last executing test programs: 4m6.886955739s ago: executing program 1 (id=1594): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 4m5.751109625s ago: executing program 1 (id=1601): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x3, 0x467, &(0x7f0000002280)="$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") chdir(&(0x7f0000000140)='./file0\x00') close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 3m52.653097849s ago: executing program 1 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x80c5}, 0x44850) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m50.905780593s ago: executing program 1 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, 0x0, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001040)={0x0, 'team0\x00', {0x1}, 0x3}) 3m49.689880239s ago: executing program 1 (id=1644): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) r1 = dup(r0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 3m49.454526158s ago: executing program 1 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) readahead(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r5, 0x0, 0x0) 3m33.10107424s ago: executing program 32 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) readahead(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r5, 0x0, 0x0) 13.457790967s ago: executing program 5 (id=2268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000280), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x200000000000023a, &(0x7f00000002c0)=ANY=[], 0x0, 0xffff14be, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x7, 0x26, &(0x7f0000000580)=""/38, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r0, r0], &(0x7f0000000600)=[{0x4004, 0x3, 0x4, 0x9}, {0x1, 0x5, 0xe, 0x6}, {0x0, 0x2, 0xf, 0x5}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000700)='virtio_transport_alloc_pkt\x00', r2}, 0xfffffffffffffeb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c000180"], 0x528}}, 0xc000) close(0x3) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a34}}, 0x1c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b9132", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500eb24000000000073907800000000e000000100000000"], 0x0) 12.607437354s ago: executing program 5 (id=2272): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 9.032324672s ago: executing program 5 (id=2290): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xc4}, {&(0x7f0000003200)="5c6817db84aafc4ba93b3b7b014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d973e000000000000004207e563f192538f527923b0f3cc323d6b27a204cddba5037106c11b62103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba711ae4e915430996f371cbe41bf9ed3c7f4ddd2f089b4eef8e69523179fec300000000c897d7436a35703560b5e677c04d4fe62f3f248d8fa8fa566b909e0ee74dc4ccec475620ed55157b48516652e82bdb7ca552faadbd9538242c0830f65f518cefc92b21435ceef5a30249883405ff65c0c6412d48052aff1b759c1dbe24dccce119fde7af6fcfec920471791798abff0c4ebdc3aa27773bee990d38c4f22d80519ca9d8ecc4c8dc59042391e48315ac568515453e98a6be37dc7e73ca6403edd8", 0x13a}, {&(0x7f0000000000)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xbd}, {&(0x7f00000007c0)="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", 0x2b8}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x578}], 0x1, 0x0, 0x0, 0x900}, 0x0) 8.982653871s ago: executing program 5 (id=2291): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}}, 0x20}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x0, 0xd0, 0x1c0, 0x1c0, 0x320, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [], 0x400}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 7.273258545s ago: executing program 4 (id=2296): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) 6.780745964s ago: executing program 2 (id=2297): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0x81204101, &(0x7f0000000440)) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000700)={0x1, 0x100}) io_setup(0x3f, &(0x7f0000000140)=0x0) r4 = timerfd_create(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r3, 0x2, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0]) 6.646926703s ago: executing program 4 (id=2299): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01071fb7761a88cf7a2501000000040001801c0002800c00018008000100030000000c000180080001"], 0x34}}, 0x2000c050) 6.555456253s ago: executing program 2 (id=2301): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000000)={&(0x7f0000000400)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{}, {0x6}, @device_b, @device_a, @initial, {0xa, 0x543}}, 0x1082, 0x7ff, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 5.416822159s ago: executing program 2 (id=2302): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0x1, 0x2003) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 5.366628189s ago: executing program 4 (id=2303): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/if_inet6\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) 4.532696386s ago: executing program 3 (id=2305): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="f9540cf61fc5c15f3747465dda16190708f808a3611afb6391fefd50a5d878f802feb60b612b5c10ba60d7010000000000", 0x31}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4004) sched_setaffinity(0x0, 0xffffffffffffffdc, &(0x7f00000002c0)=0x80000002) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14002000", @ANYRES16=r2, @ANYBLOB="0100000000000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x2014}, 0x80) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000180)) ptrace(0x8, r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 3.975047754s ago: executing program 4 (id=2306): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '&+]-*@,--\xb9'}}, {@obj_role}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}, 0x0, 0x0, &(0x7f0000000180)="878cac8978d1ebf3e0f89d113b83f6ee6227ccce535c1337a1ae02a51fa9e3549c5750398381b35d44acdce548448b95625bed3fa66344430abd70976aac36724a6c4e2399e1b627eda2e7f746f8cda1dc8bf12b3ad4761cd979561afc6ed9b4d52c9b9031d1f9898e7e74e2764fb1a36aa84dfe1a2cfefa37a90aee6a3bc4902c6fd0519955ac83cfacb52f824ee9f82eda338a6cfb7c7d437fcd541f7ac5233fc201bd8bacd711c29e7d8cd45a3ea5eae2fdc661d63114f4d2ee5cc39aa359d440ac3c71e5cdd9ba15127c2431d39d90487b482c4958c3") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x12f, 0x12) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012766d21eb6bd7000fcdbdf251000000008000800c5090000080008000000000008000800072c66be9add656bd04e9b5b7cb864f73b89c520bb96549a5e9a5ca132d089feac74569f772fb919ea236851392898b4e408b04148b3fe195c292196ea125b4400000000000002368093561bca83858005bd7c8f0a389fe6f66339d528fc4be833ad19c2073ecb6a2cd0959338dc75a36a926b0475d2bd41f3253f99e6118a5f53786ed8fb2f34c79c48c590f0dcedd1a05e71a40941a2d9071550ba1368271ae856c4"], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_io_uring_setup(0x6c27, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x700, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x146) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_TOS={0x5, 0x5, 0xc9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8840) 3.864550333s ago: executing program 5 (id=2307): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) close(0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f9240090508"], 0x0) 3.122923231s ago: executing program 4 (id=2308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000280), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x200000000000023a, &(0x7f00000002c0)=ANY=[], 0x0, 0xffff14be, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x7, 0x26, &(0x7f0000000580)=""/38, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r0, r0], &(0x7f0000000600)=[{0x4004, 0x3, 0x4, 0x9}, {0x1, 0x5, 0xe, 0x6}, {0x0, 0x2, 0xf, 0x5}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000700)='virtio_transport_alloc_pkt\x00', r2}, 0xfffffffffffffeb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000340)={0x20, 0x0, 0xa00, 0x1000, 0x2, 0x8, 0x2, 0x2, {0x10, 0x5}, {0x90f, 0x8}, {0x4, 0x200}, {0x4, 0xb5}, 0x1, 0x100, 0x81, 0x4, 0x1, 0xffffffff, 0x8, 0x6, 0xfffffff8, 0x6, 0xa, 0x3, 0x14, 0x2, 0x0, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c000180"], 0x528}}, 0xc000) close(0x3) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a34}}, 0x1c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b9132", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500eb24000000000073907800000000e000000100000000"], 0x0) 3.122214081s ago: executing program 3 (id=2309): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) 3.121888521s ago: executing program 0 (id=2310): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.95355808s ago: executing program 0 (id=2311): sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.71784497s ago: executing program 3 (id=2312): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18001f00000300000ae51c8de43030a4cae757", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x313306, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r7, 0x8000}, 0x8) 2.501449728s ago: executing program 2 (id=2313): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01071fb7761a88cf7a2501000000040001801c0002800c00018008000100030000000c000180080001"], 0x34}}, 0x2000c050) 2.345238418s ago: executing program 4 (id=2314): socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setitimer(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mknod$loop(0x0, 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r3, 0x0, 0x0) 2.307212358s ago: executing program 0 (id=2315): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600a415000008009f00070001000800b7"], 0x34}}, 0x0) 2.242790988s ago: executing program 0 (id=2316): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x10000, 0x110000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r2 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f00fb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4c31b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4a05004a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3000000007d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r7, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) fsopen(&(0x7f0000000240)='binder\x00', 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800"/18, 0x12) getpid() 1.496780095s ago: executing program 3 (id=2317): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0]) 1.176002144s ago: executing program 3 (id=2318): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '&+]-*@,--\xb9'}}, {@obj_role}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}, 0x0, 0x0, &(0x7f0000000180)="878cac8978d1ebf3e0f89d113b83f6ee6227ccce535c1337a1ae02a51fa9e3549c5750398381b35d44acdce548448b95625bed3fa66344430abd70976aac36724a6c4e2399e1b627eda2e7f746f8cda1dc8bf12b3ad4761cd979561afc6ed9b4d52c9b9031d1f9898e7e74e2764fb1a36aa84dfe1a2cfefa37a90aee6a3bc4902c6fd0519955ac83cfacb52f824ee9f82eda338a6cfb7c7d437fcd541f7ac5233fc201bd8bacd711c29e7d8cd45a3ea5eae2fdc661d63114f4d2ee5cc39aa359d440ac3c71e5cdd9ba15127c2431d39d90487b482c4958c3") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x12f, 0x12) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012766d21eb6bd7000fcdbdf251000000008000800c5090000080008000000000008000800072c66be9add656bd04e9b5b7cb864f73b89c520bb96549a5e9a5ca132d089feac74569f772fb919ea236851392898b4e408b04148b3fe195c292196ea125b4400000000000002368093561bca83858005bd7c8f0a389fe6f66339d528fc4be833ad19c2073ecb6a2cd0959338dc75a36a926b0475d2bd41f3253f99e6118a5f53786ed8fb2f34c79c48c590f0dcedd1a05e71a40941a2d9071550ba1368271ae856c4"], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_io_uring_setup(0x6c27, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x700, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x146) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_TOS={0x5, 0x5, 0xc9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8840) 1.041525973s ago: executing program 0 (id=2319): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000600), &(0x7f0000000640), 0xa00}, 0x1c) 1.041034263s ago: executing program 2 (id=2320): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) 911.104903ms ago: executing program 2 (id=2321): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 426.026141ms ago: executing program 0 (id=2322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r3}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000540)=0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 153.13042ms ago: executing program 3 (id=2323): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) openat$btrfs_control(0xffffff9c, &(0x7f00000001c0), 0x329103, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) preadv2(r2, &(0x7f0000000280)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400000000000000", @ANYRES32=r0, @ANYBLOB="7b130001e5ec0000000000000b00010067656e65766500001000029a060005004e2000000400060015622e491ef47d4f055d3c39e395913c5c121ede589c966171800559af0184e1dd59ba377814a28320f5f37400ec7c815c2f69fe06701ce17a4eff243ffcba79bf54e23edd3d98687d50f052c2f0cd9b9d7739b08be9e5"], 0x40}, 0x1, 0x0, 0x0, 0x4008044}, 0x40800) 0s ago: executing program 5 (id=2324): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): attr_inode_iget:409: comm syz.4.1084: error while reading EA inode 1 err=-117 [ 379.795514][ T7898] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1083: inode #1: comm syz.2.1083: iget: illegal inode # [ 379.813954][ T7898] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1083: error while reading EA inode 1 err=-117 [ 379.832197][ T7898] EXT4-fs (loop2): 1 orphan inode deleted [ 379.838047][ T7898] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 379.866042][ T7903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1084: inode #1: comm syz.4.1084: iget: illegal inode # [ 379.900672][ T7903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1084: error while reading EA inode 1 err=-117 [ 379.943032][ T7903] EXT4-fs (loop4): 1 orphan inode deleted [ 379.948804][ T7903] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 379.973471][ T4497] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 380.416601][ T7910] vivid-000: disconnect [ 380.691979][ T7911] vivid-004: disconnect [ 380.696553][ T7897] vivid-000: reconnect [ 381.270984][ T7899] vivid-004: reconnect [ 381.368524][ T26] audit: type=1400 audit(1734600207.387:90): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=7886 comm="syz.1.1080" [ 381.593560][ T7915] loop4: detected capacity change from 0 to 128 [ 381.656044][ T7915] EXT4-fs (loop4): Test dummy encryption mode enabled [ 381.672035][ T4497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.692213][ T4497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.717896][ T7915] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 381.754459][ T7915] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 381.802100][ T4497] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 381.821718][ T4497] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 381.830287][ T4497] usb 1-1: Product: syz [ 382.042147][ T4497] usb 1-1: config 0 descriptor?? [ 383.368017][ T7929] loop3: detected capacity change from 0 to 256 [ 383.374780][ T4497] usb 1-1: can't set config #0, error -71 [ 383.407463][ T4497] usb 1-1: USB disconnect, device number 15 [ 383.841897][ T26] audit: type=1400 audit(1734600209.857:91): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=7930 comm="syz.0.1091" [ 383.906425][ T7929] loop3: detected capacity change from 0 to 64 [ 385.592041][ T26] audit: type=1400 audit(1734600211.587:92): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=7938 comm="syz.1.1094" [ 385.941735][ T7951] loop0: detected capacity change from 0 to 512 [ 386.189772][ T7951] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1097: inode #1: comm syz.0.1097: iget: illegal inode # [ 386.309928][ T7957] loop3: detected capacity change from 0 to 512 [ 386.368146][ T7951] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1097: error while reading EA inode 1 err=-117 [ 386.651769][ T7951] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1097: inode #1: comm syz.0.1097: iget: illegal inode # [ 386.680102][ T7957] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1096: inode #1: comm syz.3.1096: iget: illegal inode # [ 386.860632][ T7957] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1096: error while reading EA inode 1 err=-117 [ 386.880433][ T7951] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1097: error while reading EA inode 1 err=-117 [ 386.943173][ T7957] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1096: inode #1: comm syz.3.1096: iget: illegal inode # [ 386.968999][ T7951] EXT4-fs (loop0): 1 orphan inode deleted [ 386.985635][ T7951] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 387.033403][ T7957] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1096: error while reading EA inode 1 err=-117 [ 387.322858][ T7957] EXT4-fs (loop3): 1 orphan inode deleted [ 387.328687][ T7957] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 387.689018][ T7975] vivid-001: disconnect [ 388.358272][ T7949] vivid-001: reconnect [ 388.771905][ T4269] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 389.319934][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.331763][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.480318][ T4269] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 389.504085][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 389.658616][ T4269] usb 5-1: Product: syz [ 389.788173][ T4269] usb 5-1: config 0 descriptor?? [ 390.050486][ T7984] loop2: detected capacity change from 0 to 4096 [ 390.114978][ T7984] ntfs3: Unknown parameter 'hide_dot_files' [ 390.352506][ T7972] udc-core: couldn't find an available UDC or it's busy [ 390.389548][ T7972] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 390.633072][ T4269] usbhid 5-1:0.0: can't add hid device: -71 [ 390.670805][ T4269] usbhid: probe of 5-1:0.0 failed with error -71 [ 390.950434][ T4269] usb 5-1: USB disconnect, device number 10 [ 391.473482][ T8003] loop0: detected capacity change from 0 to 1024 [ 391.867395][ T8012] loop1: detected capacity change from 0 to 128 [ 391.997192][ T8012] EXT4-fs (loop1): Test dummy encryption mode enabled [ 392.063305][ T8012] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 392.085849][ T8012] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.551439][ T8021] overlayfs: missing 'lowerdir' [ 392.604994][ T4264] hfsplus: b-tree write err: -5, ino 4 [ 393.909180][ T8034] loop0: detected capacity change from 0 to 512 [ 394.037040][ T8034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1118: inode #1: comm syz.0.1118: iget: illegal inode # [ 394.067365][ T8034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1118: error while reading EA inode 1 err=-117 [ 394.092683][ T8034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1118: inode #1: comm syz.0.1118: iget: illegal inode # [ 394.114805][ T8034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1118: error while reading EA inode 1 err=-117 [ 394.142508][ T8034] EXT4-fs (loop0): 1 orphan inode deleted [ 394.148283][ T8034] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 394.243848][ T8037] loop3: detected capacity change from 0 to 512 [ 394.527532][ T8039] vivid-001: disconnect [ 394.813223][ T8033] vivid-001: reconnect [ 394.902952][ T8037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1119: inode #1: comm syz.3.1119: iget: illegal inode # [ 394.931281][ T8042] loop1: detected capacity change from 0 to 128 [ 394.963335][ T8037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1119: error while reading EA inode 1 err=-117 [ 395.052011][ T8037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1119: inode #1: comm syz.3.1119: iget: illegal inode # [ 395.092359][ T8042] EXT4-fs (loop1): Test dummy encryption mode enabled [ 395.109875][ T8044] loop4: detected capacity change from 0 to 256 [ 395.150241][ T8042] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 395.179836][ T8037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1119: error while reading EA inode 1 err=-117 [ 395.217734][ T8042] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.434939][ T8037] EXT4-fs (loop3): 1 orphan inode deleted [ 395.440722][ T8037] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 396.764789][ T8044] loop4: detected capacity change from 0 to 64 [ 398.854722][ T8071] loop4: detected capacity change from 0 to 1024 [ 399.675856][ T8079] loop3: detected capacity change from 0 to 128 [ 400.252364][ T26] audit: type=1400 audit(1734600226.227:93): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8083 comm="syz.1.1130" [ 400.342559][ T8079] EXT4-fs (loop3): Test dummy encryption mode enabled [ 400.595243][ T8079] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 400.643580][ T8079] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 401.156629][ T8094] overlayfs: missing 'lowerdir' [ 402.202456][ T8099] loop1: detected capacity change from 0 to 512 [ 402.346231][ T3095] hfsplus: b-tree write err: -5, ino 4 [ 402.799670][ T8099] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1133: inode #1: comm syz.1.1133: iget: illegal inode # [ 403.293433][ T8099] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1133: error while reading EA inode 1 err=-117 [ 403.313781][ T8109] loop2: detected capacity change from 0 to 128 [ 403.329448][ T8099] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1133: inode #1: comm syz.1.1133: iget: illegal inode # [ 403.692161][ T8109] EXT4-fs (loop2): Test dummy encryption mode enabled [ 403.774390][ T8109] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 403.808803][ T8099] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1133: error while reading EA inode 1 err=-117 [ 403.916916][ T8109] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.950686][ T8099] EXT4-fs (loop1): 1 orphan inode deleted [ 403.985459][ T8099] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 404.088427][ T8114] loop4: detected capacity change from 0 to 256 [ 404.216215][ T8117] loop0: detected capacity change from 0 to 512 [ 404.233127][ T26] audit: type=1400 audit(1734600230.257:94): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8096 comm="syz.3.1132" [ 404.782669][ T8114] loop4: detected capacity change from 0 to 64 [ 405.031324][ T8117] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1138: inode #1: comm syz.0.1138: iget: illegal inode # [ 405.255805][ T8117] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1138: error while reading EA inode 1 err=-117 [ 406.974958][ T8117] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1138: inode #1: comm syz.0.1138: iget: illegal inode # [ 407.307209][ T8133] loop3: detected capacity change from 0 to 128 [ 407.323085][ T8117] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1138: error while reading EA inode 1 err=-117 [ 407.399569][ T26] audit: type=1400 audit(1734600233.417:95): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8130 comm="syz.4.1141" [ 407.752595][ T8117] EXT4-fs (loop0): 1 orphan inode deleted [ 407.759892][ T8117] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 407.812320][ T8133] EXT4-fs (loop3): Test dummy encryption mode enabled [ 407.860918][ T8133] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 407.877189][ T8133] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.279588][ T8147] overlayfs: missing 'lowerdir' [ 410.767448][ T8160] loop4: detected capacity change from 0 to 1024 [ 411.597751][ T8166] loop2: detected capacity change from 0 to 128 [ 411.714234][ T8168] loop1: detected capacity change from 0 to 256 [ 411.833742][ T8166] EXT4-fs (loop2): Test dummy encryption mode enabled [ 411.864921][ T8166] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 411.882987][ T8166] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.962026][ T8168] loop1: detected capacity change from 0 to 64 [ 412.147235][ T6354] hfsplus: b-tree write err: -5, ino 4 [ 413.726698][ T8185] loop2: detected capacity change from 0 to 512 [ 413.867977][ T8185] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1154: inode #1: comm syz.2.1154: iget: illegal inode # [ 414.004402][ T8185] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1154: error while reading EA inode 1 err=-117 [ 414.105571][ T8189] loop4: detected capacity change from 0 to 512 [ 414.117050][ T8185] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1154: inode #1: comm syz.2.1154: iget: illegal inode # [ 414.141509][ T26] audit: type=1400 audit(1734600240.167:96): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8169 comm="syz.3.1150" [ 414.180307][ T8185] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1154: error while reading EA inode 1 err=-117 [ 414.203219][ T8189] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1156: inode #1: comm syz.4.1156: iget: illegal inode # [ 414.225920][ T8185] EXT4-fs (loop2): 1 orphan inode deleted [ 414.231937][ T8189] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1156: error while reading EA inode 1 err=-117 [ 414.232461][ T8189] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1156: inode #1: comm syz.4.1156: iget: illegal inode # [ 414.259489][ T8185] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 414.894410][ T8189] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1156: error while reading EA inode 1 err=-117 [ 415.276726][ T26] audit: type=1400 audit(1734600240.987:97): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8195 comm="syz.0.1157" [ 415.301134][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.511627][ T8189] EXT4-fs (loop4): 1 orphan inode deleted [ 415.517559][ T8189] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 415.757887][ T8200] vivid-000: disconnect [ 415.970108][ T8181] vivid-000: reconnect [ 416.223405][ T8202] vivid-004: disconnect [ 416.451504][ T8188] vivid-004: reconnect [ 417.304889][ T8214] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 417.313669][ T8214] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.925495][ T8220] loop3: detected capacity change from 0 to 1024 [ 419.321106][ T8225] loop0: detected capacity change from 0 to 128 [ 419.358874][ T8228] loop1: detected capacity change from 0 to 256 [ 421.074715][ T8225] EXT4-fs (loop0): Test dummy encryption mode enabled [ 421.093082][ T4287] hfsplus: b-tree write err: -5, ino 4 [ 421.143670][ T8225] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 421.191982][ T8225] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 421.295742][ T8228] loop1: detected capacity change from 0 to 64 [ 423.940265][ T8250] loop1: detected capacity change from 0 to 512 [ 424.082885][ T8250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1171: inode #1: comm syz.1.1171: iget: illegal inode # [ 424.176848][ T8250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1171: error while reading EA inode 1 err=-117 [ 424.219107][ T8253] loop3: detected capacity change from 0 to 512 [ 424.237879][ T8250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1171: inode #1: comm syz.1.1171: iget: illegal inode # [ 424.272593][ T8250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1171: error while reading EA inode 1 err=-117 [ 424.297456][ T8250] EXT4-fs (loop1): 1 orphan inode deleted [ 424.306402][ T8256] loop4: detected capacity change from 0 to 128 [ 424.317994][ T8253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1172: inode #1: comm syz.3.1172: iget: illegal inode # [ 424.323207][ T8250] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 424.366302][ T8253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1172: error while reading EA inode 1 err=-117 [ 424.412087][ T8253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1172: inode #1: comm syz.3.1172: iget: illegal inode # [ 424.592784][ T8256] EXT4-fs (loop4): Test dummy encryption mode enabled [ 424.616231][ T8253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1172: error while reading EA inode 1 err=-117 [ 424.832743][ T8263] vivid-003: disconnect [ 425.045001][ T8249] vivid-003: reconnect [ 425.222803][ T26] audit: type=1400 audit(1734600251.237:98): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8257 comm="syz.0.1170" [ 425.460915][ T8256] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 425.685955][ T26] audit: type=1400 audit(1734600251.567:99): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8260 comm="syz.2.1174" [ 425.714312][ T8256] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.762281][ T8253] EXT4-fs (loop3): 1 orphan inode deleted [ 425.768066][ T8253] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 425.792147][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.145375][ T8272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.154468][ T8272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 427.863885][ T8280] vivid-002: disconnect [ 427.990554][ T8252] vivid-002: reconnect [ 428.220814][ T8286] loop4: detected capacity change from 0 to 1024 [ 429.788532][ T8294] loop1: detected capacity change from 0 to 128 [ 429.928518][ T8294] EXT4-fs (loop1): Test dummy encryption mode enabled [ 429.969536][ T154] hfsplus: b-tree write err: -5, ino 4 [ 429.970190][ T8296] loop2: detected capacity change from 0 to 256 [ 430.011699][ T8294] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 430.065615][ T8294] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.246158][ T8296] loop2: detected capacity change from 0 to 64 [ 431.916432][ T8314] loop4: detected capacity change from 0 to 512 [ 432.562106][ T8314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1186: inode #1: comm syz.4.1186: iget: illegal inode # [ 432.785608][ T8314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1186: error while reading EA inode 1 err=-117 [ 432.837827][ T8314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1186: inode #1: comm syz.4.1186: iget: illegal inode # [ 432.855484][ T8314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1186: error while reading EA inode 1 err=-117 [ 434.064227][ T8314] EXT4-fs (loop4): 1 orphan inode deleted [ 434.070045][ T8314] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 434.611481][ T8334] vivid-004: disconnect [ 434.929670][ T8313] vivid-004: reconnect [ 435.710689][ T8346] loop4: detected capacity change from 0 to 1024 [ 437.098094][ T6981] hfsplus: b-tree write err: -5, ino 4 [ 437.165545][ T8355] loop1: detected capacity change from 0 to 256 [ 437.200517][ T26] audit: type=1400 audit(1734600263.217:100): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8347 comm="syz.3.1194" [ 437.629149][ T8362] loop4: detected capacity change from 0 to 128 [ 437.651518][ T8355] loop1: detected capacity change from 0 to 64 [ 437.748728][ T8362] EXT4-fs (loop4): Test dummy encryption mode enabled [ 438.031444][ T8362] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 438.667849][ T8362] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 439.776775][ T8381] loop1: detected capacity change from 0 to 512 [ 439.912400][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.918839][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.013284][ T8381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1203: inode #1: comm syz.1.1203: iget: illegal inode # [ 440.048388][ T8381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1203: error while reading EA inode 1 err=-117 [ 440.082504][ T8381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1203: inode #1: comm syz.1.1203: iget: illegal inode # [ 440.139645][ T8387] loop4: detected capacity change from 0 to 512 [ 440.142646][ T8381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1203: error while reading EA inode 1 err=-117 [ 440.179442][ T8381] EXT4-fs (loop1): 1 orphan inode deleted [ 440.188979][ T8381] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 440.275917][ T8387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1204: inode #1: comm syz.4.1204: iget: illegal inode # [ 440.302417][ T8387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1204: error while reading EA inode 1 err=-117 [ 440.341716][ T8387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1204: inode #1: comm syz.4.1204: iget: illegal inode # [ 440.380805][ T8387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1204: error while reading EA inode 1 err=-117 [ 440.413016][ T8387] EXT4-fs (loop4): 1 orphan inode deleted [ 440.426945][ T8387] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 440.594328][ T8390] vivid-003: disconnect [ 440.811136][ T8380] vivid-003: reconnect [ 441.144511][ T8392] vivid-004: disconnect [ 441.351405][ T8386] vivid-004: reconnect [ 442.823292][ T8404] validate_nla: 3 callbacks suppressed [ 442.823311][ T8404] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 442.842473][ T8404] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 442.869350][ T8404] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 443.947284][ T8420] loop2: detected capacity change from 0 to 256 [ 443.976815][ T8422] loop4: detected capacity change from 0 to 512 [ 444.628415][ T8427] loop3: detected capacity change from 0 to 512 [ 444.924785][ T8422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1215: inode #1: comm syz.4.1215: iget: illegal inode # [ 444.927133][ T8427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1217: inode #1: comm syz.3.1217: iget: illegal inode # [ 444.971979][ T8422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1215: error while reading EA inode 1 err=-117 [ 444.998103][ T8420] loop2: detected capacity change from 0 to 64 [ 445.031711][ T8422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1215: inode #1: comm syz.4.1215: iget: illegal inode # [ 445.036194][ T8427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1217: error while reading EA inode 1 err=-117 [ 445.063068][ T8427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1217: inode #1: comm syz.3.1217: iget: illegal inode # [ 445.082647][ T8422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1215: error while reading EA inode 1 err=-117 [ 445.096036][ T8422] EXT4-fs (loop4): 1 orphan inode deleted [ 445.101876][ T8422] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 445.110340][ T8427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1217: error while reading EA inode 1 err=-117 [ 445.125873][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.250736][ T8427] EXT4-fs (loop3): 1 orphan inode deleted [ 445.288493][ T8427] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 445.448510][ T8437] vivid-004: disconnect [ 445.665405][ T8418] vivid-004: reconnect [ 446.043046][ T8439] vivid-002: disconnect [ 446.255851][ T8426] vivid-002: reconnect [ 447.686964][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1224'. [ 449.300595][ T8471] loop1: detected capacity change from 0 to 512 [ 449.339835][ T8473] loop0: detected capacity change from 0 to 512 [ 449.875812][ T8471] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1229: inode #1: comm syz.1.1229: iget: illegal inode # [ 449.894959][ T8473] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1230: inode #1: comm syz.0.1230: iget: illegal inode # [ 450.134249][ T8471] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1229: error while reading EA inode 1 err=-117 [ 450.164976][ T8473] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1230: error while reading EA inode 1 err=-117 [ 450.312547][ T8473] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1230: inode #1: comm syz.0.1230: iget: illegal inode # [ 450.326219][ T8471] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1229: inode #1: comm syz.1.1229: iget: illegal inode # [ 450.362305][ T8471] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1229: error while reading EA inode 1 err=-117 [ 450.375013][ T8473] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1230: error while reading EA inode 1 err=-117 [ 450.420344][ T8473] EXT4-fs (loop0): 1 orphan inode deleted [ 450.426663][ T8471] EXT4-fs (loop1): 1 orphan inode deleted [ 450.442916][ T8471] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 450.461659][ T8473] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 450.491289][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.729336][ T8490] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1235'. [ 450.826627][ T8494] vivid-003: disconnect [ 451.044314][ T8470] vivid-003: reconnect [ 451.215888][ T8498] netlink: 'syz.3.1238': attribute type 29 has an invalid length. [ 451.259439][ T8498] netlink: 'syz.3.1238': attribute type 29 has an invalid length. [ 453.298370][ T8525] netlink: 'syz.0.1248': attribute type 29 has an invalid length. [ 453.334046][ T8525] netlink: 'syz.0.1248': attribute type 29 has an invalid length. [ 454.168855][ T8525] netlink: 'syz.0.1248': attribute type 29 has an invalid length. [ 454.295464][ T8533] loop4: detected capacity change from 0 to 512 [ 454.895610][ T8533] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1250: inode #1: comm syz.4.1250: iget: illegal inode # [ 454.968005][ T8547] loop0: detected capacity change from 0 to 512 [ 455.788246][ T8533] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1250: error while reading EA inode 1 err=-117 [ 455.842331][ T8533] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1250: inode #1: comm syz.4.1250: iget: illegal inode # [ 455.861223][ T8533] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1250: error while reading EA inode 1 err=-117 [ 455.884673][ T8533] EXT4-fs (loop4): 1 orphan inode deleted [ 455.908195][ T8533] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 456.042922][ T8547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1255: inode #1: comm syz.0.1255: iget: illegal inode # [ 456.483256][ T8558] vivid-004: disconnect [ 456.963825][ T8530] vivid-004: reconnect [ 457.464487][ T8547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1255: error while reading EA inode 1 err=-117 [ 457.539694][ T8547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1255: inode #1: comm syz.0.1255: iget: illegal inode # [ 457.669859][ T8547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1255: error while reading EA inode 1 err=-117 [ 457.749637][ T8547] EXT4-fs (loop0): 1 orphan inode deleted [ 457.776167][ T8547] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 458.138038][ T8566] loop2: detected capacity change from 0 to 4096 [ 458.442159][ T8566] ntfs3: Unknown parameter 'hide_dot_files' [ 460.930917][ T8604] loop0: detected capacity change from 0 to 512 [ 464.267207][ T8604] EXT4-fs: error -4 creating inode table initialization thread [ 464.310011][ T8604] EXT4-fs (loop0): mount failed [ 465.074266][ T8626] Process accounting resumed [ 470.621168][ T8675] smc: net device wg0 applied user defined pnetid SYZ0 [ 470.995558][ T8681] loop1: detected capacity change from 0 to 4096 [ 471.239715][ T26] audit: type=1800 audit(1734600297.257:101): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1290" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 472.366473][ T8681] ntfs3: Unknown parameter 'hide_dot_files' [ 473.701417][ T8702] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 473.716570][ T8705] overlayfs: unrecognized mount option "verity=require" or missing value [ 473.805525][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1296'. [ 476.264569][ T8730] loop3: detected capacity change from 0 to 512 [ 477.890998][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1308'. [ 478.084180][ T8730] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1306: inode #1: comm syz.3.1306: iget: illegal inode # [ 478.116193][ T8730] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1306: error while reading EA inode 1 err=-117 [ 478.298451][ T8730] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1306: inode #1: comm syz.3.1306: iget: illegal inode # [ 478.713525][ T8730] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1306: error while reading EA inode 1 err=-117 [ 478.735587][ T8730] EXT4-fs (loop3): 1 orphan inode deleted [ 478.749994][ T8730] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 479.176400][ T8751] vivid-002: disconnect [ 479.402495][ T8729] vivid-002: reconnect [ 480.494165][ T4180] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 482.075372][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.088632][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.400843][ T8779] program syz.1.1318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.278384][ T8799] loop2: detected capacity change from 0 to 512 [ 484.365839][ T8799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1324: inode #1: comm syz.2.1324: iget: illegal inode # [ 484.396903][ T8799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1324: error while reading EA inode 1 err=-117 [ 484.647033][ T8799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1324: inode #1: comm syz.2.1324: iget: illegal inode # [ 484.938280][ T8799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1324: error while reading EA inode 1 err=-117 [ 485.204100][ T8799] EXT4-fs (loop2): 1 orphan inode deleted [ 485.231999][ T8799] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 486.227683][ T8823] vivid-000: disconnect [ 486.453835][ T8798] vivid-000: reconnect [ 486.633139][ T8401] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 487.442175][ T8401] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 487.451268][ T8401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.567257][ T8401] usb 4-1: config 0 descriptor?? [ 488.076407][ T8401] hid-generic 0003:0C70:F003.0008: hidraw0: USB HID vb.51 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 488.240710][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 488.275565][ T8401] usb 4-1: USB disconnect, device number 12 [ 494.591984][ T4223] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 495.022826][ T4223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.212000][ T4223] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.276715][ T4223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.357253][ T4223] usb 1-1: config 0 descriptor?? [ 495.897534][ T4223] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 495.938763][ T4223] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input10 [ 496.097462][ T4223] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 496.349993][ T26] audit: type=1400 audit(1734600322.367:102): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8950 comm="syz.1.1373" [ 496.579513][ T4269] usb 1-1: USB disconnect, device number 16 [ 497.401860][ T4497] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 497.661861][ T4497] usb 3-1: Using ep0 maxpacket: 32 [ 497.782668][ T4497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.811896][ T4497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.822421][ T4497] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 497.832652][ T4497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.856260][ T4497] usb 3-1: config 0 descriptor?? [ 498.193887][ T8975] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 498.338399][ T4497] apple 0003:05AC:0232.000A: unknown main item tag 0x0 [ 498.358344][ T4497] apple 0003:05AC:0232.000A: unknown main item tag 0x0 [ 498.366032][ T4497] apple 0003:05AC:0232.000A: unknown main item tag 0x0 [ 498.416991][ T4497] apple 0003:05AC:0232.000A: hidraw0: USB HID v0.00 Device [HID 05ac:0232] on usb-dummy_hcd.2-1/input0 [ 498.558582][ T1108] usb 3-1: USB disconnect, device number 14 [ 499.104265][ T8989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'. [ 499.694438][ T26] audit: type=1400 audit(1734600325.707:103): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=8990 comm="syz.0.1387" [ 499.710330][ T8989] tc_dump_action: action bad kind [ 501.317912][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.330474][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.043564][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 503.581912][ T26] audit: type=1400 audit(1734600329.597:104): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9044 comm="syz.2.1405" [ 506.139213][ T1108] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 506.511890][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 507.748569][ T1108] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.764130][ T1108] usb 3-1: config 0 has no interface number 0 [ 508.181943][ T1108] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 508.195363][ T26] audit: type=1400 audit(1734600334.217:105): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9108 comm="syz.0.1424" [ 508.230118][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.410365][ T1108] usb 3-1: Product: syz [ 508.415280][ T1108] usb 3-1: Manufacturer: syz [ 508.419968][ T1108] usb 3-1: SerialNumber: syz [ 508.428682][ T1108] usb 3-1: config 0 descriptor?? [ 508.493969][ T1108] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 508.508765][ T1108] usb 3-1: selecting invalid altsetting 1 [ 508.520049][ T1108] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 508.537483][ T1108] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.548349][ T1108] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 508.558642][ T1108] usb 3-1: media controller created [ 508.579291][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.713351][ T1108] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 508.737547][ T1108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 508.877382][ T1108] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 508.936714][ T9120] Cannot find set identified by id 0 to match [ 509.537178][ T1108] usb 3-1: USB disconnect, device number 15 [ 511.752141][ T26] audit: type=1400 audit(1734600337.767:106): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9137 comm="syz.0.1435" [ 512.940404][ T9157] netlink: 'syz.0.1440': attribute type 5 has an invalid length. [ 513.024794][ T26] audit: type=1400 audit(1734600339.027:107): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9151 comm="syz.2.1439" [ 514.983600][ T26] audit: type=1400 audit(1734600341.007:108): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9159 comm="syz.2.1441" [ 515.565135][ T26] audit: type=1400 audit(1734600341.487:109): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9178 comm="syz.4.1450" [ 515.941954][ T1108] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 516.645719][ T9195] loop4: detected capacity change from 0 to 512 [ 516.657054][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 516.792153][ T1108] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.806829][ T1108] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.819178][ T9195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1454: inode #1: comm syz.4.1454: iget: illegal inode # [ 516.832936][ T1108] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 516.852072][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 516.858723][ T1108] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 516.868076][ T9195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1454: error while reading EA inode 1 err=-117 [ 516.881702][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.888640][ T9195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1454: inode #1: comm syz.4.1454: iget: illegal inode # [ 516.892020][ T1108] usb 1-1: config 0 descriptor?? [ 516.976936][ T9195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1454: error while reading EA inode 1 err=-117 [ 516.995366][ T9203] loop1: detected capacity change from 0 to 4096 [ 517.019715][ T9195] EXT4-fs (loop4): 1 orphan inode deleted [ 517.025935][ T9195] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 517.032608][ T9203] ntfs3: Unknown parameter 'hide_dot_files' [ 518.308233][ T9182] udc-core: couldn't find an available UDC or it's busy [ 518.381923][ T9182] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 518.522455][ T1108] usbhid 1-1:0.0: can't add hid device: -71 [ 518.532268][ T1108] usbhid: probe of 1-1:0.0 failed with error -71 [ 518.557113][ T1108] usb 1-1: USB disconnect, device number 17 [ 518.734362][ T26] audit: type=1400 audit(1734600344.757:110): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9219 comm="syz.1.1462" [ 518.752957][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.039754][ T9245] loop4: detected capacity change from 0 to 512 [ 522.050805][ T9245] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1470: inode #1: comm syz.4.1470: iget: illegal inode # [ 522.068724][ T9245] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1470: error while reading EA inode 1 err=-117 [ 522.082370][ T9245] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1470: inode #1: comm syz.4.1470: iget: illegal inode # [ 522.846392][ T9245] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1470: error while reading EA inode 1 err=-117 [ 522.906520][ T9245] EXT4-fs (loop4): 1 orphan inode deleted [ 522.974275][ T9245] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 523.272658][ T26] audit: type=1400 audit(1734600349.297:111): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9266 comm="syz.1.1476" [ 523.670804][ T9275] syz.3.1477 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 524.163504][ T8401] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 524.214183][ T9282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1480'. [ 525.129182][ T9297] Cannot find set identified by id 0 to match [ 525.172004][ T8401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.187919][ T8401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.198450][ T8401] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.218047][ T8401] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.227753][ T8401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.250166][ T8401] usb 1-1: config 0 descriptor?? [ 525.417221][ T9300] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1484'. [ 525.824850][ T8401] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 526.523033][ T8401] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 527.438234][ T26] audit: type=1400 audit(1734600353.457:112): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9321 comm="syz.1.1490" [ 527.456508][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.493235][ T23] usb 1-1: USB disconnect, device number 18 [ 527.782699][ T9331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 529.230831][ T264] block nbd0: Attempted send on invalid socket [ 529.240171][ T264] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 529.905081][ T9375] loop1: detected capacity change from 0 to 128 [ 530.006351][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 530.014875][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 530.025226][ T9364] ceph: No mds server is up or the cluster is laggy [ 530.035026][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 530.044421][ T26] audit: type=1400 audit(1734600356.067:113): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9373 comm="syz.4.1508" [ 530.045533][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 530.155732][ T9375] EXT4-fs (loop1): Test dummy encryption mode enabled [ 530.233689][ T9382] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 530.241558][ T9382] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1509'. [ 530.284336][ T9375] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 530.340040][ T9375] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 531.243609][ T9388] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 531.252486][ T9388] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 533.756904][ T26] audit: type=1400 audit(1734600359.777:114): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9421 comm="syz.2.1521" [ 533.976751][ T9436] Cannot find set identified by id 0 to match [ 534.008411][ T4180] Bluetooth: unknown link type 37 [ 534.767511][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 535.321566][ T4212] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 535.771075][ T26] audit: type=1400 audit(1734600361.787:115): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9474 comm="syz.0.1540" [ 535.890794][ T9478] Cannot find set identified by id 0 to match [ 535.991871][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 536.042043][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 536.077742][ T9487] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 536.085736][ T9487] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1544'. [ 536.112123][ T4212] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 536.126011][ T4212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.139187][ T4212] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 536.151235][ T4212] usb 2-1: config 0 has no interface number 1 [ 536.174364][ T4212] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 536.342361][ T4212] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 536.558144][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.567616][ T4212] usb 2-1: Product: syz [ 536.572931][ T4212] usb 2-1: Manufacturer: syz [ 536.578163][ T4212] usb 2-1: SerialNumber: syz [ 536.643142][ T4212] usb 2-1: config 0 descriptor?? [ 537.693612][ T4212] kaweth 2-1:0.235: Firmware present in device. [ 537.712087][ T4212] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 537.721004][ T4212] kaweth: probe of 2-1:0.235 failed with error -5 [ 537.918877][ T4212] kaweth 2-1:0.0: Firmware present in device. [ 538.220177][ T26] audit: type=1400 audit(1734600363.997:116): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9500 comm="syz.0.1551" [ 538.251909][ T4212] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 538.262857][ T4212] kaweth: probe of 2-1:0.0 failed with error -5 [ 538.280055][ T4212] usb 2-1: USB disconnect, device number 8 [ 538.542443][ T9514] Cannot find set identified by id 0 to match [ 538.580951][ T9512] loop1: detected capacity change from 0 to 4096 [ 538.684062][ T9512] ntfs3: Unknown parameter 'hide_dot_files' [ 539.001602][ T4212] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 539.070075][ T26] audit: type=1400 audit(1734600365.087:117): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9521 comm="syz.3.1556" [ 539.361844][ T4212] usb 3-1: Using ep0 maxpacket: 8 [ 540.102945][ T9539] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 540.163083][ T9539] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1558'. [ 540.253295][ T4212] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 540.263979][ T4212] usb 3-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 540.432194][ T4212] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 540.471950][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.525988][ T4212] usb 3-1: Product: syz [ 541.530220][ T4212] usb 3-1: Manufacturer: syz [ 541.535661][ T4212] usb 3-1: SerialNumber: syz [ 541.563989][ T4212] usb 3-1: can't set config #6, error -71 [ 542.182674][ T4212] usb 3-1: USB disconnect, device number 16 [ 542.601933][ T26] audit: type=1400 audit(1734600368.527:118): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9564 comm="syz.2.1565" [ 542.761039][ T9572] Cannot find set identified by id 0 to match [ 544.454093][ T26] audit: type=1400 audit(1734600370.477:119): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9587 comm="syz.0.1569" [ 545.952731][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1576'. [ 548.200773][ T3095] wlan1: Trigger new scan to find an IBSS to join [ 549.094441][ T26] audit: type=1400 audit(1734600375.117:120): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9647 comm="syz.3.1586" [ 552.733642][ T9706] mmap: syz.3.1595 (9706) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 552.748570][ T9706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.091996][ T26] audit: type=1400 audit(1734600379.057:121): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9703 comm="syz.2.1598" [ 553.739005][ T4287] wlan1: Trigger new scan to find an IBSS to join [ 553.785532][ T9718] loop1: detected capacity change from 0 to 512 [ 553.875717][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 554.128458][ T9718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1601: inode #1: comm syz.1.1601: iget: illegal inode # [ 554.546561][ T9718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1601: error while reading EA inode 1 err=-117 [ 554.747767][ T9718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1601: inode #1: comm syz.1.1601: iget: illegal inode # [ 554.854581][ T9718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1601: error while reading EA inode 1 err=-117 [ 554.870974][ T9718] EXT4-fs (loop1): 1 orphan inode deleted [ 554.877615][ T9718] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 555.967661][ T6354] wlan1: Creating new IBSS network, BSSID 4a:ef:53:84:97:cb [ 556.646524][ T9752] vivid-003: disconnect [ 556.754819][ T9717] vivid-003: reconnect [ 556.786832][ T26] audit: type=1400 audit(1734600382.807:122): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9755 comm="syz.0.1609" [ 558.013643][ T26] audit: type=1400 audit(1734600384.037:123): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9770 comm="syz.4.1613" [ 561.429621][ T4180] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 562.286275][ T26] audit: type=1400 audit(1734600388.057:124): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9810 comm="syz.0.1624" [ 562.803645][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.811432][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.802147][ T4269] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 568.171833][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 568.305231][ T4497] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 568.852929][ T4269] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 568.919530][ T4269] usb 1-1: New USB device strings: Mfr=36, Product=2, SerialNumber=3 [ 569.107785][ T4269] usb 1-1: Product: syz [ 569.384010][ T4269] usb 1-1: Manufacturer: syz [ 569.388654][ T4269] usb 1-1: SerialNumber: syz [ 569.411890][ T4497] usb 5-1: Using ep0 maxpacket: 16 [ 569.413763][ T4269] usb 1-1: config 0 descriptor?? [ 569.592134][ T4497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.598134][ T9885] loop2: detected capacity change from 0 to 512 [ 569.642227][ T4497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.745072][ T4497] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 569.772528][ T4269] usb 1-1: can't set first interface for hiFace device. [ 569.779765][ T4269] snd-usb-hiface: probe of 1-1:0.0 failed with error -5 [ 569.780258][ T4497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.794064][ T4269] usb 1-1: USB disconnect, device number 19 [ 569.840965][ T4497] usb 5-1: config 0 descriptor?? [ 570.075589][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1646: inode #1: comm syz.2.1646: iget: illegal inode # [ 570.098653][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1646: error while reading EA inode 1 err=-117 [ 570.119364][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1646: inode #1: comm syz.2.1646: iget: illegal inode # [ 570.149240][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1646: error while reading EA inode 1 err=-117 [ 570.168437][ T9885] EXT4-fs (loop2): 1 orphan inode deleted [ 570.174902][ T9885] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 570.374480][ T4497] elan 0003:04F3:0755.000C: failed to start in urb: -90 [ 570.423062][ T4497] elan 0003:04F3:0755.000C: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 570.480621][ T9898] vivid-000: disconnect [ 570.697468][ T9884] vivid-000: reconnect [ 570.939507][ T4269] usb 5-1: USB disconnect, device number 11 [ 572.621673][ T9920] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 572.646489][ T9919] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 572.646489][ T9919] program syz.4.1656 not setting count and/or reply_len properly [ 578.232211][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 582.218429][ T4498] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 583.162344][ T26] audit: type=1400 audit(1734600408.707:125): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=9983 comm="syz.3.1675" [ 586.056512][ T4312] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 586.251948][ T4212] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 586.831874][ T4212] usb 3-1: Using ep0 maxpacket: 16 [ 586.952406][ T4212] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 587.852106][ T4212] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 588.548020][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.562939][ T4212] usb 3-1: config 0 descriptor?? [ 588.582557][ T4212] usb 3-1: can't set config #0, error -71 [ 588.591956][ T4212] usb 3-1: USB disconnect, device number 17 [ 589.225050][ T4167] syz-executor (4167) used greatest stack depth: 18208 bytes left [ 589.475912][ T4312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.881126][ T4269] Bluetooth: hci5: command 0x0409 tx timeout [ 591.185381][ T4312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.332418][T10085] qnx4: no qnx4 filesystem (no root dir). [ 591.396716][T10085] input: syz1 as /devices/virtual/input/input12 [ 591.969226][T10092] Cannot find set identified by id 0 to match [ 592.111403][ T4312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.223950][T10039] chnl_net:caif_netlink_parms(): no params data found [ 592.475300][ T4312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.030174][ T4223] Bluetooth: hci5: command 0x041b tx timeout [ 593.859702][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.892901][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.948803][T10039] device bridge_slave_0 entered promiscuous mode [ 594.334771][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.398578][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.559345][T10039] device bridge_slave_1 entered promiscuous mode [ 595.321865][ T4269] Bluetooth: hci5: command 0x040f tx timeout [ 595.535593][T10039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.734559][T10039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.938690][T10039] team0: Port device team_slave_0 added [ 595.947865][T10039] team0: Port device team_slave_1 added [ 595.974111][T10039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.981384][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.013641][T10039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.050809][T10039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.065027][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.201245][T10039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.168315][T10039] device hsr_slave_0 entered promiscuous mode [ 597.202966][T10039] device hsr_slave_1 entered promiscuous mode [ 597.370407][T10039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.396972][T10039] Cannot create hsr debugfs directory [ 597.402003][ T4223] Bluetooth: hci5: command 0x0419 tx timeout [ 597.441865][ T4498] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 598.695992][T10184] Cannot find set identified by id 0 to match [ 598.852646][ T4498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.312048][ T4498] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 599.322153][ T4498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.330334][ T4498] usb 4-1: Product: syz [ 599.346930][ T4498] usb 4-1: Manufacturer: syz [ 599.353154][ T4498] usb 4-1: SerialNumber: syz [ 599.393341][ T4498] usb 4-1: config 0 descriptor?? [ 599.446359][ T4498] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 599.737424][ T4498] usb 4-1: USB disconnect, device number 13 [ 600.556287][T10039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 601.315160][T10039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 601.351336][T10039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 601.414259][T10039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 601.622495][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 601.932030][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 602.082681][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.228881][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.421929][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 602.444572][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 602.457566][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.457871][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 603.215999][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 603.225268][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.238595][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 603.391548][ T23] usb 1-1: config 0 descriptor?? [ 603.403528][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.988486][ T26] audit: type=1400 audit(1734600430.007:126): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10230 comm="syz.2.1743" [ 604.176422][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.216659][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.262437][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.269606][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.392726][ T23] usb 1-1: USB disconnect, device number 21 [ 604.632388][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.791955][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 607.151628][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 607.200304][T10248] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.207501][T10248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.339667][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 607.404625][T10039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 607.442326][T10039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.584800][T10268] netlink: 'syz.2.1751': attribute type 30 has an invalid length. [ 607.981862][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.142762][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 608.186101][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.268512][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 608.294841][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.317946][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 608.335633][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 608.442735][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 608.477040][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.687931][T10253] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.756527][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.787610][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 608.934358][T10253] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.320800][ T26] audit: type=1400 audit(1734600435.337:127): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10290 comm="syz.2.1755" [ 609.960768][T10253] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.015591][T10300] bridge0: port 3(syz_tun) entered blocking state [ 610.022110][T10300] bridge0: port 3(syz_tun) entered disabled state [ 610.029471][T10300] device syz_tun entered promiscuous mode [ 610.070560][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 610.299241][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.361474][T10253] bond0: (slave netdevsim0): Releasing backup interface [ 610.381551][T10253] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.452379][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.531903][ T4312] device hsr_slave_0 left promiscuous mode [ 611.558632][ T4312] device hsr_slave_1 left promiscuous mode [ 611.582260][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.614442][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.657835][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.665948][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.675247][ T4312] batman_adv: batadv0: Interface deactivated: macvlan0 [ 611.688511][ T4312] batman_adv: batadv0: Removing interface: macvlan0 [ 611.698994][ T4312] device bridge_slave_1 left promiscuous mode [ 611.712450][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.739270][ T4312] device bridge_slave_0 left promiscuous mode [ 611.751387][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.780909][ T4312] device veth1_macvtap left promiscuous mode [ 611.787719][ T4312] device veth0_macvtap left promiscuous mode [ 611.794296][ T4312] device veth1_vlan left promiscuous mode [ 611.800539][ T4312] device veth0_vlan left promiscuous mode [ 612.404270][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 612.419469][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 612.439140][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.454755][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.531081][ T4312] bond0 (unregistering): Released all slaves [ 612.771396][T10253] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.890328][T10253] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.928083][T10253] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.997000][T10253] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.276872][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.427003][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.600682][T10039] device veth0_vlan entered promiscuous mode [ 613.634502][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.750195][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.787914][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.860821][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.174397][T10039] device veth1_vlan entered promiscuous mode [ 616.376785][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.427355][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.434487][T10368] ODEBUG: Out of memory. ODEBUG disabled [ 616.481049][T10039] device veth0_macvtap entered promiscuous mode [ 616.504293][T10039] device veth1_macvtap entered promiscuous mode [ 616.537710][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.576721][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.627982][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.680784][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.691222][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.701957][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.715718][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.725295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.760015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.814335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.841887][ T4212] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 616.843901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.892174][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.919805][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.932632][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.948048][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.959890][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.970727][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.986467][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.999152][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.040794][T10248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.061192][T10039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.070744][T10039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.158125][T10039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.203986][T10039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.213482][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.251456][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.290353][ T4212] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 617.558534][T10248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.567642][ T4212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.578671][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.580025][ T4212] usb 1-1: config 0 descriptor?? [ 617.651919][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.662885][T10248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.708071][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.775774][ T4264] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 617.783312][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 618.482254][ T26] audit: type=1400 audit(1734600444.497:128): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10393 comm="syz.3.1777" [ 619.581854][ T4212] usbhid 1-1:0.0: can't add hid device: -71 [ 619.587972][ T4212] usbhid: probe of 1-1:0.0 failed with error -71 [ 619.616498][T10409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1780'. [ 619.654945][ T4212] usb 1-1: USB disconnect, device number 22 [ 621.508535][T10431] qnx4: no qnx4 filesystem (no root dir). [ 621.741861][ T26] audit: type=1400 audit(1734600447.757:129): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10424 comm="syz.5.1784" [ 623.462090][T10457] bridge0: port 3(syz_tun) entered blocking state [ 623.468597][T10457] bridge0: port 3(syz_tun) entered disabled state [ 623.476954][T10457] device syz_tun entered promiscuous mode [ 623.483439][T10457] bridge0: port 3(syz_tun) entered blocking state [ 623.489944][T10457] bridge0: port 3(syz_tun) entered forwarding state [ 624.357084][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.385147][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.575200][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 625.777446][T10474] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 626.872025][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 627.478323][T10474] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 627.486628][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 627.499562][ T23] usb 3-1: can't read configurations, error -71 [ 627.838477][ T26] audit: type=1400 audit(1734600453.857:130): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10494 comm="syz.2.1799" [ 627.914981][T10496] syz.5.1800 (10496) used greatest stack depth: 17616 bytes left [ 628.242336][T10514] netlink: 'syz.5.1807': attribute type 4 has an invalid length. [ 629.161107][T10524] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 629.568566][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.575871][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.591314][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.598583][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.606016][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.613109][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.623243][T10524] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 632.276363][T10562] device batadv_slave_1 entered promiscuous mode [ 632.364957][T10562] loop7: detected capacity change from 0 to 6 [ 632.762010][ T26] audit: type=1400 audit(1734600458.457:131): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10557 comm="syz.5.1816" [ 633.108538][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 633.186671][ T26] audit: type=1400 audit(1734600459.207:132): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10566 comm="syz.3.1818" [ 633.324486][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1819'. [ 633.542075][ T23] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 633.563908][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.572330][T10560] device batadv_slave_1 left promiscuous mode [ 633.696962][ T23] usb 3-1: config 0 has no interface number 0 [ 633.717579][ T23] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 634.513609][T10584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1821'. [ 634.594817][ T23] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 634.608917][ T23] usb 3-1: config 0 interface 48 has no altsetting 0 [ 634.616364][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 634.625894][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.642429][ T23] usb 3-1: config 0 descriptor?? [ 634.662008][ T23] usb 3-1: can't set config #0, error -71 [ 634.672263][ T23] usb 3-1: USB disconnect, device number 20 [ 637.497891][ T26] audit: type=1400 audit(1734600463.517:133): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10614 comm="syz.4.1829" [ 637.709733][T10621] qnx4: no qnx4 filesystem (no root dir). [ 637.747520][T10621] input: syz1 as /devices/virtual/input/input13 [ 638.695581][ T26] audit: type=1400 audit(1734600464.717:134): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10626 comm="syz.3.1831" [ 642.211907][ T21] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 642.582881][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 643.091977][ T21] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 643.254650][ T21] usb 1-1: config 95 has no interface number 0 [ 643.292031][ T21] usb 1-1: config 95 interface 1 has no altsetting 0 [ 643.592239][ T21] usb 1-1: string descriptor 0 read error: -22 [ 643.601482][ T21] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 644.085824][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.490592][ T26] audit: type=1400 audit(1734600470.357:135): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=10682 comm="syz.3.1845" [ 644.617240][ T21] usb 1-1: USB disconnect, device number 23 [ 645.269476][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.585798][ T4180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 645.596815][ T4180] CPU: 0 PID: 4180 Comm: kworker/u5:5 Not tainted 5.15.174-syzkaller #0 [ 645.605170][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 645.615239][ T4180] Workqueue: hci4 hci_rx_work [ 645.619956][ T4180] Call Trace: [ 645.623238][ T4180] [ 645.626180][ T4180] dump_stack_lvl+0x1e3/0x2d0 [ 645.630879][ T4180] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 645.636525][ T4180] ? panic+0x860/0x860 [ 645.640617][ T4180] ? sysfs_create_dir_ns+0x282/0x390 [ 645.645923][ T4180] sysfs_create_dir_ns+0x2c6/0x390 [ 645.651060][ T4180] ? sysfs_warn_dup+0xa0/0xa0 [ 645.655752][ T4180] ? kobject_add_internal+0x61d/0xe00 [ 645.661143][ T4180] kobject_add_internal+0x6e0/0xe00 [ 645.666371][ T4180] kobject_add+0x14e/0x210 [ 645.670805][ T4180] ? lockdep_hardirqs_on+0x94/0x130 [ 645.676012][ T4180] ? device_add+0x3c2/0xfd0 [ 645.680527][ T4180] ? kobject_init+0x1d0/0x1d0 [ 645.685217][ T4180] ? __raw_spin_lock_init+0x41/0x100 [ 645.690518][ T4180] ? get_device_parent+0x128/0x400 [ 645.695648][ T4180] device_add+0x476/0xfd0 [ 645.699999][ T4180] hci_conn_add_sysfs+0xe4/0x1f0 [ 645.704954][ T4180] le_conn_complete_evt+0xc15/0x1500 [ 645.710269][ T4180] ? cs_le_create_conn+0x5f0/0x5f0 [ 645.715415][ T4180] hci_le_meta_evt+0x28c/0x3f50 [ 645.720290][ T4180] ? __lock_acquire+0x1ff0/0x1ff0 [ 645.725341][ T4180] ? __mutex_lock_common+0x444/0x25a0 [ 645.730735][ T4180] ? hci_remote_host_features_evt+0x280/0x280 [ 645.736819][ T4180] ? __mutex_unlock_slowpath+0x218/0x750 [ 645.742462][ T4180] ? hci_event_packet+0x3b4/0x1550 [ 645.747598][ T4180] ? mutex_unlock+0x10/0x10 [ 645.752126][ T4180] ? hci_rx_work+0x204/0xa10 [ 645.756737][ T4180] ? hci_event_packet+0x33d/0x1550 [ 645.761880][ T4180] hci_event_packet+0xc41/0x1550 [ 645.766849][ T4180] ? rcu_lock_release+0x20/0x20 [ 645.771731][ T4180] ? hci_send_to_monitor+0x99/0x4d0 [ 645.776956][ T4180] hci_rx_work+0x237/0xa10 [ 645.781401][ T4180] process_one_work+0x8a1/0x10c0 [ 645.786378][ T4180] ? worker_detach_from_pool+0x260/0x260 [ 645.792115][ T4180] ? _raw_spin_lock_irqsave+0x120/0x120 [ 645.797678][ T4180] ? kthread_data+0x4e/0xc0 [ 645.802198][ T4180] ? wq_worker_running+0x97/0x170 [ 645.807239][ T4180] worker_thread+0xaca/0x1280 [ 645.811932][ T4180] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 645.817869][ T4180] kthread+0x3f6/0x4f0 [ 645.821953][ T4180] ? rcu_lock_release+0x20/0x20 [ 645.826819][ T4180] ? kthread_blkcg+0xd0/0xd0 [ 645.831429][ T4180] ret_from_fork+0x1f/0x30 [ 645.835877][ T4180] [ 645.965879][ T4180] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 645.979433][ T4180] Bluetooth: hci4: failed to register connection device [ 648.401291][T10722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.441451][T10722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.466553][T10722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.491957][T10722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.601327][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 652.636417][ T26] audit: type=1326 audit(1734600478.657:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.5.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 652.785332][ T4211] Bluetooth: hci4: command 0x0406 tx timeout [ 655.506070][T10819] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 657.102794][ T26] audit: type=1326 audit(1734600482.987:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a880eed29 code=0x7fc00000 [ 658.430902][T10861] Cannot find set identified by id 0 to match [ 660.386820][T10885] netlink: 'syz.4.1892': attribute type 5 has an invalid length. [ 662.044720][ T26] audit: type=1326 audit(1734600488.067:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 662.149026][ T26] audit: type=1326 audit(1734600488.067:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 662.326083][ T26] audit: type=1326 audit(1734600488.067:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 662.690799][ T26] audit: type=1326 audit(1734600488.067:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 662.851285][ T26] audit: type=1326 audit(1734600488.067:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 662.980451][ T26] audit: type=1326 audit(1734600488.067:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 663.106861][ T26] audit: type=1326 audit(1734600488.067:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 663.926800][ T26] audit: type=1326 audit(1734600488.067:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 663.955603][ T26] audit: type=1326 audit(1734600488.067:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 663.979706][ T26] audit: type=1326 audit(1734600488.067:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 664.230939][T10944] netlink: 'syz.2.1905': attribute type 5 has an invalid length. [ 664.368674][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1909'. [ 664.535163][T10956] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 664.543087][T10956] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1908'. [ 664.578340][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 665.355784][T10970] qnx4: no qnx4 filesystem (no root dir). [ 665.393283][T10970] input: syz1 as /devices/virtual/input/input14 [ 668.362916][T11013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.437866][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 668.467570][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 669.014177][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 669.014191][ T26] audit: type=1326 audit(1734600494.637:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.5.1922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc8f166d29 code=0x0 [ 669.991573][T11027] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 670.049368][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1923'. [ 671.450729][T11027] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1923'. [ 672.881885][ T26] audit: type=1326 audit(1734600498.887:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 675.815499][ T1108] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 676.143361][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 676.264358][ T1108] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 676.277970][ T1108] usb 5-1: config 0 has no interface number 0 [ 676.303357][ T1108] usb 5-1: config 0 interface 12 has no altsetting 0 [ 676.531990][ T1108] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 676.548612][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.578339][ T1108] usb 5-1: Product: syz [ 676.609203][ T1108] usb 5-1: Manufacturer: syz [ 677.341736][ T1108] usb 5-1: SerialNumber: syz [ 677.362706][ T1108] usb 5-1: config 0 descriptor?? [ 677.402941][ T1108] f81534 5-1:0.12: required endpoints missing [ 677.657352][ T1108] usb 5-1: USB disconnect, device number 12 [ 684.513636][T11211] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 684.521456][T11211] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1960'. [ 684.535400][T11211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1960'. [ 685.663605][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.669952][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.661832][T11221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.936597][T11247] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 687.191772][T11247] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 687.295575][ T3095] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 687.328594][T11249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.593657][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 687.630070][ T3095] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 687.906268][T11271] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 687.915564][T11271] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1973'. [ 687.932349][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'. [ 688.688422][ T26] audit: type=1400 audit(1734600514.707:207): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=11273 comm="syz.2.1974" [ 691.095664][T11309] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 692.313576][T11316] qnx4: no qnx4 filesystem (no root dir). [ 694.280649][ T26] audit: type=1400 audit(1734600520.097:208): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=11332 comm="syz.2.1988" [ 694.474665][T11346] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 694.744171][T11346] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 695.658666][ T26] audit: type=1326 audit(1734600521.677:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11360 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a880eed29 code=0x7fc00000 [ 697.667769][ T26] audit: type=1400 audit(1734600523.687:210): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=11378 comm="syz.5.2002" [ 698.953205][T11409] bridge0: port 4(syz_tun) entered blocking state [ 698.960001][T11409] bridge0: port 4(syz_tun) entered disabled state [ 698.983534][T11409] device syz_tun entered promiscuous mode [ 698.994267][T11409] bridge0: port 4(syz_tun) entered blocking state [ 699.000801][T11409] bridge0: port 4(syz_tun) entered forwarding state [ 699.391842][ T26] audit: type=1326 audit(1734600525.387:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa908cd29 code=0x7fc00000 [ 699.505845][T11413] Cannot find set identified by id 0 to match [ 699.871759][ T4211] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 701.975739][ T4211] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 701.985400][ T4211] usb 3-1: can't read configurations, error -71 [ 702.141919][ T26] audit: type=1400 audit(1734600528.117:212): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=11427 comm="syz.5.2014" [ 703.340472][ T26] audit: type=1326 audit(1734600529.357:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8f166d29 code=0x7fc00000 [ 704.973096][ T4211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 705.231779][ T4211] usb 6-1: Using ep0 maxpacket: 16 [ 705.731738][ T4211] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 705.941889][ T4211] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 705.972569][ T4211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.980930][ T4211] usb 6-1: Product: syz [ 706.037674][ T4211] usb 6-1: Manufacturer: syz [ 706.071890][ T4211] usb 6-1: SerialNumber: syz [ 706.738306][ T4211] usb 6-1: config 0 descriptor?? [ 706.843599][ T4211] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 707.282441][ T4211] usb 6-1: Detected FT232RL [ 707.322001][ T4211] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 707.919921][ T26] audit: type=1326 audit(1734600533.937:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a880eed29 code=0x7fc00000 [ 708.119237][ T4211] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 708.316788][ T4211] usb 6-1: USB disconnect, device number 2 [ 708.375864][ T4211] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 708.589533][ T4211] ftdi_sio 6-1:0.0: device disconnected [ 710.654886][T11499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 710.666776][T11499] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 710.773733][T11508] tipc: Started in network mode [ 710.780447][T11508] tipc: Node identity 7f000001, cluster identity 4711 [ 710.824806][T11508] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.832527][T11508] tipc: Enabled bearer , priority 10 [ 710.865804][T11511] tipc: Enabled bearer , priority 0 [ 710.962787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.970805][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.111896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.119174][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.251889][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.259122][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.402571][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.409692][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.541965][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.886961][ T4212] tipc: Node number set to 2130706433 [ 713.315325][ T4211] Bluetooth: hci5: command 0x0406 tx timeout [ 714.111777][ T4269] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 714.386354][T11561] set match dimension is over the limit! [ 715.375017][ T4269] usb 6-1: Using ep0 maxpacket: 32 [ 715.951923][ C0] net_ratelimit: 15 callbacks suppressed [ 715.951944][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 715.964928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 716.333291][ T4269] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 716.341518][ T4269] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.610028][ T4269] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 716.635806][ T4269] usb 6-1: config 0 has no interface number 1 [ 716.991895][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 716.999129][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.418673][ T4269] usb 6-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 717.571811][ T4269] usb 6-1: string descriptor 0 read error: -71 [ 717.581267][ T4269] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 717.611278][ T4269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.663030][ T4269] usb 6-1: config 0 descriptor?? [ 717.681813][ T4269] usb 6-1: can't set config #0, error -71 [ 717.703334][ T4269] usb 6-1: USB disconnect, device number 3 [ 718.032030][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 718.039350][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.015188][T11586] delete_channel: no stack [ 719.081871][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.088991][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.792785][T11603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2068'. [ 720.111842][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 720.119066][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 720.208560][T11609] loop6: detected capacity change from 0 to 524287999 [ 720.273159][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.284097][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.293776][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.304692][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.355056][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.366032][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.412872][T11617] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2072'. [ 720.422175][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.433248][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.486591][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.497642][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.606024][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.617073][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.627233][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.638203][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 720.792605][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.803658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.236466][T11609] ldm_validate_partition_table(): Disk read failed. [ 721.292133][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.299265][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.306439][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.317331][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.381588][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.392519][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.406993][T11609] Dev loop6: unable to read RDB block 0 [ 721.445293][T11609] loop6: unable to read partition table [ 721.451069][T11609] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 721.515782][T11612] ldm_validate_partition_table(): Disk read failed. [ 721.572452][T11612] Dev loop6: unable to read RDB block 0 [ 722.132422][T11612] loop6: unable to read partition table [ 722.138421][T11612] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 722.224851][T11634] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 723.762642][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 723.769976][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 724.839660][T11645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2079'. [ 724.912053][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 724.919256][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 725.012893][T11647] loop2: detected capacity change from 0 to 512 [ 725.156695][T11647] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2081: inode #1: comm syz.2.2081: iget: illegal inode # [ 725.237340][T11647] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2081: error while reading EA inode 1 err=-117 [ 725.317375][T11647] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2081: inode #1: comm syz.2.2081: iget: illegal inode # [ 725.353933][T11647] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2081: error while reading EA inode 1 err=-117 [ 725.604713][T11647] EXT4-fs (loop2): 1 orphan inode deleted [ 725.631866][T11647] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 725.952167][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 725.959834][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 726.288580][T11668] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20001 [ 726.350505][T11672] vivid-000: disconnect [ 726.573028][T11646] vivid-000: reconnect [ 726.992058][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 726.999349][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.031917][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.039186][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.273005][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2092'. [ 729.158202][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 729.165433][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 729.841841][ T4211] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 729.925224][T11716] loop0: detected capacity change from 0 to 512 [ 730.070850][T11716] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2099: inode #1: comm syz.0.2099: iget: illegal inode # [ 730.152534][T11716] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2099: error while reading EA inode 1 err=-117 [ 730.178640][T11716] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2099: inode #1: comm syz.0.2099: iget: illegal inode # [ 730.191999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.192207][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.235109][T11716] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2099: error while reading EA inode 1 err=-117 [ 730.251975][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.254787][T11716] EXT4-fs (loop0): 1 orphan inode deleted [ 730.274217][T11716] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 730.342803][ T4211] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 730.390430][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.433565][ T4211] usb 3-1: config 0 descriptor?? [ 730.700152][T11721] vivid-001: disconnect [ 730.918845][T11715] vivid-001: reconnect [ 731.242045][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 731.249466][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 731.590195][ T4211] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 731.592752][T11711] udc-core: couldn't find an available UDC or it's busy [ 731.611850][T11711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.668715][ T4211] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input16 [ 732.272311][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 732.280070][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 732.562068][ T4211] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 732.871787][T10009] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 733.792269][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 733.799541][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 733.842570][ T4211] usb 3-1: USB disconnect, device number 23 [ 733.899754][T11745] netlink: 'syz.4.2104': attribute type 5 has an invalid length. [ 734.833049][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 734.840239][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 734.966065][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2108'. [ 735.181786][T10009] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.201683][T10009] usb 4-1: config 0 interface 0 has no altsetting 0 [ 735.208337][T10009] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 735.236259][T10009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.256991][T10009] usb 4-1: config 0 descriptor?? [ 735.399619][T11761] kernel profiling enabled (shift: 9) [ 735.871995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 735.879142][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.922030][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.929620][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.948862][T10009] usbhid 4-1:0.0: can't add hid device: -71 [ 737.025117][T10009] usbhid: probe of 4-1:0.0 failed with error -71 [ 737.491044][T11775] device batadv_slave_1 entered promiscuous mode [ 737.527489][T10009] usb 4-1: USB disconnect, device number 14 [ 737.620115][T11773] device batadv_slave_1 left promiscuous mode [ 737.952210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 737.959435][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 738.024403][T11789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.032381][T11789] IPv6: NLM_F_CREATE should be set when creating new route [ 738.039657][T11789] IPv6: NLM_F_CREATE should be set when creating new route [ 738.644635][T10009] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 738.796101][T11804] qnx4: no qnx4 filesystem (no root dir). [ 739.002262][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 739.009895][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 739.081893][T10009] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.103176][T10009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 739.137937][T10009] usb 4-1: config 1 has no interface number 0 [ 739.159623][T10009] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.181780][ T4212] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 739.205709][T10009] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 739.412825][T10009] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.430345][T10009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.459362][T10009] usb 4-1: Product: syz [ 739.475377][T10009] usb 4-1: Manufacturer: syz [ 739.493474][T10009] usb 4-1: SerialNumber: syz [ 739.602504][ T4212] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 739.620903][ T4212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.677497][ T4212] usb 6-1: config 0 descriptor?? [ 739.735357][ T4212] cp210x 6-1:0.0: cp210x converter detected [ 740.032083][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 740.039359][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 740.118542][T11813] netlink: 'syz.0.2127': attribute type 20 has an invalid length. [ 740.128408][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'. [ 740.163679][ T4212] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 740.201031][T11820] device batadv_slave_1 entered promiscuous mode [ 740.218631][ T4212] usb 6-1: cp210x converter now attached to ttyUSB0 [ 740.426885][ T4212] usb 6-1: USB disconnect, device number 4 [ 740.478314][ T4212] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 740.574041][ T4212] cp210x 6-1:0.0: device disconnected [ 740.642108][T10009] cdc_ncm 4-1:1.1: bind() failure [ 740.687307][T10009] usb 4-1: USB disconnect, device number 15 [ 741.081867][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 741.089107][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 741.327884][T11834] bridge0: port 3(syz_tun) entered blocking state [ 741.334444][T11834] bridge0: port 3(syz_tun) entered disabled state [ 741.342553][T11834] device syz_tun entered promiscuous mode [ 741.348898][T11834] bridge0: port 3(syz_tun) entered blocking state [ 741.355456][T11834] bridge0: port 3(syz_tun) entered forwarding state [ 742.042210][T11814] device batadv_slave_1 left promiscuous mode [ 742.085926][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 742.122133][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 742.129388][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 743.151882][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 743.159150][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 744.376966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 744.384690][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 744.748246][T11871] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.391975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 745.399208][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 746.637164][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 746.644381][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 747.183315][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.183421][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.722020][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 747.722219][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 748.472513][T10009] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 748.767087][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 748.774657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 748.903112][T11910] netlink: 'syz.5.2157': attribute type 1 has an invalid length. [ 748.910881][T11910] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2157'. [ 748.975696][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2157'. [ 749.004629][T10009] usb 4-1: Using ep0 maxpacket: 16 [ 749.172559][T10009] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 749.521990][T10009] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.535599][T10009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.565548][T10009] usb 4-1: Product: syz [ 749.797522][T11925] bridge0: port 3(syz_tun) entered blocking state [ 749.804929][T11925] bridge0: port 3(syz_tun) entered disabled state [ 749.841849][T11925] device syz_tun entered promiscuous mode [ 749.856837][T11925] bridge0: port 3(syz_tun) entered blocking state [ 749.863344][T11925] bridge0: port 3(syz_tun) entered forwarding state [ 750.883267][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 750.890430][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 750.921688][T10009] usb 4-1: Manufacturer: syz [ 750.926372][T10009] usb 4-1: SerialNumber: syz [ 750.935863][T10009] usb 4-1: config 0 descriptor?? [ 750.961838][T10009] usb 4-1: can't set config #0, error -71 [ 750.993530][T10009] usb 4-1: USB disconnect, device number 16 [ 751.601293][T11933] Process accounting resumed [ 751.952860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 751.960606][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 752.991887][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 752.999144][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 753.519560][T11961] usb usb8: usbfs: process 11961 (syz.0.2170) did not claim interface 0 before use [ 754.385072][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 754.392289][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 754.904862][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 755.391904][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 755.399740][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 756.432076][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 756.439329][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 757.482215][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 757.489512][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 758.512059][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 758.519281][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 759.551871][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 759.559078][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 760.560268][T12048] input: syz0 as /devices/virtual/input/input18 [ 760.566679][T12048] input: failed to attach handler leds to device input18, error: -6 [ 760.602044][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 760.609245][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 761.631887][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 761.639140][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 763.466298][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 763.473508][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 763.856376][T12063] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 764.886525][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 764.893706][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 764.909516][T12078] qnx4: no qnx4 filesystem (no root dir). [ 765.962161][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 765.969434][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 765.993419][T12093] binder: 12092:12093 ioctl c018620c 20000000 returned -22 [ 767.077387][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 767.084626][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 768.112591][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 768.120867][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 769.151857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 769.159108][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 769.905264][T12128] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 770.202002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 770.209264][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 771.241879][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 771.249274][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 771.550161][T12166] qnx4: no qnx4 filesystem (no root dir). [ 772.272052][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 772.279292][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 773.312213][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 773.320006][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 774.353173][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 775.401842][ C0] net_ratelimit: 1 callbacks suppressed [ 775.401856][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 775.414601][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 775.485449][T12208] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 775.673962][T12187] orangefs_mount: mount request failed with -4 [ 775.965948][ T26] audit: type=1326 audit(1734600601.987:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c818d29 code=0x7fc00000 [ 776.432170][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 776.439425][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 776.515862][T12224] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 776.523765][T12224] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2241'. [ 776.547219][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2241'. [ 777.531000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 777.538122][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 777.599040][T12223] block nbd0: shutting down sockets [ 778.602120][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 778.611935][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 779.211883][ T4211] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 779.523628][ T26] audit: type=1400 audit(1734600605.547:216): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=FFFFFEFE80 pid=12251 comm="syz.4.2251" [ 779.641888][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 779.798838][ T4269] Bluetooth: hci5: command 0x0405 tx timeout [ 780.604014][ T26] audit: type=1326 audit(1734600606.507:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.0.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c818d29 code=0x7fc00000 [ 780.672475][ C0] net_ratelimit: 1 callbacks suppressed [ 780.672503][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 780.685418][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 780.751860][ T4211] usb 4-1: Using ep0 maxpacket: 16 [ 780.832176][ T4211] usb 4-1: device descriptor read/all, error -71 [ 780.999891][T12272] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 781.007866][T12272] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2254'. [ 781.030411][T12272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2254'. [ 781.711897][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 781.719125][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 782.752322][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 782.759998][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 783.801931][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 783.809165][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 784.842200][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 784.843636][ T26] audit: type=1400 audit(1734600610.857:218): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=FFFFFEFE80 pid=12298 comm="syz.2.2264" [ 784.849420][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 785.731115][ T26] audit: type=1326 audit(1734600611.527:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c818d29 code=0x7fc00000 [ 785.875102][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 785.877254][T12321] netlink: 'syz.5.2268': attribute type 1 has an invalid length. [ 785.882443][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 785.890157][T12321] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2268'. [ 786.193602][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2268'. [ 786.922169][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 786.929526][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.276833][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.284083][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.691060][T12357] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 788.699001][T12357] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2282'. [ 788.716342][T12357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2282'. [ 789.322180][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 789.335566][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 789.347778][T12363] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.351927][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 791.392025][ C0] net_ratelimit: 1 callbacks suppressed [ 791.392043][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 791.404903][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 791.866524][T12401] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 791.874600][T12401] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2295'. [ 791.891267][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2295'. [ 792.441819][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 792.449092][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 793.482074][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 793.489355][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 794.534511][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 794.541845][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 795.174863][T12432] bridge0: port 5(erspan0) entered blocking state [ 795.193642][T12432] bridge0: port 5(erspan0) entered disabled state [ 795.262467][T12432] device erspan0 entered promiscuous mode [ 795.268530][T12432] bridge0: port 5(erspan0) entered blocking state [ 795.275017][T12432] bridge0: port 5(erspan0) entered forwarding state [ 795.552077][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 795.559559][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 796.086253][T10009] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 796.264373][T12452] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 796.272590][T12452] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2308'. [ 796.289563][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2308'. [ 796.522206][T10009] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 796.544916][T10009] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 796.591893][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 796.599734][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 796.635400][T10009] usb 6-1: config 8 has no interface number 0 [ 796.644650][T10009] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 796.654654][T10009] usb 6-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.668170][T10009] usb 6-1: config 8 interface 177 has no altsetting 0 [ 796.693458][T10009] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 796.722214][T10009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.793734][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 797.800908][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 797.875608][T10009] usb 6-1: string descriptor 0 read error: -71 [ 797.894779][T10009] ir_toy 6-1:8.177: required endpoints not found [ 797.947684][T10009] usb 6-1: USB disconnect, device number 5 [ 798.841872][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 798.849094][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.208997][T12494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2323'. [ 799.291536][T12492] [ 799.293904][T12492] ====================================================== [ 799.300930][T12492] WARNING: possible circular locking dependency detected [ 799.307958][T12492] 5.15.174-syzkaller #0 Not tainted [ 799.313162][T12492] ------------------------------------------------------ [ 799.320186][T12492] syz.3.2323/12492 is trying to acquire lock: [ 799.326257][T12492] ffff8880280a4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 799.337339][T12492] [ 799.337339][T12492] but task is already holding lock: [ 799.344716][T12492] ffffffff8decda68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 799.354405][T12492] [ 799.354405][T12492] which lock already depends on the new lock. [ 799.354405][T12492] [ 799.364818][T12492] [ 799.364818][T12492] the existing dependency chain (in reverse order) is: [ 799.373855][T12492] [ 799.373855][T12492] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 799.381869][T12492] lock_acquire+0x1db/0x4f0 [ 799.386916][T12492] __mutex_lock_common+0x1da/0x25a0 [ 799.392670][T12492] mutex_lock_nested+0x17/0x20 [ 799.397977][T12492] rfkill_register+0x30/0x880 [ 799.403202][T12492] hci_register_dev+0x4dd/0xa50 [ 799.408594][T12492] vhci_create_device+0x310/0x590 [ 799.414306][T12492] vhci_write+0x382/0x430 [ 799.419179][T12492] vfs_write+0xacd/0xe50 [ 799.423964][T12492] ksys_write+0x1a2/0x2c0 [ 799.428836][T12492] do_syscall_64+0x3b/0xb0 [ 799.433831][T12492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.440268][T12492] [ 799.440268][T12492] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 799.448118][T12492] lock_acquire+0x1db/0x4f0 [ 799.453160][T12492] __mutex_lock_common+0x1da/0x25a0 [ 799.458897][T12492] mutex_lock_nested+0x17/0x20 [ 799.464205][T12492] vhci_send_frame+0x8a/0xf0 [ 799.469333][T12492] hci_send_frame+0x1af/0x2f0 [ 799.474546][T12492] hci_tx_work+0xb2e/0x1a30 [ 799.479585][T12492] process_one_work+0x8a1/0x10c0 [ 799.485060][T12492] worker_thread+0xaca/0x1280 [ 799.490269][T12492] kthread+0x3f6/0x4f0 [ 799.494887][T12492] ret_from_fork+0x1f/0x30 [ 799.499856][T12492] [ 799.499856][T12492] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 799.509082][T12492] lock_acquire+0x1db/0x4f0 [ 799.514231][T12492] __flush_work+0xeb/0x1a0 [ 799.519181][T12492] hci_dev_do_close+0x20a/0x1070 [ 799.524658][T12492] hci_dev_close+0xe5/0x190 [ 799.529695][T12492] sock_do_ioctl+0x11d/0x5a0 [ 799.534909][T12492] sock_ioctl+0x47f/0x770 [ 799.539781][T12492] __se_sys_ioctl+0xf1/0x160 [ 799.544907][T12492] do_syscall_64+0x3b/0xb0 [ 799.549861][T12492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.556297][T12492] [ 799.556297][T12492] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 799.563971][T12492] lock_acquire+0x1db/0x4f0 [ 799.569019][T12492] __mutex_lock_common+0x1da/0x25a0 [ 799.574760][T12492] mutex_lock_nested+0x17/0x20 [ 799.580070][T12492] bg_scan_update+0xa1/0x4a0 [ 799.585202][T12492] process_one_work+0x8a1/0x10c0 [ 799.590679][T12492] worker_thread+0xaca/0x1280 [ 799.595898][T12492] kthread+0x3f6/0x4f0 [ 799.600506][T12492] ret_from_fork+0x1f/0x30 [ 799.605463][T12492] [ 799.605463][T12492] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 799.615296][T12492] validate_chain+0x1649/0x5930 [ 799.620704][T12492] __lock_acquire+0x1295/0x1ff0 [ 799.626097][T12492] lock_acquire+0x1db/0x4f0 [ 799.631131][T12492] __flush_work+0xeb/0x1a0 [ 799.636088][T12492] __cancel_work_timer+0x519/0x6a0 [ 799.641733][T12492] hci_request_cancel_all+0xcb/0x300 [ 799.647560][T12492] hci_dev_do_close+0x51/0x1070 [ 799.652950][T12492] hci_rfkill_set_block+0x114/0x1a0 [ 799.658687][T12492] rfkill_set_block+0x1e7/0x430 [ 799.664081][T12492] rfkill_fop_write+0x5b7/0x790 [ 799.669471][T12492] vfs_write+0x30c/0xe50 [ 799.674257][T12492] ksys_write+0x1a2/0x2c0 [ 799.679129][T12492] do_syscall_64+0x3b/0xb0 [ 799.684086][T12492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.690522][T12492] [ 799.690522][T12492] other info that might help us debug this: [ 799.690522][T12492] [ 799.700846][T12492] Chain exists of: [ 799.700846][T12492] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 799.700846][T12492] [ 799.716705][T12492] Possible unsafe locking scenario: [ 799.716705][T12492] [ 799.724167][T12492] CPU0 CPU1 [ 799.729545][T12492] ---- ---- [ 799.734932][T12492] lock(rfkill_global_mutex); [ 799.739802][T12492] lock(&data->open_mutex); [ 799.746927][T12492] lock(rfkill_global_mutex); [ 799.754232][T12492] lock((work_completion)(&hdev->bg_scan_update)); [ 799.760853][T12492] [ 799.760853][T12492] *** DEADLOCK *** [ 799.760853][T12492] [ 799.769006][T12492] 1 lock held by syz.3.2323/12492: [ 799.774123][T12492] #0: ffffffff8decda68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 799.784252][T12492] [ 799.784252][T12492] stack backtrace: [ 799.790150][T12492] CPU: 1 PID: 12492 Comm: syz.3.2323 Not tainted 5.15.174-syzkaller #0 [ 799.798405][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 799.808481][T12492] Call Trace: [ 799.811785][T12492] [ 799.814730][T12492] dump_stack_lvl+0x1e3/0x2d0 [ 799.819435][T12492] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 799.825093][T12492] ? print_circular_bug+0x12b/0x1a0 [ 799.830317][T12492] check_noncircular+0x2f8/0x3b0 [ 799.835403][T12492] ? add_chain_block+0x850/0x850 [ 799.840375][T12492] ? lockdep_lock+0x11f/0x2a0 [ 799.845079][T12492] validate_chain+0x1649/0x5930 [ 799.849959][T12492] ? __lock_acquire+0x1295/0x1ff0 [ 799.855005][T12492] ? reacquire_held_locks+0x660/0x660 [ 799.860407][T12492] ? mark_lock+0x98/0x340 [ 799.864755][T12492] ? __lock_acquire+0x1295/0x1ff0 [ 799.869800][T12492] ? mark_lock+0x98/0x340 [ 799.874148][T12492] __lock_acquire+0x1295/0x1ff0 [ 799.879028][T12492] lock_acquire+0x1db/0x4f0 [ 799.883564][T12492] ? __flush_work+0xcf/0x1a0 [ 799.888180][T12492] ? rcu_lock_release+0x5/0x20 [ 799.892099][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.892962][T12492] ? read_lock_is_recursive+0x10/0x10 [ 799.900064][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.905248][T12492] ? start_flush_work+0x776/0x820 [ 799.905274][T12492] __flush_work+0xeb/0x1a0 [ 799.905291][T12492] ? __flush_work+0xcf/0x1a0 [ 799.905310][T12492] ? flush_work+0x20/0x20 [ 799.930560][T12492] ? print_irqtrace_events+0x210/0x210 [ 799.936042][T12492] ? lock_timer_base+0x260/0x260 [ 799.941020][T12492] ? __cancel_work_timer+0x467/0x6a0 [ 799.946338][T12492] __cancel_work_timer+0x519/0x6a0 [ 799.951475][T12492] ? cancel_work_sync+0x20/0x20 [ 799.956364][T12492] ? lockdep_hardirqs_on+0x94/0x130 [ 799.961588][T12492] ? __cancel_work+0x2ef/0x380 [ 799.966373][T12492] ? cancel_work+0x20/0x20 [ 799.970806][T12492] ? print_irqtrace_events+0x210/0x210 [ 799.976285][T12492] hci_request_cancel_all+0xcb/0x300 [ 799.981614][T12492] hci_dev_do_close+0x51/0x1070 [ 799.986487][T12492] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 799.992407][T12492] ? _raw_spin_unlock+0x40/0x40 [ 799.997407][T12492] ? kmem_cache_alloc_trace+0x143/0x290 [ 800.002997][T12492] hci_rfkill_set_block+0x114/0x1a0 [ 800.008223][T12492] ? rcu_lock_release+0x20/0x20 [ 800.013095][T12492] rfkill_set_block+0x1e7/0x430 [ 800.017972][T12492] rfkill_fop_write+0x5b7/0x790 [ 800.022849][T12492] ? rfkill_fop_read+0x470/0x470 [ 800.027808][T12492] ? fsnotify_perm+0x64/0x590 [ 800.032511][T12492] ? security_file_permission+0x75/0xa0 [ 800.038080][T12492] ? rfkill_fop_read+0x470/0x470 [ 800.043053][T12492] vfs_write+0x30c/0xe50 [ 800.047336][T12492] ? file_end_write+0x250/0x250 [ 800.052276][T12492] ? __fget_files+0x413/0x480 [ 800.057002][T12492] ? __fdget_pos+0x1e9/0x380 [ 800.061622][T12492] ? ksys_write+0x77/0x2c0 [ 800.066148][T12492] ksys_write+0x1a2/0x2c0 [ 800.070504][T12492] ? print_irqtrace_events+0x210/0x210 [ 800.075995][T12492] ? __ia32_sys_read+0x80/0x80 [ 800.080785][T12492] ? syscall_enter_from_user_mode+0x2e/0x240 [ 800.086794][T12492] ? lockdep_hardirqs_on+0x94/0x130 [ 800.092017][T12492] ? syscall_enter_from_user_mode+0x2e/0x240 [ 800.098027][T12492] do_syscall_64+0x3b/0xb0 [ 800.102472][T12492] ? clear_bhb_loop+0x15/0x70 [ 800.107172][T12492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 800.113091][T12492] RIP: 0033:0x7feaa908cd29 [ 800.117522][T12492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.137147][T12492] RSP: 002b:00007feaa6efd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.145595][T12492] RAX: ffffffffffffffda RBX: 00007feaa927cfa0 RCX: 00007feaa908cd29 [ 800.153591][T12492] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004 [ 800.161589][T12492] RBP: 00007feaa9108a20 R08: 0000000000000000 R09: 0000000000000000 [ 800.169977][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.178021][T12492] R13: 0000000000000000 R14: 00007feaa927cfa0 R15: 00007ffd61742ee8 [ 800.186049][T12492] [ 800.911863][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.919070][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.951929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.959061][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 802.991841][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 802.999066][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 804.031919][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 804.039030][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.071813][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.078920][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.111933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.119089][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.151818][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.158935][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.191936][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.199041][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.513494][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.519823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.231817][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 809.238918][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available