usb 5-1: config 0 descriptor?? [ 485.522030][T10652] loop5: detected capacity change from 0 to 512 [ 485.596079][T10652] EXT4-fs (loop5): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 485.659175][ T21] usb 2-1: USB disconnect, device number 12 [ 485.886674][ T25] audit: type=1326 audit(1747460389.929:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.5.1806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98237a6969 code=0x0 [ 486.246767][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 486.357009][T10674] No such timeout policy "syz0" [ 486.876735][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 486.908131][T10694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1820'. [ 487.116848][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 487.268281][ T21] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 487.280946][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.286909][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 487.340699][ T21] usb 2-1: config 0 descriptor?? [ 488.174788][ T21] as10x_usb: device has been detected [ 488.326782][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 488.395306][ T21] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 488.484676][ T21] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 488.839734][ T21] as10x_usb: error during firmware upload part1 [ 488.849647][ T21] Registered device nBox DVB-T Dongle [ 489.003653][ T21] usb 2-1: USB disconnect, device number 13 [ 489.202858][ T21] Unregistered device nBox DVB-T Dongle [ 489.222584][ T21] as10x_usb: device has been disconnected [ 489.366771][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 489.503689][T10721] loop5: detected capacity change from 0 to 512 [ 489.546879][T10721] EXT4-fs (loop5): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 489.661982][T10724] No such timeout policy "syz0" [ 489.722972][ T25] audit: type=1326 audit(1747460393.769:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.5.1828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98237a6969 code=0x0 [ 489.744683][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.796745][ T21] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 490.061428][ T26] usb 5-1: USB disconnect, device number 13 [ 490.359176][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1836'. [ 490.416766][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.446765][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.958201][T10750] sched: RT throttling activated [ 492.486730][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 493.019973][T10771] No such timeout policy "syz0" [ 493.217349][T10775] loop0: detected capacity change from 0 to 512 [ 493.526755][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 494.011866][T10775] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 494.091820][ T25] audit: type=1326 audit(1747460398.139:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aad321969 code=0x0 [ 494.566721][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 494.872026][T10794] input: syz0 as /devices/virtual/input/input15 [ 494.969147][T10797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.767853][T10809] loop4: detected capacity change from 0 to 512 [ 496.807214][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 496.868157][T10809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 496.893539][T10809] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1852: bad orphan inode 17 [ 496.904851][T10809] EXT4-fs (loop4): Remounting filesystem read-only [ 496.911571][T10809] ext4_test_bit(bit=16, block=4) = 1 [ 496.917040][T10809] is_bad_inode(inode)=0 [ 496.921225][T10809] NEXT_ORPHAN(inode)=2147418128 [ 496.926085][T10809] max_ino=32 [ 496.929371][T10809] i_nlink=0 [ 496.932647][T10809] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 497.328527][T10819] No such timeout policy "syz0" [ 497.642945][T10828] loop0: detected capacity change from 0 to 512 [ 497.785004][T10828] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 497.846835][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 497.943988][ T25] audit: type=1326 audit(1747460401.989:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.0.1860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aad321969 code=0x0 [ 498.886783][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 499.565690][T10866] loop1: detected capacity change from 0 to 512 [ 499.589320][T10866] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 499.785087][ T25] audit: type=1326 audit(1747460403.829:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 499.926862][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 500.346274][T10875] tipc: Cannot configure node identity twice [ 500.966781][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 501.295204][T10888] vxcan1 speed is unknown, defaulting to 1000 [ 501.447208][ T1325] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 501.726750][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 501.846992][ T1325] usb 1-1: config 0 has no interfaces? [ 501.927039][ T1325] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.962135][ T1325] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.004037][ T1325] usb 1-1: Manufacturer: syz [ 502.008947][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 502.095064][T10906] loop1: detected capacity change from 0 to 512 [ 502.102279][ T1325] usb 1-1: config 0 descriptor?? [ 502.247379][T10906] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 502.316946][ T25] audit: type=1326 audit(1747460406.359:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10905 comm="syz.1.1887" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 502.628276][T10888] device lo entered promiscuous mode [ 502.717739][T10888] device tunl0 entered promiscuous mode [ 502.725019][T10888] device gre0 entered promiscuous mode [ 502.732413][T10888] device gretap0 entered promiscuous mode [ 502.738602][T10888] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 502.792369][ T4395] usb 1-1: USB disconnect, device number 13 [ 502.886135][ T25] audit: type=1107 audit(1747460406.929:37): pid=10910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 503.056740][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 503.326791][ T21] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 503.807715][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.066824][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.084785][ T21] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 504.086744][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 504.111150][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.179488][ T21] usb 2-1: config 0 descriptor?? [ 504.498256][T10934] loop5: detected capacity change from 0 to 512 [ 505.126745][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 506.166718][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 506.330881][T10934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 506.735295][T10934] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1893: bad orphan inode 17 [ 506.745757][T10934] EXT4-fs (loop5): Remounting filesystem read-only [ 506.752336][T10934] ext4_test_bit(bit=16, block=4) = 1 [ 506.757683][T10934] is_bad_inode(inode)=0 [ 506.761841][T10934] NEXT_ORPHAN(inode)=2147418128 [ 506.766699][T10934] max_ino=32 [ 506.769881][T10934] i_nlink=0 [ 506.773089][T10934] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 506.793150][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.896874][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 506.903292][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 506.938971][ T21] usb 2-1: USB disconnect, device number 15 [ 507.130444][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.136844][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.223204][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 507.298059][T10960] tipc: Enabling of bearer rejected, failed to enable media [ 507.445424][T10966] loop1: detected capacity change from 0 to 512 [ 507.476964][ T4395] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 507.542008][T10966] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 507.580783][ T25] audit: type=1326 audit(1747460411.629:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10964 comm="syz.1.1906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 507.716987][ T4395] usb 4-1: Using ep0 maxpacket: 32 [ 507.837095][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.993187][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.009255][T10980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 508.038279][ T4395] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 508.051613][ T4395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.178226][ T4395] usb 4-1: config 0 descriptor?? [ 508.256715][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 508.664465][ T4395] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 508.886822][ T4395] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 508.961259][T11000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.041050][ T26] usb 4-1: USB disconnect, device number 15 [ 509.276933][ T4395] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 509.286759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 509.291540][ T4395] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 509.345836][ T4395] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 509.404154][ T4395] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 509.468380][ T4395] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 509.687034][ T4395] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.726766][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.766790][ T4395] usb 1-1: Product: syz [ 509.785731][ T4395] usb 1-1: Manufacturer: syz [ 509.811586][ T4395] usb 1-1: SerialNumber: syz [ 510.177501][T10995] Cannot find add_set index 0 as target [ 510.326803][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 510.647346][ T4395] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 510.771777][ T4395] usb 1-1: USB disconnect, device number 14 [ 511.111156][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.190699][T11021] loop5: detected capacity change from 0 to 512 [ 511.245937][T11021] EXT4-fs (loop5): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 511.376846][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 511.432323][ T4178] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 511.796740][ T4178] usb 4-1: Using ep0 maxpacket: 8 [ 511.941821][ T25] audit: type=1326 audit(1747460415.999:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.5.1923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98237a6969 code=0x0 [ 512.016923][ T4178] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.373114][ T4178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.375830][T11037] input: syz0 as /devices/virtual/input/input16 [ 512.416731][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 512.450586][ T4178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.482436][ T4178] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.628671][ T4178] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.676856][ T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 512.691498][ T4178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.981758][ T4178] usb 4-1: usb_control_msg returned -32 [ 512.987775][ T4178] usbtmc 4-1:16.0: can't read capabilities [ 513.056902][ T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.088594][ T21] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.117411][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.136881][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.167086][T11039] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 513.174719][T11047] No such timeout policy "syz0" [ 513.419891][ T21] usb 1-1: USB disconnect, device number 15 [ 513.452491][T11059] Cannot find set identified by id 0 to match [ 513.460194][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 514.224589][T11070] loop4: detected capacity change from 0 to 512 [ 514.286732][T11070] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 514.301232][ T25] audit: type=1326 audit(1747460418.349:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.4.1939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6676dbd969 code=0x0 [ 514.407813][ T26] usb 4-1: USB disconnect, device number 16 [ 514.486709][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 515.341268][T11103] loop4: detected capacity change from 0 to 512 [ 515.373015][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1949'. [ 515.536851][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 516.566707][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 516.707192][T11103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 516.895582][T11103] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1947: bad orphan inode 17 [ 516.906452][T11103] EXT4-fs (loop4): Remounting filesystem read-only [ 516.913075][T11103] ext4_test_bit(bit=16, block=4) = 1 [ 516.918471][T11103] is_bad_inode(inode)=0 [ 516.922633][T11103] NEXT_ORPHAN(inode)=2147418128 [ 516.927511][T11103] max_ino=32 [ 516.930741][T11103] i_nlink=0 [ 516.934013][T11103] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 517.240928][T11119] No such timeout policy "syz0" [ 517.454892][T11129] device syzkaller0 entered promiscuous mode [ 517.606902][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 517.686924][ T4178] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 517.939584][ T4178] usb 2-1: Using ep0 maxpacket: 32 [ 518.057027][ T4178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.077164][ T4178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.133622][ T4178] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 518.158137][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.336221][ T4178] usb 2-1: config 0 descriptor?? [ 518.646783][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 519.687171][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 520.361775][T11160] loop5: detected capacity change from 0 to 512 [ 520.726711][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 520.819497][T11160] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 520.891356][T11160] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1967: bad orphan inode 17 [ 520.907086][T11160] EXT4-fs (loop5): Remounting filesystem read-only [ 520.913807][T11160] ext4_test_bit(bit=16, block=4) = 1 [ 520.919427][T11160] is_bad_inode(inode)=0 [ 520.923592][T11160] NEXT_ORPHAN(inode)=2147418128 [ 520.928543][T11160] max_ino=32 [ 520.931746][T11160] i_nlink=0 [ 520.935018][T11160] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 520.976854][ T4178] usbhid 2-1:0.0: can't add hid device: -71 [ 521.001217][ T4178] usbhid: probe of 2-1:0.0 failed with error -71 [ 521.093667][ T4178] usb 2-1: USB disconnect, device number 16 [ 521.126116][T11169] No such timeout policy "syz0" [ 521.340304][T11174] device syzkaller0 entered promiscuous mode [ 521.766832][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 522.565354][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 522.806749][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 523.846839][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 524.126768][ T21] usb 5-1: config 0 has no interfaces? [ 524.158251][T11220] No such timeout policy "syz0" [ 524.580997][ T21] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 524.613656][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.631087][T11232] loop1: detected capacity change from 0 to 512 [ 524.643235][ T21] usb 5-1: Product: syz [ 524.650138][ T21] usb 5-1: Manufacturer: syz [ 524.683858][ T21] usb 5-1: SerialNumber: syz [ 524.703208][ T21] usb 5-1: config 0 descriptor?? [ 524.718409][T11232] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 524.761692][ T25] audit: type=1326 audit(1747460428.809:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.1.1989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 524.886725][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 525.438000][T11245] program syz.1.1993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.510848][T11246] batman_adv: batadv0: Adding interface: dummy0 [ 525.537013][T11246] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.616728][T11246] batman_adv: batadv0: Interface activated: dummy0 [ 525.740119][T11244] device syzkaller0 entered promiscuous mode [ 525.784313][T11249] batadv0: mtu less than device minimum [ 525.798493][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.810912][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.822629][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.834388][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.846185][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.858026][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.869727][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.881429][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.893125][T11249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.239648][T11258] No such timeout policy "syz0" [ 526.346417][ T21] usb 5-1: USB disconnect, device number 14 [ 526.614085][T11274] loop1: detected capacity change from 0 to 512 [ 526.682299][T11274] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 526.722345][ T25] audit: type=1326 audit(1747460430.769:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.1.2003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4d48c969 code=0x0 [ 526.816804][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 526.836824][ T4395] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 527.114296][ T4395] usb 1-1: Using ep0 maxpacket: 32 [ 527.119566][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 527.247072][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.260410][ T4395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 527.262646][T11295] No such timeout policy "syz0" [ 527.272563][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.287508][ T4395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 527.302428][ T4395] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.320774][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 527.330965][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.342503][ T21] usb 5-1: config 0 descriptor?? [ 527.460021][T11302] device syzkaller0 entered promiscuous mode [ 527.489896][ T4395] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 527.499141][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.512322][ T4395] usb 1-1: Product: syz [ 527.516518][ T4395] usb 1-1: Manufacturer: syz [ 527.521550][ T4395] usb 1-1: SerialNumber: syz [ 527.537405][ T4395] usb 1-1: config 0 descriptor?? [ 527.781896][ T4395] usb 1-1: USB disconnect, device number 16 [ 527.797666][ T4396] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 527.823101][ T21] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 528.236830][ T4396] usb 4-1: config 0 has no interfaces? [ 528.426942][ T4396] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 528.436812][ T4396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.451374][ T4396] usb 4-1: Product: syz [ 528.457190][T11309] batman_adv: batadv0: Adding interface: dummy0 [ 528.467184][ T4396] usb 4-1: Manufacturer: syz [ 528.471799][ T4396] usb 4-1: SerialNumber: syz [ 528.490141][ T4396] usb 4-1: config 0 descriptor?? [ 528.515627][T11309] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.604548][T11309] batman_adv: batadv0: Interface activated: dummy0 [ 528.611721][ T1325] usb 5-1: USB disconnect, device number 15 [ 529.284458][T11331] loop0: detected capacity change from 0 to 512 [ 529.335765][T11331] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 529.361427][ T4396] usb 4-1: USB disconnect, device number 17 [ 529.490624][T11334] No such timeout policy "syz0" [ 529.498667][ T25] audit: type=1326 audit(1747460433.539:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.0.2019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aad321969 code=0x0 [ 531.206705][ C0] net_ratelimit: 35 callbacks suppressed [ 531.206725][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.628770][T11375] loop3: detected capacity change from 0 to 512 [ 531.715911][T11375] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 531.760467][ T25] audit: type=1326 audit(1747460435.809:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.3.2036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94d361969 code=0x0 [ 532.110410][T11381] device syzkaller1 entered promiscuous mode [ 532.246945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.896807][ T21] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 533.186755][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 533.286753][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 533.331180][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.364162][ T21] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 533.425593][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.448779][ T21] usb 6-1: config 0 descriptor?? [ 534.299785][ T21] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 534.326111][ T21] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 534.326748][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 534.344015][ T21] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 534.377668][ T21] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 534.396571][ T21] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 534.419093][ T21] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 534.721581][T11392] i2c i2c-1: unsupported multi-msg i2c transaction [ 534.763577][ T21] usb 6-1: USB disconnect, device number 17 [ 535.366734][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.406755][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 537.296969][ T4396] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 537.446697][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 537.504298][T11495] fuse: Bad value for 'fd' [ 538.277025][ T4396] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 538.295935][ T4396] usb 6-1: config 0 has no interface number 0 [ 538.302978][ T4396] usb 6-1: config 0 interface 29 has no altsetting 0 [ 538.466893][ T21] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 538.486732][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 538.507278][ T4396] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 538.526863][ T4396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.556390][ T4396] usb 6-1: Product: syz [ 538.570109][ T4396] usb 6-1: Manufacturer: syz [ 538.594095][ T4396] usb 6-1: SerialNumber: syz [ 538.614003][ T4396] usb 6-1: config 0 descriptor?? [ 538.716251][T11517] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 538.736785][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 538.740682][T11505] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 538.753854][T11517] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 538.776724][T11505] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 538.886934][ T4396] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 538.895379][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.908707][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.919734][ T21] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 538.929247][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.947461][ T21] usb 4-1: config 0 descriptor?? [ 539.090098][T11524] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2084'. [ 539.127846][ T4396] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 539.137861][ T4396] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 539.156771][ T4396] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 539.331768][ T4396] peak_usb: probe of 6-1:0.29 failed with error -22 [ 539.397032][ T4396] usb 6-1: USB disconnect, device number 18 [ 539.413322][ T21] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 539.536694][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 539.752836][ T4396] usb 4-1: USB disconnect, device number 18 [ 540.566722][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 541.200902][T11558] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 541.241735][T11558] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 541.486993][T11576] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.2100'. [ 541.546914][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 541.591417][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 541.606749][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 542.106819][ T4250] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 542.321886][T11593] loop0: detected capacity change from 0 to 512 [ 542.359657][ T4250] usb 6-1: Using ep0 maxpacket: 32 [ 542.393866][T11593] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 542.439310][ T25] audit: type=1326 audit(1747460446.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.0.2114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aad321969 code=0x0 [ 542.476987][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.508279][ T4250] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.556801][ T4178] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 542.646716][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 542.804198][ T4250] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 542.853917][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.926438][ T4250] usb 6-1: config 0 descriptor?? [ 543.062385][T11609] No such timeout policy "syz0" [ 543.187788][ T4178] usb 5-1: config 0 has no interfaces? [ 543.366951][ T4178] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 543.386801][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.394920][ T4178] usb 5-1: Product: syz [ 543.400101][ T4178] usb 5-1: Manufacturer: syz [ 543.404929][ T4178] usb 5-1: SerialNumber: syz [ 543.417651][ T4178] usb 5-1: config 0 descriptor?? [ 543.477913][ T4250] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 543.632128][T11625] input: syz0 as /devices/virtual/input/input18 [ 543.636816][ T21] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 543.696704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 543.715101][ T4395] usb 5-1: USB disconnect, device number 16 [ 543.793735][ T26] usb 6-1: USB disconnect, device number 19 [ 544.047488][ T21] usb 2-1: config 0 has no interfaces? [ 544.227014][ T21] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 544.253492][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.285034][ T21] usb 2-1: Product: syz [ 544.325272][ T21] usb 2-1: Manufacturer: syz [ 544.357472][ T21] usb 2-1: SerialNumber: syz [ 544.393496][ T21] usb 2-1: config 0 descriptor?? [ 544.455166][T11637] No such timeout policy "syz0" [ 544.726723][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 544.785575][T11648] program syz.5.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.824744][ T21] usb 2-1: USB disconnect, device number 17 [ 544.976753][ T4395] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 545.256713][ T4395] usb 1-1: Using ep0 maxpacket: 32 [ 545.388197][ T4395] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 545.396506][ T4395] usb 1-1: config 0 has no interface number 0 [ 545.443666][ T4395] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.472518][ T4395] usb 1-1: config 0 interface 85 has no altsetting 0 [ 545.573820][T11674] No such timeout policy "syz0" [ 545.668185][ T4395] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 545.696959][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.722201][ T4395] usb 1-1: Product: syz [ 545.742483][ T4395] usb 1-1: Manufacturer: syz [ 545.766694][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 545.780469][ T4395] usb 1-1: SerialNumber: syz [ 545.801238][ T4395] usb 1-1: config 0 descriptor?? [ 546.492835][ T4395] appletouch 1-1:0.85: Geyser mode initialized. [ 546.500927][ T4395] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input19 [ 546.614840][T11705] No such timeout policy "syz0" [ 546.731052][ T26] usb 1-1: USB disconnect, device number 17 [ 546.806724][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 546.832637][ T26] appletouch 1-1:0.85: input: appletouch disconnected [ 547.283291][T11719] loop5: detected capacity change from 0 to 512 [ 547.846723][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 548.006955][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 548.007047][T11719] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 548.034100][T11719] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.2151: bad orphan inode 17 [ 548.044831][T11719] EXT4-fs (loop5): Remounting filesystem read-only [ 548.051471][T11719] ext4_test_bit(bit=16, block=4) = 1 [ 548.056848][T11719] is_bad_inode(inode)=0 [ 548.061010][T11719] NEXT_ORPHAN(inode)=2147418128 [ 548.065892][T11719] max_ino=32 [ 548.069221][T11719] i_nlink=0 [ 548.072483][T11719] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,debug_want_extra_isize=0x000000000000006e,block_validity,resgid=0x0000000000000000,quota,. Quota mode: writeback. [ 548.268930][T11736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2158'. [ 548.420590][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'. [ 548.790019][T11752] ------------[ cut here ]------------ [ 548.799948][T11752] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 548.886737][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 548.973495][T11752] WARNING: CPU: 1 PID: 11752 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 549.080268][T11752] Modules linked in: [ 549.114699][T11752] CPU: 1 PID: 11752 Comm: syz.5.2161 Not tainted 5.15.182-syzkaller #0 [ 549.153170][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 549.222938][T11752] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 549.290135][T11752] Code: 84 96 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 cc 17 8b 4c 89 e6 89 ea e8 05 bb 6f 00 <0f> 0b e9 07 fd ff ff e8 19 11 51 f8 0f 0b e9 b1 fe ff ff e8 0d 11 [ 549.394386][T11752] RSP: 0018:ffffc9000321f3a0 EFLAGS: 00010246 [ 549.402917][T11752] RAX: f334dcdc55ee8b00 RBX: 0000000002000000 RCX: 0000000000080000 [ 549.412621][T11752] RDX: ffffc90016677000 RSI: 00000000000069fc RDI: 00000000000069fd [ 549.422519][T11752] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172267a8 [ 549.431208][T11752] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88805fa28000 [ 549.441390][T11752] R13: ffff88805fa29290 R14: ffff888060dc0da0 R15: ffff88805fa2a298 [ 549.455349][T11752] FS: 00007f98215cc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 549.472597][T11752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.482441][T11752] CR2: 00002000003a6000 CR3: 000000007ea0c000 CR4: 00000000003526f0 [ 549.498496][T11752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 549.521529][T11752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 549.543090][T11752] Call Trace: [ 549.546424][T11752] [ 549.553732][T11752] ieee80211_set_mcast_rate+0x3b/0x50 [ 549.560131][T11752] ? ieee80211_leave_ibss+0x20/0x20 [ 549.565483][T11752] nl80211_set_mcast_rate+0x338/0x510 [ 549.574316][T11752] ? nl80211_nan_change_config+0x6a0/0x6a0 [ 549.580588][T11752] genl_rcv_msg+0xbc6/0xf40 [ 549.585140][T11752] ? genl_bind+0x370/0x370 [ 549.591012][T11752] ? verify_lock_unused+0x140/0x140 [ 549.596415][T11752] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 549.602888][T11752] ? dev_queue_xmit+0x20/0x20 [ 549.611086][T11752] ? nl80211_nan_change_config+0x6a0/0x6a0 [ 549.638847][T11752] netlink_rcv_skb+0x1e0/0x430 [ 549.643855][T11752] ? genl_bind+0x370/0x370 [ 549.650342][T11752] ? netlink_ack+0xb60/0xb60 [ 549.655164][T11752] ? __lock_acquire+0x7c60/0x7c60 [ 549.679645][T11752] ? preempt_count_add+0x8d/0x190 [ 549.685965][T11752] ? down_read+0x1aa/0x2e0 [ 549.691618][T11752] genl_rcv+0x24/0x40 [ 549.695754][T11752] netlink_unicast+0x77c/0x920 [ 549.709844][T11752] netlink_sendmsg+0x8ab/0xbc0 [ 549.715997][T11752] ? netlink_getsockopt+0x560/0x560 [ 549.726079][T11752] ? aa_sock_msg_perm+0x94/0x150 [ 549.733770][T11752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 549.742060][T11752] ? security_socket_sendmsg+0x7c/0xa0 [ 549.748644][T11752] ? netlink_getsockopt+0x560/0x560 [ 549.755396][T11752] ____sys_sendmsg+0x5a2/0x8c0 [ 549.764396][T11752] ? memset+0x1e/0x40 [ 549.770493][T11752] ? __sys_sendmsg_sock+0x30/0x30 [ 549.779144][T11752] ? import_iovec+0x6f/0xa0 [ 549.785000][T11752] ___sys_sendmsg+0x1f0/0x260 [ 549.799035][T11752] ? __sys_sendmsg+0x250/0x250 [ 549.804020][T11752] ? __fdget+0x18b/0x210 [ 549.811580][T11752] __se_sys_sendmsg+0x190/0x250 [ 549.816869][T11752] ? __x64_sys_sendmsg+0x80/0x80 [ 549.821944][T11752] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 549.831613][T11752] ? lockdep_hardirqs_on+0x94/0x140 [ 549.841597][T11752] do_syscall_64+0x4c/0xa0 [ 549.847738][T11752] ? clear_bhb_loop+0x15/0x70 [ 549.852606][T11752] ? clear_bhb_loop+0x15/0x70 [ 549.860882][T11752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.867715][T11752] RIP: 0033:0x7f98237a6969 [ 549.873381][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.897783][T11752] RSP: 002b:00007f98215cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.908589][T11752] RAX: ffffffffffffffda RBX: 00007f98239ce160 RCX: 00007f98237a6969 [ 549.917920][T11752] RDX: 0000000000040004 RSI: 0000200000002480 RDI: 0000000000000007 [ 549.926122][T11752] RBP: 00007f9823828ab1 R08: 0000000000000000 R09: 0000000000000000 [ 549.934610][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.936703][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 549.953083][T11752] R13: 0000000000000000 R14: 00007f98239ce160 R15: 00007ffd9faa2368 [ 549.962146][T11752] [ 549.965353][T11752] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 549.972650][T11752] CPU: 1 PID: 11752 Comm: syz.5.2161 Not tainted 5.15.182-syzkaller #0 [ 549.980887][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 549.990982][T11752] Call Trace: [ 549.994260][T11752] [ 549.997212][T11752] dump_stack_lvl+0x168/0x230 [ 550.001903][T11752] ? show_regs_print_info+0x20/0x20 [ 550.007102][T11752] ? load_image+0x3b0/0x3b0 [ 550.011612][T11752] panic+0x2c9/0x7f0 [ 550.015509][T11752] ? bpf_jit_dump+0xd0/0xd0 [ 550.020020][T11752] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 550.026437][T11752] __warn+0x248/0x2b0 [ 550.030420][T11752] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 550.036835][T11752] report_bug+0x1b7/0x2e0 [ 550.041274][T11752] handle_bug+0x3a/0x70 [ 550.045442][T11752] exc_invalid_op+0x16/0x40 [ 550.049954][T11752] asm_exc_invalid_op+0x16/0x20 [ 550.054812][T11752] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 550.061839][T11752] Code: 84 96 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 cc 17 8b 4c 89 e6 89 ea e8 05 bb 6f 00 <0f> 0b e9 07 fd ff ff e8 19 11 51 f8 0f 0b e9 b1 fe ff ff e8 0d 11 [ 550.081446][T11752] RSP: 0018:ffffc9000321f3a0 EFLAGS: 00010246 [ 550.087515][T11752] RAX: f334dcdc55ee8b00 RBX: 0000000002000000 RCX: 0000000000080000 [ 550.095481][T11752] RDX: ffffc90016677000 RSI: 00000000000069fc RDI: 00000000000069fd [ 550.103447][T11752] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172267a8 [ 550.111415][T11752] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88805fa28000 [ 550.119407][T11752] R13: ffff88805fa29290 R14: ffff888060dc0da0 R15: ffff88805fa2a298 [ 550.127412][T11752] ieee80211_set_mcast_rate+0x3b/0x50 [ 550.132790][T11752] ? ieee80211_leave_ibss+0x20/0x20 [ 550.137982][T11752] nl80211_set_mcast_rate+0x338/0x510 [ 550.143355][T11752] ? nl80211_nan_change_config+0x6a0/0x6a0 [ 550.149185][T11752] genl_rcv_msg+0xbc6/0xf40 [ 550.153695][T11752] ? genl_bind+0x370/0x370 [ 550.158122][T11752] ? verify_lock_unused+0x140/0x140 [ 550.163327][T11752] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 550.168535][T11752] ? dev_queue_xmit+0x20/0x20 [ 550.173210][T11752] ? nl80211_nan_change_config+0x6a0/0x6a0 [ 550.179023][T11752] netlink_rcv_skb+0x1e0/0x430 [ 550.183786][T11752] ? genl_bind+0x370/0x370 [ 550.188227][T11752] ? netlink_ack+0xb60/0xb60 [ 550.192813][T11752] ? __lock_acquire+0x7c60/0x7c60 [ 550.197836][T11752] ? preempt_count_add+0x8d/0x190 [ 550.202874][T11752] ? down_read+0x1aa/0x2e0 [ 550.207288][T11752] genl_rcv+0x24/0x40 [ 550.211267][T11752] netlink_unicast+0x77c/0x920 [ 550.216036][T11752] netlink_sendmsg+0x8ab/0xbc0 [ 550.220809][T11752] ? netlink_getsockopt+0x560/0x560 [ 550.226004][T11752] ? aa_sock_msg_perm+0x94/0x150 [ 550.230957][T11752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 550.236262][T11752] ? security_socket_sendmsg+0x7c/0xa0 [ 550.241735][T11752] ? netlink_getsockopt+0x560/0x560 [ 550.246942][T11752] ____sys_sendmsg+0x5a2/0x8c0 [ 550.251713][T11752] ? memset+0x1e/0x40 [ 550.255693][T11752] ? __sys_sendmsg_sock+0x30/0x30 [ 550.260723][T11752] ? import_iovec+0x6f/0xa0 [ 550.265229][T11752] ___sys_sendmsg+0x1f0/0x260 [ 550.269925][T11752] ? __sys_sendmsg+0x250/0x250 [ 550.274711][T11752] ? __fdget+0x18b/0x210 [ 550.278953][T11752] __se_sys_sendmsg+0x190/0x250 [ 550.283809][T11752] ? __x64_sys_sendmsg+0x80/0x80 [ 550.288756][T11752] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 550.294764][T11752] ? lockdep_hardirqs_on+0x94/0x140 [ 550.299988][T11752] do_syscall_64+0x4c/0xa0 [ 550.304496][T11752] ? clear_bhb_loop+0x15/0x70 [ 550.309168][T11752] ? clear_bhb_loop+0x15/0x70 [ 550.313845][T11752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.319737][T11752] RIP: 0033:0x7f98237a6969 [ 550.324158][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.343777][T11752] RSP: 002b:00007f98215cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.352304][T11752] RAX: ffffffffffffffda RBX: 00007f98239ce160 RCX: 00007f98237a6969 [ 550.360282][T11752] RDX: 0000000000040004 RSI: 0000200000002480 RDI: 0000000000000007 [ 550.368256][T11752] RBP: 00007f9823828ab1 R08: 0000000000000000 R09: 0000000000000000 [ 550.376254][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.384342][T11752] R13: 0000000000000000 R14: 00007f98239ce160 R15: 00007ffd9faa2368 [ 550.392330][T11752] [ 550.395568][T11752] Kernel Offset: disabled [ 550.400262][T11752] Rebooting in 86400 seconds..