last executing test programs: 1m33.603780705s ago: executing program 0 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x4, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x54004) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r6, 0xfffffffffffffffe, 0x1, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1a, &(0x7f00000006c0)=@raw=[@exit, @alu={0x4, 0x1, 0xb, 0x8, 0x1, 0xffffffffffffffff, 0x4}, @generic={0x8, 0x1, 0x2, 0x7, 0x5f18}, @jmp={0x5, 0x1, 0x2, 0x5, 0x3, 0xfffffffffffffff4, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @alu={0x4, 0x1, 0x0, 0x3, 0xa, 0x74, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r9, &(0x7f00000005c0)="c98406d9727883139e8511b61d7fc013898c8c8bc1508bbe60f64d11b457b0efeea55551c5611cb6543833ec98dbff4c30774f5dbfe3e18c99b48480d162b2aadd296ec29cfd00501057111ed251b13e37a6ea678f647f36a0a5b7f8a24d45b53c0429a5b49f696183285382b82c663d125c85d04918efc3d8e840c0339976012f21bee987ed94d34a41cbc93c", 0x8d, 0xc044, &(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x20) 1m32.837457158s ago: executing program 0 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}]}, 0x24}}, 0x0) 1m31.808283239s ago: executing program 0 (id=1126): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x10, 0x30, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m31.646956771s ago: executing program 0 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000c80)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m31.381515491s ago: executing program 0 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f00000000c0)={[{@lazytime}, {@delalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) 1m31.011302867s ago: executing program 0 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000006c0)={0x2c, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x27, 0x9, 0x43}, 0x2c) r1 = getpid() r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x6, 0x0, [{0x100000, 0x16, &(0x7f00000000c0)=""/22}, {0x200000, 0x16, &(0x7f0000000600)=""/22}, {0x40000, 0xa1, &(0x7f0000000240)=""/161}, {0x60000, 0x40, &(0x7f0000000300)=""/64}, {0x3b000, 0xf2, &(0x7f0000000340)=""/242}, {0x100000, 0x81, &(0x7f0000000440)=""/129}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000003060104aeaed200020000010500010007000000000000000000000095000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x4004084) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000700)=0x20, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 l\\calhost\n', 0x24) 1m15.616006794s ago: executing program 32 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000006c0)={0x2c, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x27, 0x9, 0x43}, 0x2c) r1 = getpid() r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x6, 0x0, [{0x100000, 0x16, &(0x7f00000000c0)=""/22}, {0x200000, 0x16, &(0x7f0000000600)=""/22}, {0x40000, 0xa1, &(0x7f0000000240)=""/161}, {0x60000, 0x40, &(0x7f0000000300)=""/64}, {0x3b000, 0xf2, &(0x7f0000000340)=""/242}, {0x100000, 0x81, &(0x7f0000000440)=""/129}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000003060104aeaed200020000010500010007000000000000000000000095000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x4004084) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000700)=0x20, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 l\\calhost\n', 0x24) 8.480788082s ago: executing program 5 (id=1462): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 8.250550906s ago: executing program 5 (id=1465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0xfe33) 7.378930875s ago: executing program 5 (id=1468): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000004f109ac0d991ad76a218616001a801400030069300000000000000000001c0012800b0001006970766c616e00000c000280"], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket(0x27, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x9) write(r0, &(0x7f0000000200)='g', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYRES32, @ANYBLOB="669960ba0a085bce71f022a430a8c8a6b5cf9e3b6475d2590955150ac2961eb9b00c81b78620fb77dcc373dd43eec3f96c1b03c7b20cae8254f28c091b76f4550d8d6f7d63890e4ff5dee29c14e421ff318db3832a97ad66bd752c789083280caf7b65402ef48edf11c9737309", @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES8], 0x5d) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r11], 0x7c}, 0x1, 0x0, 0x0, 0xbddd5cf3d843fda9}, 0x20000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="3b9bc8787cb779b4243700021f95b59d47b91960479a6aae74e82eb38ac0270ba3249a57cee4f3f5fc1f78ad15700dd7da2062d2e7597b21", @ANYRES16=r7], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x45) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) 7.31108855s ago: executing program 2 (id=1469): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "ac1a91d256ebf87b"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 6.312834083s ago: executing program 3 (id=1470): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000004f109ac0d991ad76a218616001a801400030069300000000000000000001c0012800b0001006970766c"], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket(0x27, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x9) write(r0, &(0x7f0000000200)='g', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYRES32, @ANYBLOB="669960ba0a085bce71f022a430a8c8a6b5cf9e3b6475d2590955150ac2961eb9b00c81b78620fb77dcc373dd43eec3f96c1b03c7b20cae8254f28c091b76f4550d8d6f7d63890e4ff5dee29c14e421ff318db3832a97ad66bd752c789083280caf7b65402ef48edf11c9737309", @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES8], 0x5d) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r11], 0x7c}, 0x1, 0x0, 0x0, 0xbddd5cf3d843fda9}, 0x20000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="3b9bc8787cb779b4243700021f95b59d47b91960479a6aae74e82eb38ac0270ba3249a57cee4f3f5fc1f78ad15700dd7da2062d2e7597b21", @ANYRES16=r7], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x45) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) 4.446833003s ago: executing program 3 (id=1471): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x101, 0x7ff, 0x1, 0x656c}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x17) nanosleep(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg$nl_route(r5, 0x0, 0x0) 4.444316215s ago: executing program 2 (id=1472): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 4.4352101s ago: executing program 5 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 4.287499868s ago: executing program 3 (id=1476): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x9081) fchdir(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x9a, 0xfffffffffffffffe}, 0x10) close(r1) r3 = inotify_init1(0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x12000021) ioctl$I2C_RETRIES(r1, 0x701, 0xd79) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0xffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) sendmsg$inet6(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000005200010000010000fcdbdf250a000000040001008ea2c52cb905d2a2f2e9133477f2fc63b4873907173388820bbaef6efcbd9a295245f92b220da88dd576ba0649a74abe88dc79453fd92bc452cde044581a007d123000c8a61e41ae76011d"], 0x18}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 4.228492823s ago: executing program 3 (id=1477): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x85b5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x85f, 0x7}}, './file0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000040)={{r1, &(0x7f0000000180)='/proc/\x056$N}\x03G\"ip]\x11tiox_cont\x02\x00\x00\x00\xfe\xe8\x04\x00\x00\x00\x00\xcfr\x00\x00\x00\x00\x10\x00\x00f\x9a@\xbbx\x05\x06\x88\xab\xc5\x87!\x03i\xf9Z\xf5]\x9a\x9a0\rnr\x80\xcd\xef\x94\xcd\rD\x1f_,\n\xed\xaaB/k\xbcT\xdd\xa8\xa0W\x84\xf7S\x83\xc0\xa9TR\xfe\x8bm\x18\x8f^y\xcd\x1e!\xc7w\x99*\xfau\x00\xe1\xe4\x14\x9b<\x1f4\xde\xc8?\x17\x11\x96.\xdb\xc2#\xeft\x88\xdf\xae\n><\xc4', 0x442c80, 0x0, 0x3337, 0x0, 0x0}, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x6, 0x30, 0x4, 0x3fe8}, &(0x7f00000000c0)=0x18) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x1, 0x3b6, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x13, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000000100)={0x1f}) fcntl$lock(r2, 0x6, &(0x7f0000000240)={0x0, 0xf090ea5f3c76d32e, 0x8, 0x4540, r5}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x4000) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.904161825s ago: executing program 5 (id=1479): socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x0, &(0x7f00000005c0), &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x20, 0x6, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x844) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="c1000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf25030000000a000900bbbbbbbbbbbb000000000300", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 3.247341075s ago: executing program 2 (id=1480): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000140)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@smackfsroot}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f8000000"], 0x200000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='10', 0x2) mmap(&(0x7f0000200000)=nil, 0x200000, 0x7, 0x40032, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x1000004, 0x10010, r6, 0x944b7000) 3.155388783s ago: executing program 1 (id=1481): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000140)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@smackfsroot}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f8000000"], 0x200000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='10', 0x2) 3.130984475s ago: executing program 4 (id=1482): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x15c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.818646856s ago: executing program 2 (id=1483): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 2.575436315s ago: executing program 1 (id=1484): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x184}}, 0x44050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.536284935s ago: executing program 5 (id=1485): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 2.448605628s ago: executing program 1 (id=1486): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000c40)="c5", 0x1, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) 2.285139545s ago: executing program 3 (id=1487): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x9081) fchdir(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x9a, 0xfffffffffffffffe}, 0x10) close(r1) r3 = inotify_init1(0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x12000021) ioctl$I2C_RETRIES(r1, 0x701, 0xd79) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0xffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) sendmsg$inet6(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000005200010000010000fcdbdf250a000000040001008ea2c52cb905d2a2f2e9133477f2fc63b4873907173388820bbaef6efcbd9a295245f92b220da88dd576ba0649a74abe88dc79453fd92bc452cde044581a007d123000c8a61e41ae76011d"], 0x18}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 1.511327266s ago: executing program 4 (id=1488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) recvfrom(r0, 0x0, 0x0, 0x2, &(0x7f00000102c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) 1.446006986s ago: executing program 2 (id=1489): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x9, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x6000000, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9197, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x2007, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x200, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x6c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f73, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xcaa, 0x10006, 0x0, 0xfffffff7, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc0, 0x39, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) 1.432558428s ago: executing program 1 (id=1490): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==") rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r7 = getpid() rt_tgsigqueueinfo(r7, 0x0, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xffffffff}) rt_tgsigqueueinfo(r7, 0x0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.398923721s ago: executing program 3 (id=1491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1.268364587s ago: executing program 4 (id=1492): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 1.025339564s ago: executing program 4 (id=1493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x94, 0x30, 0xb, 0x5, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) 935.468269ms ago: executing program 4 (id=1494): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 794.216715ms ago: executing program 2 (id=1495): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==") rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r7 = getpid() rt_tgsigqueueinfo(r7, 0x0, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xffffffff}) rt_tgsigqueueinfo(r7, 0x0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) 713.833991ms ago: executing program 1 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20008840) 499.328718ms ago: executing program 1 (id=1497): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x85b5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x85f, 0x7}}, './file0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000040)={{r1, &(0x7f0000000180)='/proc/\x056$N}\x03G\"ip]\x11tiox_cont\x02\x00\x00\x00\xfe\xe8\x04\x00\x00\x00\x00\xcfr\x00\x00\x00\x00\x10\x00\x00f\x9a@\xbbx\x05\x06\x88\xab\xc5\x87!\x03i\xf9Z\xf5]\x9a\x9a0\rnr\x80\xcd\xef\x94\xcd\rD\x1f_,\n\xed\xaaB/k\xbcT\xdd\xa8\xa0W\x84\xf7S\x83\xc0\xa9TR\xfe\x8bm\x18\x8f^y\xcd\x1e!\xc7w\x99*\xfau\x00\xe1\xe4\x14\x9b<\x1f4\xde\xc8?\x17\x11\x96.\xdb\xc2#\xeft\x88\xdf\xae\n><\xc4', 0x442c80, 0x0, 0x3337, 0x0, 0x0}, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x6, 0x30, 0x4, 0x3fe8}, &(0x7f00000000c0)=0x18) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x1, 0x3b6, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x13, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000000100)={0x1f}) fcntl$lock(r2, 0x6, &(0x7f0000000240)={0x0, 0xf090ea5f3c76d32e, 0x8, 0x4540, r5}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x4000) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=1498): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): an invalid length. [ 383.885059][ T7883] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.905405][ T7879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.988012][ T7881] syz_tun: left promiscuous mode [ 383.988232][ T7881] bridge0: port 3(syz_tun) entered disabled state [ 384.141461][ T7881] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 384.224250][ T7887] dummy0: entered promiscuous mode [ 384.255313][ T7887] dummy0: left promiscuous mode [ 385.279579][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 385.368723][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.618'. [ 385.381847][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.618'. [ 385.394172][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.618'. [ 385.439237][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 385.455638][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.456127][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.590256][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 385.590324][ T9] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 385.591159][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 385.591189][ T9] usb 2-1: can't read configurations, error -71 [ 385.786123][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 386.089609][ T5743] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 386.310472][ T5743] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 386.357930][ T5743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.358580][ T5743] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 386.358636][ T5743] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 386.358662][ T5743] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.360700][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.218805][ T7953] dummy0: entered promiscuous mode [ 387.232037][ T7953] erspan0: entered promiscuous mode [ 387.246090][ T7953] debugfs: 'hsr1' already exists in 'hsr' [ 387.253635][ T7953] Cannot create hsr debugfs directory [ 387.261023][ T7953] hsr1: entered allmulticast mode [ 387.267943][ T7953] dummy0: entered allmulticast mode [ 387.273555][ T7953] erspan0: entered allmulticast mode [ 387.466508][ T7938] loop2: detected capacity change from 0 to 4096 [ 387.613595][ T7961] jffs2: notice: (7961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 388.663324][ T7965] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 388.930120][ T7971] NILFS (loop1): device size too small [ 389.372494][ T7970] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 389.545583][ T7970] tipc: Resetting bearer [ 389.568491][ T10] usb 5-1: USB disconnect, device number 17 [ 390.214403][ T7970] syz_tun: left allmulticast mode [ 390.214447][ T7970] syz_tun: left promiscuous mode [ 390.214687][ T7970] bridge0: port 3(syz_tun) entered disabled state [ 390.417783][ T7983] netlink: 'syz.1.640': attribute type 2 has an invalid length. [ 390.515412][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 391.393932][ T7992] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 391.538727][ T1992] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 391.677408][ T1992] usb 3-1: device descriptor read/64, error -71 [ 391.709712][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 391.861249][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 391.871458][ T10] usb 4-1: config 0 has no interfaces? [ 391.891163][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.899551][ T10] usb 4-1: Product: syz [ 391.903817][ T10] usb 4-1: Manufacturer: syz [ 391.903849][ T10] usb 4-1: SerialNumber: syz [ 391.906677][ T10] usb 4-1: config 0 descriptor?? [ 392.008152][ T1992] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 392.147359][ T1992] usb 3-1: device descriptor read/64, error -71 [ 392.253215][ T7998] syzkaller0: entered promiscuous mode [ 392.253260][ T7998] syzkaller0: entered allmulticast mode [ 392.270262][ T1992] usb usb3-port1: attempt power cycle [ 392.392197][ T5729] usb 4-1: USB disconnect, device number 5 [ 392.558052][ T8025] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 392.627229][ T1992] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 392.674436][ T1992] usb 3-1: device descriptor read/8, error -71 [ 392.719179][ T8025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.806768][ T8032] NILFS (loop0): device size too small [ 393.157297][ T1992] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 393.178299][ T1992] usb 3-1: device descriptor read/8, error -71 [ 393.288537][ T1992] usb usb3-port1: unable to enumerate USB device [ 394.774556][ T8055] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 395.380748][ T8074] VFS: file-max limit 0 reached [ 395.386912][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 395.629424][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 395.778993][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 395.779559][ T10] usb 5-1: config 0 has no interfaces? [ 395.791214][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.791240][ T10] usb 5-1: Product: syz [ 395.791254][ T10] usb 5-1: Manufacturer: syz [ 395.791266][ T10] usb 5-1: SerialNumber: syz [ 395.802848][ T10] usb 5-1: config 0 descriptor?? [ 396.111885][ T8076] syzkaller0: entered promiscuous mode [ 396.121114][ T8076] syzkaller0: entered allmulticast mode [ 396.148236][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 396.239079][ T8097] NILFS (loop1): device size too small [ 396.676847][ T10] usb 3-1: device descriptor read/64, error -71 [ 396.986683][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 397.071956][ T5750] usb 5-1: USB disconnect, device number 18 [ 397.127159][ T10] usb 3-1: device descriptor read/64, error -71 [ 397.240912][ T10] usb usb3-port1: attempt power cycle [ 397.313671][ T8107] jffs2: notice: (8107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 398.324243][ T8110] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 398.389241][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 398.423145][ T10] usb 3-1: device descriptor read/8, error -71 [ 398.670970][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 398.700071][ T10] usb 3-1: device descriptor read/8, error -71 [ 399.751867][ T10] usb usb3-port1: unable to enumerate USB device [ 400.488989][ T8136] jffs2: notice: (8136) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.238429][ T8142] netlink: 'syz.1.672': attribute type 29 has an invalid length. [ 401.373102][ T8144] netlink: 'syz.1.672': attribute type 29 has an invalid length. [ 403.630725][ T8155] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 403.697867][ T8151] NILFS (loop4): device size too small [ 404.058531][ T30] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 404.210455][ T30] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 404.213415][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.213459][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 404.213481][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.221302][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.221326][ T30] usb 3-1: Product: syz [ 404.221339][ T30] usb 3-1: Manufacturer: syz [ 404.221352][ T30] usb 3-1: SerialNumber: syz [ 404.233745][ T8160] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.245438][ T30] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 404.245479][ T30] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 404.245518][ T30] usbserial_generic 3-1:1.0: generic converter detected [ 404.264068][ T30] usb 3-1: generic converter now attached to ttyUSB0 [ 404.464215][ T9] usb 3-1: USB disconnect, device number 17 [ 404.477915][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 404.486788][ T9] usbserial_generic 3-1:1.0: device disconnected [ 404.627431][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 404.668346][ T5729] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 404.758039][ T30] usb 1-1: device descriptor read/64, error -71 [ 404.831854][ T5729] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 404.844946][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.845023][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.845049][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 404.845073][ T5729] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.845115][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.057459][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 405.197121][ T30] usb 1-1: device descriptor read/64, error -71 [ 405.279957][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 405.308659][ T30] usb usb1-port1: attempt power cycle [ 405.406567][ T5729] gud 4-1:1.0: probe with driver gud failed with error -5 [ 405.593783][ T8215] jffs2: notice: (8215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 405.870801][ T30] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 405.902626][ T30] usb 1-1: device descriptor read/8, error -71 [ 406.257092][ T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 406.318474][ T30] usb 1-1: device descriptor read/8, error -71 [ 406.514136][ T30] usb usb1-port1: unable to enumerate USB device [ 406.613529][ T8221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.617381][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.4.693'. [ 406.617641][ T8221] unsupported nlmsg_type 40 [ 407.506255][ T1992] usb 4-1: USB disconnect, device number 6 [ 407.992974][ T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 407.993841][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 408.177531][ T30] usb 2-1: device descriptor read/64, error -32 [ 408.417311][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 408.491209][ T8263] syzkaller0: entered promiscuous mode [ 408.491251][ T8263] syzkaller0: entered allmulticast mode [ 408.587609][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 408.596952][ T30] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 408.611423][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.613062][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.654139][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.671867][ T30] usb 2-1: config 0 descriptor?? [ 408.769617][ T30] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 408.792179][ T8258] loop3: detected capacity change from 0 to 512 [ 408.843526][ T8258] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 408.843610][ T8258] FAT-fs (loop3): Filesystem has been set read-only [ 408.997497][ T1992] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 409.177840][ T1992] usb 3-1: Using ep0 maxpacket: 32 [ 409.190250][ T1992] usb 3-1: unable to get BOS descriptor or descriptor too short [ 409.190316][ T1992] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 409.210313][ T1992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.210351][ T1992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.234836][ T1992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.234879][ T1992] usb 3-1: Product: syz [ 409.234910][ T1992] usb 3-1: Manufacturer: syz [ 409.234927][ T1992] usb 3-1: SerialNumber: syz [ 409.616930][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.684142][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.495195][ T1992] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 410.512270][ T1992] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 410.610120][ T1992] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 410.622059][ T1992] usb 3-1: USB disconnect, device number 18 [ 410.719395][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.818303][ T1992] usb 2-1: USB disconnect, device number 12 [ 410.999160][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 411.087109][ T5751] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 411.148373][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 411.156455][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.156958][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.225992][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 411.226078][ T5729] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 411.227305][ T5729] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 411.227337][ T5729] usb 4-1: can't read configurations, error -71 [ 411.234732][ T5751] usb 1-1: device descriptor read/64, error -71 [ 411.487407][ T5751] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 411.651778][ T5751] usb 1-1: device descriptor read/64, error -71 [ 411.788000][ T5751] usb usb1-port1: attempt power cycle [ 412.147764][ T5751] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 412.177285][ T5751] usb 1-1: device descriptor read/8, error -71 [ 412.434360][ T5751] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 412.461092][ T5751] usb 1-1: device descriptor read/8, error -71 [ 412.567728][ T5751] usb usb1-port1: unable to enumerate USB device [ 412.876809][ T8319] MTD: Couldn't look up './dev/mtdblock0': -2 [ 413.637203][ T5729] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 413.823420][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 413.884022][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.890837][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.968600][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short [ 413.968664][ T5729] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 413.977745][ T5729] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 413.977783][ T5729] usb 2-1: can't read configurations, error -71 [ 415.229797][ T8339] netlink: 'syz.0.721': attribute type 4 has an invalid length. [ 416.589934][ T8354] NILFS (loop3): device size too small [ 417.944032][ T8358] syzkaller0: entered promiscuous mode [ 417.950577][ T8358] syzkaller0: entered allmulticast mode [ 418.010061][ T8371] MTD: Couldn't look up './dev/mtdblock0': -2 [ 418.587410][ T8370] dummy0: entered promiscuous mode [ 418.601961][ T8370] gretap0: entered promiscuous mode [ 418.613441][ T8370] debugfs: 'hsr1' already exists in 'hsr' [ 418.622078][ T8370] Cannot create hsr debugfs directory [ 418.630227][ T8370] hsr1: entered allmulticast mode [ 418.637235][ T8370] dummy0: entered allmulticast mode [ 418.644478][ T8370] gretap0: entered allmulticast mode [ 418.882111][ T8368] syzkaller0: entered promiscuous mode [ 418.882142][ T8368] syzkaller0: entered allmulticast mode [ 421.764852][ T8398] NILFS (loop3): device size too small [ 425.081223][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.739'. [ 425.716596][ T8402] dummy0: entered promiscuous mode [ 425.719709][ T8402] gretap0: entered promiscuous mode [ 425.721898][ T8402] debugfs: 'hsr1' already exists in 'hsr' [ 425.721921][ T8402] Cannot create hsr debugfs directory [ 425.722507][ T8402] hsr1: entered allmulticast mode [ 425.722523][ T8402] dummy0: entered allmulticast mode [ 425.722588][ T8402] gretap0: entered allmulticast mode [ 425.871034][ T8406] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 425.891011][ T8406] bond2 (unregistering): Released all slaves [ 426.013726][ T8416] MTD: Couldn't look up './dev/mtdblock0': -2 [ 426.840956][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 429.209827][ T5743] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 429.234659][ T8434] x_tables: duplicate underflow at hook 1 [ 429.367129][ T5743] usb 5-1: Using ep0 maxpacket: 16 [ 429.379533][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.389865][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.440474][ T8439] IPVS: nq: FWM 3 0x00000003 - no destination available [ 429.452340][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 429.460399][ T5743] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 429.470750][ T5743] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 429.478487][ T5743] usb 5-1: can't read configurations, error -71 [ 429.578460][ T8441] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 429.654642][ T8441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.666720][ T8444] tipc: Resetting bearer [ 429.689427][ T8444] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 429.917338][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.755'. [ 430.187415][ T8450] MTD: Couldn't look up './dev/mtdblock0': -2 [ 431.165908][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 431.278551][ T8458] NILFS (loop1): device size too small [ 433.987172][ T5750] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 434.159833][ T5750] usb 3-1: Using ep0 maxpacket: 16 [ 434.165980][ T5750] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 434.177118][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.188264][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.205357][ T5750] usb 3-1: config 0 descriptor?? [ 434.410056][ T5750] usbhid 3-1:0.0: can't add hid device: -71 [ 434.410184][ T5750] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.441169][ T5750] usb 3-1: USB disconnect, device number 19 [ 437.289705][ T8497] MTD: Couldn't look up './dev/mtdblock0': -2 [ 437.658629][ T5729] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 437.823095][ T5729] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 437.877827][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.888565][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 437.888601][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 437.888636][ T5729] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.888800][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.582964][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 439.654222][ T5729] gud 4-1:1.0: probe with driver gud failed with error -5 [ 439.860500][ T8516] jffs2: notice: (8516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 439.962702][ T8519] netlink: 52 bytes leftover after parsing attributes in process `syz.1.777'. [ 439.975487][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.975796][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.377523][ T8533] NILFS (loop1): device size too small [ 440.392582][ T8533] MTD: Couldn't look up './dev/mtdblock0': -2 [ 440.438098][ T8537] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 440.506652][ T8537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.617708][ T8537] bond1: (slave geneve2): making interface the new active one [ 440.625406][ T8537] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 440.752090][ T8545] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 440.825541][ T8548] NILFS (loop0): device size too small [ 440.852097][ T5743] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 441.135055][ T5750] usb 4-1: USB disconnect, device number 9 [ 441.280891][ T5743] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 441.412257][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.412322][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.412359][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.501915][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.502502][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.641440][ T5743] usb 3-1: config 0 descriptor?? [ 441.772020][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 441.772709][ T8552] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 441.886760][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'. [ 441.886928][ T8559] openvswitch: netlink: Flow actions attr not present in new flow. [ 441.915548][ T8559] netlink: 76 bytes leftover after parsing attributes in process `syz.1.790'. [ 441.983080][ T59] IPVS: starting estimator thread 0... [ 442.067781][ T8562] IPVS: using max 36 ests per chain, 86400 per kthread [ 442.083243][ T5743] usbhid 3-1:0.0: can't add hid device: -71 [ 442.083357][ T5743] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 442.090843][ T5743] usb 3-1: USB disconnect, device number 20 [ 442.117113][ T5750] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 442.267766][ T5750] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 442.279520][ T5750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.279583][ T5750] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 442.279631][ T5750] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.316305][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.316349][ T5750] usb 4-1: Product: syz [ 442.316380][ T5750] usb 4-1: Manufacturer: syz [ 442.316397][ T5750] usb 4-1: SerialNumber: syz [ 442.345468][ T8557] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.359156][ T5750] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 442.359197][ T5750] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 442.359258][ T5750] usbserial_generic 4-1:1.0: generic converter detected [ 442.402132][ T5750] usb 4-1: generic converter now attached to ttyUSB0 [ 442.517151][ T30] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 442.567159][ T5743] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 442.737164][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 442.748332][ T5743] usb 1-1: Using ep0 maxpacket: 16 [ 443.182721][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.265781][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.580504][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.652307][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.684081][ T5750] usb 4-1: USB disconnect, device number 10 [ 443.716440][ T5750] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 443.719066][ T5750] usbserial_generic 4-1:1.0: device disconnected [ 443.812143][ T5743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 443.820980][ T5743] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 443.833318][ T5743] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 443.841242][ T5743] usb 1-1: can't read configurations, error -71 [ 443.841647][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.841691][ T30] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 443.845157][ T30] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 443.845190][ T30] usb 5-1: can't read configurations, error -71 [ 445.019976][ T8604] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 445.041167][ T8601] syzkaller0: entered promiscuous mode [ 445.041205][ T8601] syzkaller0: entered allmulticast mode [ 446.404354][ T8620] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 447.047532][ T5750] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 447.207819][ T5750] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 447.208988][ T5750] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.209401][ T5750] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 447.209443][ T5750] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.213700][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.213725][ T5750] usb 5-1: Product: syz [ 447.213738][ T5750] usb 5-1: Manufacturer: syz [ 447.213751][ T5750] usb 5-1: SerialNumber: syz [ 447.231219][ T8631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 447.233930][ T5750] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 447.233951][ T5750] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 447.235625][ T5750] usbserial_generic 5-1:1.0: generic converter detected [ 447.241992][ T5750] usb 5-1: generic converter now attached to ttyUSB0 [ 447.327891][ T30] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 447.453193][ T9] usb 5-1: USB disconnect, device number 23 [ 447.466161][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 447.475812][ T9] usbserial_generic 5-1:1.0: device disconnected [ 447.478770][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 447.481324][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 447.481368][ T30] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 447.493188][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.493213][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.495607][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.495631][ T30] usb 1-1: Product: syz [ 447.495644][ T30] usb 1-1: Manufacturer: syz [ 447.495657][ T30] usb 1-1: SerialNumber: syz [ 447.749143][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.752831][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.784426][ T30] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 447.784517][ T30] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 447.836517][ T30] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 447.841517][ T30] usb 1-1: USB disconnect, device number 20 [ 447.870516][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.533694][ T8640] ip_tables: iptables: counters copy to user failed while replacing table [ 449.092195][ T8620] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 449.095070][ T8655] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 450.813646][ T8677] netlink: 'syz.2.828': attribute type 2 has an invalid length. [ 450.859096][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 451.141113][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.175971][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 451.176034][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.176061][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 451.176084][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.176126][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.923859][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.939485][ T9] usb 5-1: invalid MIDI out EP 0 [ 452.342080][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 452.364424][ T9] usb 5-1: USB disconnect, device number 24 [ 452.510397][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'. [ 452.625417][ T8698] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 452.650046][ T8698] bond3 (unregistering): Released all slaves [ 452.687236][ T5750] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 452.837146][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 452.843603][ T5750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.843696][ T5750] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 452.844973][ T5750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.844993][ T5750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.847232][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.847253][ T5750] usb 4-1: Product: syz [ 452.847266][ T5750] usb 4-1: Manufacturer: syz [ 452.847279][ T5750] usb 4-1: SerialNumber: syz [ 452.964608][ T8704] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 454.493835][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.494187][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.591134][ T8715] netlink: 'syz.4.840': attribute type 2 has an invalid length. [ 454.623673][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.839'. [ 454.738988][ T5750] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 454.746427][ T5750] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 454.926651][ T5750] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 454.932900][ T5750] usb 4-1: USB disconnect, device number 11 [ 454.980773][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.100670][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 455.112045][ T8725] nbd: must specify a size in bytes for the device [ 457.049867][ T8727] ubi31: attaching mtd0 [ 457.375823][ T8727] ubi31: scanning is finished [ 457.421396][ T8727] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 457.986604][ T8733] loop4: detected capacity change from 0 to 512 [ 458.034051][ T8727] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 458.046456][ T8733] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 458.046509][ T8733] FAT-fs (loop4): Filesystem has been set read-only [ 459.029644][ T8753] ip_tables: iptables: counters copy to user failed while replacing table [ 460.084363][ T8760] loop3: detected capacity change from 0 to 4096 [ 460.175768][ T8764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.273790][ T8763] netlink: 'syz.4.856': attribute type 4 has an invalid length. [ 461.931679][ T8774] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 461.980736][ T8771] ubi31: attaching mtd0 [ 461.982659][ T8771] ubi31: scanning is finished [ 461.982725][ T8771] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 462.042676][ T8775] netlink: 52 bytes leftover after parsing attributes in process `syz.1.858'. [ 462.063599][ T8777] ip6tnl1: entered allmulticast mode [ 462.116753][ T8777] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 462.116781][ T8777] netlink: 224 bytes leftover after parsing attributes in process `syz.3.861'. [ 462.134651][ T8771] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 462.324272][ T8780] xt_hashlimit: size too large, truncated to 1048576 [ 462.722619][ T8790] ip_tables: iptables: counters copy to user failed while replacing table [ 462.800995][ T8793] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 463.204435][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'. [ 463.214553][ T8798] openvswitch: netlink: Flow actions attr not present in new flow. [ 463.299927][ T8800] netlink: 76 bytes leftover after parsing attributes in process `syz.3.868'. [ 463.497534][ T8803] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 464.356854][ T8818] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 464.657366][ T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 464.861321][ T30] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 464.882959][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.883194][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 464.883252][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 464.883292][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.883589][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.750321][ T8831] x_tables: duplicate underflow at hook 1 [ 465.980119][ T30] gud 3-1:1.0: Failed to add properties (error=-121) [ 465.987589][ T30] gud 3-1:1.0: probe with driver gud failed with error -121 [ 466.123091][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.880'. [ 466.203377][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 466.203781][ T5743] usb 3-1: USB disconnect, device number 21 [ 466.273911][ T8844] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 466.293832][ T8844] bond2 (unregistering): Released all slaves [ 466.303320][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 466.466445][ T8854] ip6tnl1: entered allmulticast mode [ 466.474441][ T8852] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 466.689176][ T5750] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 466.811891][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 466.824561][ T8870] nbd: must specify a size in bytes for the device [ 466.847837][ T5750] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 466.858350][ T5750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.858408][ T5750] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 466.858449][ T5750] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 466.858474][ T5750] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.858516][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.889478][ T5751] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 466.900864][ T8874] netlink: 52 bytes leftover after parsing attributes in process `syz.2.894'. [ 466.902133][ T8873] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 466.902150][ T8873] netlink: 224 bytes leftover after parsing attributes in process `syz.3.893'. [ 467.067998][ T5751] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 467.082077][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.082165][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.082213][ T5751] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.082237][ T5751] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.082300][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.315942][ T8888] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 467.693964][ T8897] __nla_validate_parse: 1 callbacks suppressed [ 467.701342][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.903'. [ 467.701383][ T8897] openvswitch: netlink: Flow actions attr not present in new flow. [ 467.770070][ T5750] gud 2-1:1.0: Failed to get connectors (error=-71) [ 467.770120][ T5750] gud 2-1:1.0: probe with driver gud failed with error -71 [ 467.843542][ T5750] usb 2-1: USB disconnect, device number 15 [ 467.956817][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 467.964897][ T5751] gud 1-1:1.0: Failed to get connectors (error=-32) [ 467.972703][ T5751] gud 1-1:1.0: probe with driver gud failed with error -32 [ 468.018989][ T5751] usb 1-1: USB disconnect, device number 21 [ 468.067863][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 468.067905][ T8907] nbd: must specify a size in bytes for the device [ 468.225114][ T8898] loop3: detected capacity change from 0 to 4096 [ 468.362846][ T8909] ubi31: attaching mtd0 [ 468.364721][ T8909] ubi31: scanning is finished [ 468.364798][ T8909] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 468.387770][ T5743] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 468.412867][ T8912] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.540120][ T8909] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 468.540524][ T5743] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 468.541604][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.541645][ T5743] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.541665][ T5743] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.541685][ T5743] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.541726][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.753034][ T8917] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 468.768276][ T8919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.910'. [ 469.078454][ T8927] NILFS (loop3): device size too small [ 469.234117][ T8931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.370512][ T8936] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 469.383149][ T8936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.916'. [ 469.394004][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 469.394054][ T8938] nbd: must specify a size in bytes for the device [ 469.411823][ T5743] gud 3-1:1.0: Failed to get connectors (error=-71) [ 469.421070][ T5743] gud 3-1:1.0: probe with driver gud failed with error -71 [ 469.451004][ T5743] usb 3-1: USB disconnect, device number 22 [ 469.522649][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 469.534686][ T8942] ip6gretap0: entered promiscuous mode [ 469.536594][ T8942] macvtap1: entered promiscuous mode [ 469.536853][ T8942] macvtap1: entered allmulticast mode [ 469.536867][ T8942] ip6gretap0: entered allmulticast mode [ 469.560735][ T8942] ip6gretap0: left allmulticast mode [ 469.560916][ T8942] ip6gretap0: left promiscuous mode [ 469.566216][ T8942] macvtap1: left promiscuous mode [ 469.566235][ T8942] macvtap1: left allmulticast mode [ 469.794867][ T8952] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 469.937647][ T5751] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 470.088368][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 470.091190][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 470.091236][ T5751] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 470.092164][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.092184][ T5751] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.094265][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.094299][ T5751] usb 1-1: Product: syz [ 470.094312][ T5751] usb 1-1: Manufacturer: syz [ 470.094336][ T5751] usb 1-1: SerialNumber: syz [ 470.230200][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 470.239426][ T8966] nbd: must specify a size in bytes for the device [ 470.343541][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.345878][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.486529][ T5751] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 470.486622][ T5751] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 470.572621][ T8974] ip_tables: iptables: counters copy to user failed while replacing table [ 471.082109][ T8987] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 471.476458][ T5751] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 471.482897][ T5751] usb 1-1: USB disconnect, device number 22 [ 471.619818][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.706527][ T8996] netlink: 'syz.3.936': attribute type 12 has an invalid length. [ 471.781540][ T8999] netlink: 52 bytes leftover after parsing attributes in process `syz.4.938'. [ 471.885982][ T9003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.817158][ T5751] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 474.015572][ T9038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'. [ 474.153773][ T5751] usb 5-1: Using ep0 maxpacket: 32 [ 474.344071][ T5751] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.344145][ T5751] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 474.400804][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.400852][ T5751] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.493081][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.493127][ T5751] usb 5-1: Product: syz [ 474.493155][ T5751] usb 5-1: Manufacturer: syz [ 474.493173][ T5751] usb 5-1: SerialNumber: syz [ 474.734989][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.739328][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.822181][ T9047] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 474.825215][ T5751] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 474.825277][ T5751] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 474.954916][ T5751] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 474.979548][ T5751] usb 5-1: USB disconnect, device number 25 [ 475.040744][ T9047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.068522][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.112695][ T9055] bond2: (slave geneve2): making interface the new active one [ 475.149398][ T9055] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 475.227780][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 475.240914][ T9055] syz.2.955 (9055) used greatest stack depth: 16000 bytes left [ 475.289828][ T9063] ip6gretap0: entered promiscuous mode [ 475.295753][ T9063] macvtap1: entered promiscuous mode [ 475.301633][ T9063] macvtap1: entered allmulticast mode [ 475.308253][ T9063] ip6gretap0: entered allmulticast mode [ 475.334877][ T9064] ip6gretap0: left allmulticast mode [ 475.335058][ T9064] ip6gretap0: left promiscuous mode [ 475.348007][ T9064] macvtap1: left promiscuous mode [ 475.348046][ T9064] macvtap1: left allmulticast mode [ 475.369447][ T9066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.447053][ T9070] netlink: 'syz.4.963': attribute type 12 has an invalid length. [ 476.593465][ T9087] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 476.601941][ T9087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.968'. [ 476.793767][ T9094] NILFS (loop1): device size too small [ 476.856968][ T9089] MTD: Couldn't look up './dev/mtdblock0': -2 [ 476.957143][ T5729] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 476.984820][ T9104] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 477.105723][ T9110] netlink: 'syz.1.976': attribute type 12 has an invalid length. [ 477.107295][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 477.110298][ T5729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 477.110353][ T5729] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 477.111876][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.111903][ T5729] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.115687][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.115718][ T5729] usb 1-1: Product: syz [ 477.116067][ T5729] usb 1-1: Manufacturer: syz [ 477.116266][ T5729] usb 1-1: SerialNumber: syz [ 477.352953][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.368470][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.896938][ T5729] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 477.905614][ T5729] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 478.622133][ T5729] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 478.635803][ T5729] usb 1-1: USB disconnect, device number 23 [ 478.686261][ T9136] netlink: 'syz.2.984': attribute type 2 has an invalid length. [ 478.766480][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.611802][ T9151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 479.811648][ T9150] syzkaller0: entered promiscuous mode [ 479.812314][ T9150] syzkaller0: entered allmulticast mode [ 479.968686][ T9161] loop4: detected capacity change from 0 to 512 [ 479.989318][ T9161] EXT4-fs: Ignoring removed oldalloc option [ 479.997186][ T9161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 480.092654][ T9161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.267275][ T5750] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 480.450781][ T5750] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 480.470020][ T5750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.480752][ T5750] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 480.480797][ T5750] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.559275][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.568543][ T5750] usb 4-1: Product: syz [ 480.574482][ T5750] usb 4-1: Manufacturer: syz [ 480.579732][ T5750] usb 4-1: SerialNumber: syz [ 480.682500][ T9170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 480.744494][ T5750] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 480.757104][ T5750] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 480.772453][ T5750] usbserial_generic 4-1:1.0: generic converter detected [ 480.931548][ T5750] usb 4-1: generic converter now attached to ttyUSB0 [ 481.109929][ T5750] usb 4-1: USB disconnect, device number 12 [ 481.127500][ T5750] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 481.127847][ T5750] usbserial_generic 4-1:1.0: device disconnected [ 482.700771][ T5750] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 482.802470][ T9161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.877132][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 482.883145][ T5750] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 482.896122][ T5750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.896185][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.960145][ T5750] usb 1-1: config 0 descriptor?? [ 483.027235][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.046277][ T9206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.595173][ T5750] mcp2200 0003:04D8:00DF.0008: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 483.882094][ T5750] usb 1-1: USB disconnect, device number 24 [ 485.543599][ T9223] jffs2: notice: (9223) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.551394][ T9226] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 486.809599][ T9248] syzkaller0: entered promiscuous mode [ 486.809647][ T9248] syzkaller0: entered allmulticast mode [ 487.349321][ T9261] bridge0: port 3(syz_tun) entered blocking state [ 487.356481][ T9261] bridge0: port 3(syz_tun) entered disabled state [ 487.428205][ T9261] syz_tun: entered promiscuous mode [ 487.970757][ T9262] netlink: 'syz.0.1016': attribute type 12 has an invalid length. [ 488.143718][ T9275] jffs2: notice: (9275) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 489.477362][ T5751] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 489.639222][ T5751] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 489.649753][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.660674][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.670717][ T5751] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 489.680535][ T5751] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.693569][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.761679][ T9298] loop1: detected capacity change from 0 to 1024 [ 489.843425][ T9298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.304698][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.542021][ T5751] gud 4-1:1.0: Failed to get connectors (error=-71) [ 490.542073][ T5751] gud 4-1:1.0: probe with driver gud failed with error -71 [ 490.581998][ T5751] usb 4-1: USB disconnect, device number 13 [ 490.612249][ T9320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1034'. [ 490.733732][ T9323] jffs2: notice: (9323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 490.920869][ T9333] MTD: Couldn't look up './dev/mtdblock0': -2 [ 492.032521][ T9339] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1038'. [ 492.038766][ T9342] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 492.661362][ T9358] ubi31: attaching mtd0 [ 492.663263][ T9358] ubi31: scanning is finished [ 492.663338][ T9358] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 492.684900][ T9363] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1045'. [ 492.760389][ T9358] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 493.021292][ T9374] loop3: detected capacity change from 0 to 1024 [ 493.099064][ T9374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.159635][ T9380] jffs2: notice: (9380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 494.133683][ T9390] netlink: 'syz.2.1039': attribute type 2 has an invalid length. [ 494.218365][ T9392] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1052'. [ 494.231122][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.346952][ T9397] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 494.461030][ T5777] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 494.628908][ T5777] usb 2-1: Using ep0 maxpacket: 16 [ 494.636158][ T5777] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 494.646518][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.659721][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.674944][ T5777] usb 2-1: config 0 descriptor?? [ 495.282957][ T9415] jffs2: notice: (9415) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 495.430616][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 495.789290][ T9423] jffs2: notice: (9423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 496.548014][ T5777] mcp2200 0003:04D8:00DF.0009: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 496.620517][ T5777] usb 2-1: USB disconnect, device number 16 [ 496.797295][ T1236] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 497.599289][ T1236] usb 4-1: Using ep0 maxpacket: 16 [ 497.608667][ T1236] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 497.618884][ T1236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.618957][ T1236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.647490][ T1236] usb 4-1: config 0 descriptor?? [ 498.088793][ T1236] mcp2200 0003:04D8:00DF.000A: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 498.190543][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 498.644352][ T9460] ubi31: attaching mtd0 [ 498.646239][ T9460] ubi31: scanning is finished [ 498.646286][ T9460] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 498.666133][ T5777] usb 4-1: USB disconnect, device number 14 [ 498.755493][ T9464] loop1: detected capacity change from 0 to 1024 [ 498.778358][ T9460] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 498.863887][ T9464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.978270][ T9469] ip_tables: iptables: counters copy to user failed while replacing table [ 499.039643][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.478922][ T9477] syzkaller0: entered promiscuous mode [ 499.478969][ T9477] syzkaller0: entered allmulticast mode [ 500.133734][ T9485] jffs2: notice: (9485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 500.299885][ T9490] x_tables: duplicate underflow at hook 1 [ 500.639121][ T9498] loop2: detected capacity change from 0 to 1024 [ 500.744814][ T9498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.009254][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.096114][ T9510] loop1: detected capacity change from 0 to 512 [ 501.104091][ T9510] EXT4-fs (loop1): Test dummy encryption mode enabled [ 501.104319][ T9484] loop3: detected capacity change from 0 to 32768 [ 501.150452][ T9510] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1091: inode has both inline data and extents flags [ 501.150657][ T9510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.157974][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 501.157997][ C1] EXT4-fs (loop1): initial error at time 1786384084: ext4_orphan_get:1403: inode 15 [ 501.158035][ C1] EXT4-fs (loop1): last error at time 1786384084: ext4_orphan_get:1403: inode 15 [ 501.164161][ T9510] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1091: couldn't read orphan inode 15 (err -117) [ 501.164357][ T9510] loop1: lost filesystem error report for type 5 error -117 [ 501.184982][ T9510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.245002][ T9484] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 501.245002][ T9484] [ 501.246121][ T9484] ERROR: (device loop3): remounting filesystem as read-only [ 501.288622][ T5750] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 501.438632][ T5750] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 501.445609][ T5750] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.445657][ T5750] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 501.445678][ T5750] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 501.445700][ T5750] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.445737][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.050790][ T9510] fscrypt: AES-256-XTS using blk-crypto-fallback [ 502.081775][ T9524] jffs2: notice: (9524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 502.374702][ T5750] gud 5-1:1.0: Failed to get connectors (error=-5) [ 502.374750][ T5750] gud 5-1:1.0: probe with driver gud failed with error -5 [ 502.621018][ T1236] usb 5-1: USB disconnect, device number 26 [ 502.697953][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.731952][ T5750] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 502.892777][ T5750] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 502.897612][ T5750] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 502.897655][ T5750] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 502.897680][ T5750] usb 3-1: config 0 interface 0 has no altsetting 0 [ 502.897712][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.904314][ T5750] usb 3-1: config 0 descriptor?? [ 502.952026][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.984682][ T9538] loop1: detected capacity change from 0 to 1024 [ 503.035729][ T9538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.398079][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.579657][ T9553] netlink: 'syz.3.1103': attribute type 2 has an invalid length. [ 503.702339][ T5750] usbhid 3-1:0.0: can't add hid device: -71 [ 503.702444][ T5750] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 503.720083][ T5750] usb 3-1: USB disconnect, device number 23 [ 504.312028][ T9566] jffs2: notice: (9566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 504.803021][ T9580] loop0: detected capacity change from 0 to 1024 [ 504.902490][ T9580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.926581][ T9587] loop2: detected capacity change from 0 to 512 [ 504.933362][ T9587] EXT4-fs (loop2): Test dummy encryption mode enabled [ 504.951976][ T9587] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1116: inode has both inline data and extents flags [ 504.952030][ T9587] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.952697][ T9587] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1116: couldn't read orphan inode 15 (err -117) [ 504.952739][ T9587] loop2: lost filesystem error report for type 5 error -117 [ 504.959615][ T9587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.219873][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.601440][ T9598] netlink: 'syz.0.1117': attribute type 2 has an invalid length. [ 506.904062][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.189506][ T5751] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 507.348402][ T5751] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 507.349511][ T5751] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.349534][ T5751] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.349552][ T5751] usb 2-1: config 0 has no interface number 0 [ 507.349588][ T5751] usb 2-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.349613][ T5751] usb 2-1: config 0 interface 1 has no altsetting 0 [ 507.349642][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.354509][ T5751] usb 2-1: config 0 descriptor?? [ 507.373732][ T5751] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 507.456060][ T9629] loop0: detected capacity change from 0 to 512 [ 507.507214][ T5751] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 507.548319][ T9629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.550776][ T9629] ext4 filesystem being mounted at /240/file1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.655202][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.687158][ T5751] usb 4-1: Using ep0 maxpacket: 16 [ 507.690909][ T5751] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 507.692513][ T5751] usb 4-1: config 0 has no interfaces? [ 507.700475][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.700499][ T5751] usb 4-1: Product: syz [ 507.700513][ T5751] usb 4-1: Manufacturer: syz [ 507.700526][ T5751] usb 4-1: SerialNumber: syz [ 507.707805][ T5751] usb 4-1: config 0 descriptor?? [ 507.759379][ T9637] loop4: detected capacity change from 0 to 512 [ 507.767598][ T9637] EXT4-fs (loop4): Test dummy encryption mode enabled [ 507.787129][ T9637] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1134: inode has both inline data and extents flags [ 507.787169][ T9637] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.793272][ T9637] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1134: couldn't read orphan inode 15 (err -117) [ 507.793305][ T9637] loop4: lost filesystem error report for type 5 error -117 [ 507.801106][ T9637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.876045][ T9637] overlayfs: failed to resolve './file1': -2 [ 507.916812][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.918823][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.924491][ T5751] usb 4-1: USB disconnect, device number 15 [ 507.983816][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.125230][ T9643] loop4: detected capacity change from 0 to 512 [ 508.133035][ T9643] EXT4-fs (loop4): Test dummy encryption mode enabled [ 508.144517][ T9643] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1137: inode has both inline data and extents flags [ 508.144552][ T9643] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.145685][ T9643] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1137: couldn't read orphan inode 15 (err -117) [ 508.145715][ T9643] loop4: lost filesystem error report for type 5 error -117 [ 508.152658][ T9643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.223950][ T9643] overlayfs: failed to resolve './file1': -2 [ 508.308994][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.062861][ T5777] usb 2-1: USB disconnect, device number 17 [ 511.290438][ T9677] loop3: detected capacity change from 0 to 512 [ 511.333958][ T9677] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 511.334111][ T9677] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 511.334151][ T9677] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1147: Corrupt directory, running e2fsck is recommended [ 511.378461][ T9677] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 511.378589][ T9677] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1147: corrupted in-inode xattr: e_name out of bounds [ 511.378757][ T9677] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.379228][ T9677] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1147: couldn't read orphan inode 15 (err -117) [ 511.379257][ T9677] loop3: lost filesystem error report for type 5 error -117 [ 511.402308][ T1236] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 511.433574][ T9677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.541772][ T9687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1150'. [ 511.547776][ T1236] usb 3-1: Using ep0 maxpacket: 16 [ 511.548570][ T1236] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 511.549680][ T1236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.549722][ T1236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.554792][ T1236] usb 3-1: config 0 descriptor?? [ 511.608551][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.300581][ T1236] mcp2200 0003:04D8:00DF.000B: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 512.673709][ T1236] usb 3-1: USB disconnect, device number 24 [ 512.805423][ T9691] loop1: detected capacity change from 0 to 512 [ 513.074340][ T9712] loop3: detected capacity change from 0 to 512 [ 513.076022][ T9712] EXT4-fs (loop3): Test dummy encryption mode enabled [ 513.078996][ T9712] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1159: inode has both inline data and extents flags [ 513.079025][ T9712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.079267][ T9712] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1159: couldn't read orphan inode 15 (err -117) [ 513.079292][ T9712] loop3: lost filesystem error report for type 5 error -117 [ 513.081368][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.170548][ T9712] overlayfs: failed to resolve './file0': -2 [ 513.231570][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.242424][ T9715] loop2: detected capacity change from 0 to 512 [ 513.267879][ T9715] EXT4-fs (loop2): Test dummy encryption mode enabled [ 513.279498][ T9715] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1160: inode has both inline data and extents flags [ 513.279551][ T9715] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.287057][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 513.287080][ C0] EXT4-fs (loop2): initial error at time 1786384096: ext4_orphan_get:1403: inode 15 [ 513.287107][ C0] EXT4-fs (loop2): last error at time 1786384096: ext4_orphan_get:1403: inode 15 [ 513.310087][ T9715] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1160: couldn't read orphan inode 15 (err -117) [ 513.310119][ T9715] loop2: lost filesystem error report for type 5 error -117 [ 513.345657][ T9715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.552130][ T9721] overlayfs: failed to resolve './file1': -2 [ 514.300962][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.450183][ T9726] syzkaller0: entered promiscuous mode [ 514.450244][ T9726] syzkaller0: entered allmulticast mode [ 515.625844][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 515.709461][ T9741] loop3: detected capacity change from 0 to 512 [ 516.167550][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 516.333491][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 516.334928][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.334972][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.334992][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.335017][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.335055][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.763735][ T9] gud 4-1:1.0: No supported pixel formats found [ 516.763784][ T9] gud 4-1:1.0: probe with driver gud failed with error -22 [ 517.757133][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 517.917392][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 517.927403][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 517.960606][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.960759][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.001920][ T9] usb 3-1: config 0 descriptor?? [ 518.697664][ T9] mcp2200 0003:04D8:00DF.000C: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 519.298269][ T9] usb 3-1: USB disconnect, device number 25 [ 519.615603][ T1236] usb 4-1: USB disconnect, device number 16 [ 520.026406][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 520.122937][ T9785] NILFS (loop1): device size too small [ 520.128959][ T5751] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 520.187199][ T9787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.279500][ T9793] process 'syz.4.1188' launched './file0' with NULL argv: empty string added [ 520.288610][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 520.296642][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.296708][ T5751] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 520.317158][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.317185][ T5751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.338382][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.338422][ T5751] usb 3-1: Product: syz [ 520.338456][ T5751] usb 3-1: Manufacturer: syz [ 520.338474][ T5751] usb 3-1: SerialNumber: syz [ 520.428784][ T9799] jffs2: notice: (9799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 520.533237][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 520.566080][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.568832][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.589590][ T5751] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 520.589672][ T5751] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 520.635135][ T9807] loop1: detected capacity change from 0 to 1024 [ 520.666337][ T9807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.696203][ T5751] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 520.714835][ T5751] usb 3-1: USB disconnect, device number 26 [ 520.742628][ T9807] overlayfs: missing 'workdir' [ 520.748788][ T9812] syzkaller0: entered promiscuous mode [ 520.748812][ T9812] syzkaller0: entered allmulticast mode [ 520.761795][ T6511] udevd[6511]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.832596][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.239669][ T9818] NILFS (loop2): device size too small [ 522.185449][ T9825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.459870][ T9829] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 522.777223][ T1236] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 522.928072][ T1236] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 522.929306][ T1236] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.929344][ T1236] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 522.929362][ T1236] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.932547][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.932571][ T1236] usb 3-1: Product: syz [ 522.932585][ T1236] usb 3-1: Manufacturer: syz [ 522.932598][ T1236] usb 3-1: SerialNumber: syz [ 522.959530][ T1236] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 522.959555][ T1236] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 522.959594][ T1236] usbserial_generic 3-1:1.0: device has no bulk endpoints [ 523.225978][ T1236] usb 3-1: USB disconnect, device number 27 [ 523.439766][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.467796][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.478337][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.489763][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.500352][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.950798][ T9846] jffs2: notice: (9846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 524.647432][ T9816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1196'. [ 524.832164][ T5618] tipc: Resetting bearer [ 524.882099][ T5618] bond2: (slave syz_tun): Removing an active aggregator [ 524.892938][ T5618] bond2: (slave syz_tun): Releasing backup interface [ 524.914882][ T5618] tipc: Resetting bearer [ 524.925065][ T5618] tipc: Disabling bearer [ 524.967489][ T9853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.967536][ T9853] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 525.195253][ T9860] NILFS (loop4): device size too small [ 525.199279][ T9853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 525.199301][ T9853] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 525.302569][ T9853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.302602][ T9853] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 525.352472][ T9853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 525.367809][ T9853] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 525.486742][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.600296][ T9868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.042572][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.722896][ T9880] jffs2: notice: (9880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 527.453510][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.961235][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1215'. [ 528.260300][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.382234][ T1236] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 528.527384][ T1236] usb 4-1: Using ep0 maxpacket: 16 [ 528.528251][ T1236] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 528.529474][ T1236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.529517][ T1236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.570724][ T1236] usb 4-1: config 0 descriptor?? [ 528.995577][ T1236] mcp2200 0003:04D8:00DF.000D: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 529.202756][ T1148] bridge_slave_1: left allmulticast mode [ 529.210291][ T1148] bridge_slave_1: left promiscuous mode [ 529.218616][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.240803][ T1148] bridge_slave_0: left allmulticast mode [ 529.246719][ T1148] bridge_slave_0: left promiscuous mode [ 529.257872][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.390259][ T5777] usb 4-1: USB disconnect, device number 17 [ 530.656069][ T9936] jffs2: notice: (9936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 531.814017][ T1148] bond1 (unregistering): (slave geneve2): Releasing active interface [ 531.993776][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.025080][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.038778][ T1148] bond0 (unregistering): Released all slaves [ 532.059560][ T1148] bond1 (unregistering): Released all slaves [ 532.084813][ T1148] bond2 (unregistering): Released all slaves [ 532.244660][ T9944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1227'. [ 532.396857][ T1148] tipc: Left network mode [ 532.461225][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.600564][ T9960] loop1: detected capacity change from 0 to 1024 [ 532.652938][ T9960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.847627][ T9967] loop3: detected capacity change from 0 to 512 [ 532.865796][ T9967] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 532.879734][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 532.993519][ T9967] EXT4-fs (loop3): 1 truncate cleaned up [ 533.033185][ T9967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.049276][ T9966] macvtap1: entered promiscuous mode [ 533.055737][ T9966] bridge0: entered promiscuous mode [ 533.064096][ T9966] macvtap1: entered allmulticast mode [ 533.070288][ T9966] bridge0: entered allmulticast mode [ 533.203385][ T5777] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 533.242832][ T9972] bridge0: left allmulticast mode [ 533.242874][ T9972] bridge0: left promiscuous mode [ 533.243594][ T9972] macvtap1: left promiscuous mode [ 533.243616][ T9972] macvtap1: left allmulticast mode [ 533.375890][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.397474][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 533.400050][ T5777] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.400344][ T5777] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 533.401619][ T5777] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.401647][ T5777] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.403886][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.403916][ T5777] usb 5-1: Product: syz [ 533.403947][ T5777] usb 5-1: Manufacturer: syz [ 533.403965][ T5777] usb 5-1: SerialNumber: syz [ 533.656367][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.656866][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.710374][ T9982] loop2: detected capacity change from 0 to 1024 [ 534.092162][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.092965][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.093903][ T9839] bridge_slave_0: entered allmulticast mode [ 534.159780][ T5777] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 534.160464][ T5777] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 534.185031][ T9839] bridge_slave_0: entered promiscuous mode [ 534.203058][ T5777] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 534.206399][ T5777] usb 5-1: USB disconnect, device number 27 [ 534.230638][ T9982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.245852][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.308929][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.309036][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.309192][ T9839] bridge_slave_1: entered allmulticast mode [ 534.587472][ T9839] bridge_slave_1: entered promiscuous mode [ 534.812061][ T31] audit: type=1800 audit(1786384117.760:2): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 535.017239][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.245341][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.471187][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.528448][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.954286][ T9839] team0: Port device team_slave_0 added [ 535.980712][ T9839] team0: Port device team_slave_1 added [ 536.158987][T10017] jffs2: notice: (10017) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 537.508221][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.515806][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.548215][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.681032][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.681114][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.706142][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.936078][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 540.269755][ T1148] hsr_slave_0: left promiscuous mode [ 540.284041][ T1148] hsr_slave_1: left promiscuous mode [ 540.439129][ T1148] veth1_macvtap: left promiscuous mode [ 540.439206][ T1148] veth0_macvtap: left promiscuous mode [ 540.439350][ T1148] veth1_vlan: left promiscuous mode [ 540.439450][ T1148] veth0_vlan: left promiscuous mode [ 540.480923][T10059] loop2: detected capacity change from 0 to 1024 [ 540.525171][T10059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.538573][T10061] loop3: detected capacity change from 0 to 1024 [ 540.582647][T10061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.834948][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.891459][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.277935][T10081] jffs2: notice: (10081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 541.690194][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 541.719695][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 541.996912][ T9839] hsr_slave_0: entered promiscuous mode [ 542.005373][ T9839] hsr_slave_1: entered promiscuous mode [ 542.008233][ T9839] debugfs: 'hsr0' already exists in 'hsr' [ 542.008255][ T9839] Cannot create hsr debugfs directory [ 542.225646][T10100] loop4: detected capacity change from 0 to 512 [ 542.229378][T10100] EXT4-fs (loop4): Test dummy encryption mode enabled [ 542.247116][ T30] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 542.262027][T10100] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1259: inode has both inline data and extents flags [ 542.263065][T10100] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.263628][T10100] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1259: couldn't read orphan inode 15 (err -117) [ 542.263662][T10100] loop4: lost filesystem error report for type 5 error -117 [ 542.289901][T10100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.361072][T10104] loop3: detected capacity change from 0 to 1024 [ 542.421253][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 542.441888][ T30] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 542.454729][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.454780][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.474510][T10104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.492136][ T30] usb 3-1: config 0 descriptor?? [ 542.684493][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.709113][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.961525][ T30] mcp2200 0003:04D8:00DF.000E: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 543.048476][ T1148] IPVS: stop unused estimator thread 0... [ 543.244470][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 543.327198][ T30] usb 3-1: USB disconnect, device number 28 [ 543.468286][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 543.622302][ T9839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.647492][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.653659][ T9839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 543.686556][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.695650][ T9839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 543.722622][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.724778][ T9839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.751885][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.032762][T10156] jffs2: notice: (10156) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 544.394076][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.226948][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.245788][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.245882][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.276861][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.277174][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.320965][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 545.768616][T10190] syzkaller0: entered promiscuous mode [ 545.768657][T10190] syzkaller0: entered allmulticast mode [ 546.148071][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 546.308049][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 546.314860][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 546.329037][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.340551][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.353989][ T10] usb 3-1: config 0 descriptor?? [ 546.827768][ T10] mcp2200 0003:04D8:00DF.000F: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 547.226395][ T5751] usb 3-1: USB disconnect, device number 29 [ 547.411525][T10212] jffs2: notice: (10212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 548.647306][T10225] netlink: 'syz.4.1283': attribute type 2 has an invalid length. [ 548.755682][T10230] netlink: 'syz.4.1285': attribute type 2 has an invalid length. [ 548.762832][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'. [ 549.087319][ T30] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 549.237177][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 549.240667][ T30] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 549.241787][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.241828][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.247365][ T30] usb 5-1: config 0 descriptor?? [ 549.662113][ T30] mcp2200 0003:04D8:00DF.0010: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 550.085643][ T30] usb 5-1: USB disconnect, device number 28 [ 551.783456][T10262] loop1: detected capacity change from 0 to 512 [ 551.861186][T10262] EXT4-fs: Ignoring removed oldalloc option [ 551.904070][T10262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.313525][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 552.421890][T10262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.495197][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.504016][T10274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1294'. [ 552.519998][T10273] loop4: detected capacity change from 0 to 512 [ 552.533629][T10273] EXT4-fs (loop4): Test dummy encryption mode enabled [ 552.589428][T10273] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1295: inode has both inline data and extents flags [ 552.589478][T10273] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 552.602816][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 552.602839][ C0] EXT4-fs (loop4): initial error at time 1786384135: ext4_orphan_get:1403: inode 15 [ 552.602869][ C0] EXT4-fs (loop4): last error at time 1786384135: ext4_orphan_get:1403: inode 15 [ 552.612880][T10273] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1295: couldn't read orphan inode 15 (err -117) [ 552.612913][T10273] loop4: lost filesystem error report for type 5 error -117 [ 552.666895][T10273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.742767][T10273] overlayfs: missing 'lowerdir' [ 552.744484][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.790486][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.994933][T10290] jffs2: notice: (10290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 553.108043][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 553.108098][T10296] nbd: must specify a size in bytes for the device [ 554.307782][ T9839] veth0_vlan: entered promiscuous mode [ 554.348757][ T9839] veth1_vlan: entered promiscuous mode [ 554.362327][T10311] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1305'. [ 554.380234][T10313] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 554.421855][T10313] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 554.456567][ T9839] veth0_macvtap: entered promiscuous mode [ 554.474156][ T9839] veth1_macvtap: entered promiscuous mode [ 554.529994][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.561070][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.586946][T10322] loop3: detected capacity change from 0 to 512 [ 554.598091][ T152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.617438][T10322] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 554.633493][T10322] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 554.637214][ T30] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 554.675157][ T6171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.675221][ T6171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.675270][ T6171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.701664][T10322] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1310: Corrupt directory, running e2fsck is recommended [ 554.710793][T10322] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 554.710895][T10322] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1310: corrupted in-inode xattr: e_name out of bounds [ 554.710920][T10322] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.715400][T10322] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1310: couldn't read orphan inode 15 (err -117) [ 554.715430][T10322] loop3: lost filesystem error report for type 5 error -117 [ 554.730205][T10322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.789684][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 554.790409][ T30] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 554.792472][ T30] usb 5-1: config 0 has no interfaces? [ 554.798615][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.798638][ T30] usb 5-1: Product: syz [ 554.798651][ T30] usb 5-1: Manufacturer: syz [ 554.798665][ T30] usb 5-1: SerialNumber: syz [ 554.818846][T10327] jffs2: notice: (10327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 554.839930][ T30] usb 5-1: config 0 descriptor?? [ 554.928186][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.994427][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.994469][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.053641][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 555.066959][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.075042][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.101058][ T5777] usb 5-1: USB disconnect, device number 29 [ 555.123635][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.123678][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.476312][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1320'. [ 557.476520][T10362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.476550][T10362] IPv6: NLM_F_CREATE should be set when creating new route [ 557.743096][T10369] jffs2: notice: (10369) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 557.877908][T10374] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1323'. [ 558.044242][T10383] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1326'. [ 558.308173][ T1992] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 558.888388][ T1992] usb 4-1: Using ep0 maxpacket: 16 [ 558.978770][ T1992] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 559.039962][ T1992] usb 4-1: config 0 has no interfaces? [ 559.205674][ T1992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.205718][ T1992] usb 4-1: Product: syz [ 559.205748][ T1992] usb 4-1: Manufacturer: syz [ 559.205764][ T1992] usb 4-1: SerialNumber: syz [ 559.240217][ T1992] usb 4-1: config 0 descriptor?? [ 559.314807][T10399] netlink: 'syz.5.1332': attribute type 4 has an invalid length. [ 559.323384][T10399] netlink: 'syz.5.1332': attribute type 4 has an invalid length. [ 559.395376][T10401] netlink: 'syz.2.1333': attribute type 2 has an invalid length. [ 559.466749][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.467891][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.494922][ T5751] usb 4-1: USB disconnect, device number 18 [ 559.508678][T10405] x_tables: duplicate underflow at hook 1 [ 559.636342][T10410] jffs2: notice: (10410) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 560.234942][T10438] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1344'. [ 561.292172][T10448] jffs2: notice: (10448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 561.908652][T10451] netlink: 'syz.5.1347': attribute type 2 has an invalid length. [ 562.106882][T10455] loop2: detected capacity change from 0 to 512 [ 562.109623][T10455] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 562.180051][T10455] EXT4-fs (loop2): 1 truncate cleaned up [ 562.269611][T10455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.403527][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.613203][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 562.685203][T10481] jffs2: notice: (10481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 563.017090][ T1236] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 563.540031][ T1236] usb 3-1: Using ep0 maxpacket: 16 [ 563.616179][ T1236] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 563.616894][ T1236] usb 3-1: config 0 has no interfaces? [ 563.618921][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.618944][ T1236] usb 3-1: Product: syz [ 563.618957][ T1236] usb 3-1: Manufacturer: syz [ 563.618970][ T1236] usb 3-1: SerialNumber: syz [ 563.626474][ T1236] usb 3-1: config 0 descriptor?? [ 563.741837][T10490] fuse: Bad value for 'fd' [ 563.969850][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.970289][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.974023][ T10] usb 3-1: USB disconnect, device number 30 [ 564.309370][ T1992] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 564.368803][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 564.380019][T10512] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 564.389182][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.467598][ T1992] usb 6-1: Using ep0 maxpacket: 16 [ 564.479006][ T1992] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 564.490305][ T1992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.490368][ T1992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.512961][ T1992] usb 6-1: config 0 descriptor?? [ 564.813419][T10529] loop3: detected capacity change from 0 to 512 [ 564.816437][T10529] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 564.832117][T10529] EXT4-fs (loop3): 1 truncate cleaned up [ 564.835388][T10529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.971373][ T1992] mcp2200 0003:04D8:00DF.0011: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0 [ 564.982980][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.136400][T10535] jffs2: notice: (10535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 565.223614][T10542] fuse: Unknown parameter 'group_i00000000000000000000' [ 565.362802][T10527] loop1: detected capacity change from 0 to 512 [ 565.372326][ T5777] usb 6-1: USB disconnect, device number 2 [ 565.409294][T10527] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 565.409351][T10527] FAT-fs (loop1): Filesystem has been set read-only [ 565.910591][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 566.207507][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 566.386693][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 566.444708][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.445006][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 566.579158][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.579282][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.675883][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.676001][ T10] usb 2-1: Product: syz [ 566.676094][ T10] usb 2-1: Manufacturer: syz [ 566.676188][ T10] usb 2-1: SerialNumber: syz [ 567.338334][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.348767][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.352631][T10585] loop4: detected capacity change from 0 to 512 [ 567.359673][T10585] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 567.391455][T10585] EXT4-fs (loop4): 1 truncate cleaned up [ 567.395792][T10585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.562465][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.658306][ T10] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 567.674221][ T10] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 567.709007][T10597] loop4: detected capacity change from 0 to 1024 [ 567.743514][T10597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.938894][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.050648][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 568.061405][ T10] usb 2-1: USB disconnect, device number 18 [ 568.181577][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.536691][T10605] loop2: detected capacity change from 0 to 512 [ 568.758886][T10605] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 568.758938][T10605] FAT-fs (loop2): Filesystem has been set read-only [ 568.867855][T10624] NILFS (loop5): device size too small [ 568.886262][T10624] MTD: Couldn't look up './dev/mtdblock0': -2 [ 570.777567][T10650] loop3: detected capacity change from 0 to 512 [ 570.970434][T10650] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 570.970467][T10650] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 570.970487][T10650] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1390: Corrupt directory, running e2fsck is recommended [ 571.061119][T10650] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 571.072504][T10650] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1390: corrupted in-inode xattr: e_name out of bounds [ 571.072545][T10650] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 571.086754][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 571.086778][ C1] EXT4-fs (loop3): initial error at time 1786384154: ext4_iget_extra_inode:5210: inode 15 [ 571.086807][ C1] EXT4-fs (loop3): last error at time 1786384154: ext4_iget_extra_inode:5210: inode 15 [ 571.184927][T10650] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1390: couldn't read orphan inode 15 (err -117) [ 571.185065][T10650] loop3: lost filesystem error report for type 5 error -117 [ 571.228804][T10650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.616180][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.784120][T10668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1394'. [ 571.929579][T10673] NILFS (loop3): device size too small [ 571.947233][ T5777] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 571.972433][T10673] MTD: Couldn't look up './dev/mtdblock0': -2 [ 572.262715][ T5777] usb 3-1: Using ep0 maxpacket: 32 [ 572.298560][ T5777] usb 3-1: unable to get BOS descriptor or descriptor too short [ 572.298629][ T5777] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 572.370952][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.370999][ T5777] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.568761][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.568807][ T5777] usb 3-1: Product: syz [ 572.568821][ T5777] usb 3-1: Manufacturer: syz [ 572.568834][ T5777] usb 3-1: SerialNumber: syz [ 572.912069][T10675] loop4: detected capacity change from 0 to 512 [ 572.971756][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.972257][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.979221][T10675] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 572.979271][T10675] FAT-fs (loop4): Filesystem has been set read-only [ 573.070751][ T5777] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 573.070822][ T5777] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 573.131872][T10679] syzkaller0: entered promiscuous mode [ 573.131907][T10679] syzkaller0: entered allmulticast mode [ 573.219560][ T5777] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 573.241193][ T5777] usb 3-1: USB disconnect, device number 31 [ 573.244588][T10683] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1402'. [ 573.278671][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.413716][T10686] fuse: Unknown parameter 'use00000000000000000000' [ 573.853364][T10695] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 577.277978][T10699] syzkaller0: entered promiscuous mode [ 577.283637][T10699] syzkaller0: entered allmulticast mode [ 577.364710][T10715] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1408'. [ 577.637845][T10722] loop5: detected capacity change from 0 to 512 [ 577.662673][T10722] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 577.728003][T10722] EXT4-fs (loop5): 1 truncate cleaned up [ 577.753741][T10722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.141351][ T9839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.160319][T10732] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1413'. [ 578.623246][ T5777] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 578.737608][T10743] loop5: detected capacity change from 0 to 2048 [ 578.774275][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 578.781221][ T5777] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.781269][ T5777] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 578.798457][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.798482][ T5777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.802187][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.802212][ T5777] usb 4-1: Product: syz [ 578.802225][ T5777] usb 4-1: Manufacturer: syz [ 578.802238][ T5777] usb 4-1: SerialNumber: syz [ 578.806419][T10743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.062248][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.062797][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.102370][ T5777] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 579.102449][ T5777] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 579.190266][ T5777] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 579.197796][ T5777] usb 4-1: USB disconnect, device number 19 [ 579.262302][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.663636][ T9839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.861540][T10751] loop5: detected capacity change from 0 to 512 [ 579.909283][T10751] EXT4-fs: Ignoring removed oldalloc option [ 579.932792][T10751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 579.958564][T10751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.231818][T10760] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 580.385684][ T9839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.644861][T10773] loop5: detected capacity change from 0 to 512 [ 581.662972][T10773] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 581.702832][T10773] EXT4-fs (loop5): 1 truncate cleaned up [ 581.704517][T10773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.931522][ T9839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.063701][T10777] fuse: Unknown parameter 'group_i00000000000000000000' [ 582.167318][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 582.188482][T10782] loop3: detected capacity change from 0 to 2048 [ 582.345560][T10782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.399547][T10792] loop2: detected capacity change from 0 to 2048 [ 582.434116][T10792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.678136][T10798] netlink: 'syz.1.1432': attribute type 4 has an invalid length. [ 582.678280][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.876230][T10804] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1435'. [ 582.952181][T10807] loop3: detected capacity change from 0 to 512 [ 582.960653][T10807] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 582.987625][T10807] EXT4-fs (loop3): 1 truncate cleaned up [ 583.110513][T10807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.333440][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 583.355031][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.417267][T10813] bridge0: port 3(syz_tun) entered blocking state [ 583.417379][T10813] bridge0: port 3(syz_tun) entered disabled state [ 583.431821][T10813] syz_tun: entered allmulticast mode [ 583.445367][T10813] syz_tun: entered promiscuous mode [ 583.453771][T10813] bridge0: port 3(syz_tun) entered blocking state [ 583.453885][T10813] bridge0: port 3(syz_tun) entered forwarding state [ 583.785849][T10813] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 583.941356][ T9] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 583.952016][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.012554][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.012601][ T9] usb 5-1: Product: syz [ 584.012631][ T9] usb 5-1: Manufacturer: syz [ 584.012649][ T9] usb 5-1: SerialNumber: syz [ 584.399120][T10816] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 584.408265][T10816] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1439'. [ 584.494321][ T9] pl2303 5-1:1.0: required endpoints missing [ 584.512183][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.722025][ T9] usb 5-1: USB disconnect, device number 30 [ 585.550502][T10818] syzkaller0: entered promiscuous mode [ 585.550535][T10818] syzkaller0: entered allmulticast mode [ 586.067711][ T5750] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 586.188734][ T1236] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 586.212406][ T5750] usb 5-1: device descriptor read/64, error -71 [ 586.348935][ T1236] usb 6-1: Using ep0 maxpacket: 32 [ 586.352241][ T1236] usb 6-1: unable to get BOS descriptor or descriptor too short [ 586.352295][ T1236] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 586.353206][ T1236] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.353227][ T1236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.365741][ T1236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.365773][ T1236] usb 6-1: Product: syz [ 586.365787][ T1236] usb 6-1: Manufacturer: syz [ 586.365800][ T1236] usb 6-1: SerialNumber: syz [ 586.471017][ T5750] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 586.591559][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.593218][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.612737][ T5750] usb 5-1: device descriptor read/64, error -71 [ 586.696465][ T1236] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 586.726360][ T5750] usb usb5-port1: attempt power cycle [ 586.827327][ T1236] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 586.869494][ T1236] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 586.877325][ T1236] usb 6-1: USB disconnect, device number 3 [ 586.892287][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.072797][ T5750] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 587.094949][ T5750] usb 5-1: device descriptor read/8, error -71 [ 587.275019][T10855] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1450'. [ 587.339598][ T5750] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 587.366395][ T5750] usb 5-1: device descriptor read/8, error -71 [ 587.468556][ T5750] usb usb5-port1: unable to enumerate USB device [ 588.543880][T10867] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 589.585964][T10874] loop3: detected capacity change from 0 to 128 [ 589.612106][T10874] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.622148][T10874] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 589.792153][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.081022][T10893] netlink: 'syz.5.1461': attribute type 4 has an invalid length. [ 590.207399][ T5777] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 590.315007][T10895] syzkaller0: entered promiscuous mode [ 590.338135][T10895] syzkaller0: entered allmulticast mode [ 590.367237][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 590.373210][ T5777] usb 4-1: unable to get BOS descriptor or descriptor too short [ 590.373289][ T5777] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 590.374533][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.374555][ T5777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.376529][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.376551][ T5777] usb 4-1: Product: syz [ 590.376564][ T5777] usb 4-1: Manufacturer: syz [ 590.376577][ T5777] usb 4-1: SerialNumber: syz [ 590.749405][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.769528][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.180909][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1466'. [ 591.269647][ T5777] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 591.269714][ T5777] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 591.373993][T10910] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1468'. [ 591.424432][ T5777] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 591.429139][ T5777] usb 4-1: USB disconnect, device number 20 [ 591.483527][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 591.485214][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.628281][ T9] usb 2-1: device descriptor read/64, error -71 [ 591.662668][T10916] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 591.877809][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 592.017288][ T9] usb 2-1: device descriptor read/64, error -71 [ 592.129333][ T9] usb usb2-port1: attempt power cycle [ 592.382564][T10919] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1470'. [ 592.490151][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 592.524019][ T9] usb 2-1: device descriptor read/8, error -71 [ 592.757169][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 592.785793][ T9] usb 2-1: device descriptor read/8, error -71 [ 592.902268][ T9] usb usb2-port1: unable to enumerate USB device [ 594.311186][T10925] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1471'. [ 594.554002][T10938] jffs2: notice: (10938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 595.393487][T10941] netlink: 'syz.4.1478': attribute type 4 has an invalid length. [ 595.431019][T10945] loop2: detected capacity change from 0 to 512 [ 595.443291][T10945] ext4: Unknown parameter 'defcontext' [ 595.447899][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 595.531828][T10945] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 595.714991][T10936] loop3: detected capacity change from 0 to 512 [ 595.748988][T10950] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 595.883769][T10936] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 595.883819][T10936] FAT-fs (loop3): Filesystem has been set read-only [ 596.577441][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 596.734606][ T9] usb 6-1: device descriptor read/64, error -71 [ 596.981726][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 597.149288][ T9] usb 6-1: device descriptor read/64, error -71 [ 597.222579][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1488'. [ 597.258658][ T9] usb usb6-port1: attempt power cycle [ 597.314547][T10971] input: syz1 as /devices/virtual/input/input5 [ 597.679179][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 597.728206][ T9] usb 6-1: device descriptor read/8, error -71 [ 597.813249][T10984] syzkaller0: entered promiscuous mode [ 597.813291][T10984] syzkaller0: entered allmulticast mode [ 597.877971][T10987] loop4: detected capacity change from 0 to 2048 [ 597.938332][T10987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.988550][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 598.008228][ T9] usb 6-1: device descriptor read/8, error -71 [ 598.119890][ T9] usb usb6-port1: unable to enumerate USB device [ 598.640345][T10999] ------------[ cut here ]------------ [ 598.640375][T10999] timer_delete_sync(&sdp->delay_work) [ 598.640401][T10999] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x3aa/0x890, CPU#0: syz.2.1495/10999 [ 598.644102][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.671772][T10999] Modules linked in: [ 598.675985][T10999] CPU: 0 UID: 0 PID: 10999 Comm: syz.2.1495 Not tainted syzkaller #0 PREEMPT(full) [ 598.685504][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.695682][T10999] RIP: 0010:cleanup_srcu_struct+0x3aa/0x890 [ 598.701963][T10999] Code: b9 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 0e ff ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 598.721675][T10999] RSP: 0018:ffffc9000394fcf0 EFLAGS: 00010202 [ 598.727830][T10999] RAX: 0000000000000001 RBX: 0000607edacfc300 RCX: 0000000000000000 [ 598.735811][T10999] RDX: 0000000000000000 RSI: ffffffff8e253559 RDI: 00000000ffffffff [ 598.744089][T10999] RBP: ffffe8ffffc08300 R08: ffffffff9058fb7f R09: 1ffffffff20b1f6f [ 598.752436][T10999] R10: dffffc0000000000 R11: fffffbfff20b1f70 R12: ffff888026a93000 [ 598.760487][T10999] R13: 0000000000000000 R14: ffffffff8e5237d0 R15: 1ffffffff1ca47de [ 598.768509][T10999] FS: 00007fa50ffd56c0(0000) GS:ffff888124f0c000(0000) knlGS:0000000000000000 [ 598.777557][T10999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.784147][T10999] CR2: 00007f9f6c201000 CR3: 000000007cb86000 CR4: 00000000003526f0 [ 598.792189][T10999] Call Trace: [ 598.795559][T10999] [ 598.798677][T10999] blk_mq_free_tag_set+0x617/0x780 [ 598.803918][T10999] loop_remove+0x4e/0xc0 [ 598.808328][T10999] loop_control_ioctl+0x4a6/0x5a0 [ 598.813376][T10999] ? __pfx_loop_control_ioctl+0x10/0x10 [ 598.819078][T10999] ? __fget_files+0x2a/0x420 [ 598.823735][T10999] ? bpf_lsm_file_ioctl+0x9/0x20 [ 598.828772][T10999] ? __pfx_loop_control_ioctl+0x10/0x10 [ 598.834330][T10999] __se_sys_ioctl+0xfc/0x170 [ 598.839012][T10999] do_syscall_64+0x166/0x510 [ 598.843776][T10999] ? trace_irq_disable+0x3b/0x140 [ 598.848897][T10999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.855021][T10999] ? clear_bhb_loop+0x70/0xc0 [ 598.859821][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.865726][T10999] RIP: 0033:0x7fa511d9e0d9 [ 598.870216][T10999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.889946][T10999] RSP: 002b:00007fa50ffd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.898492][T10999] RAX: ffffffffffffffda RBX: 00007fa512026090 RCX: 00007fa511d9e0d9 [ 598.906477][T10999] RDX: 0000000000000005 RSI: 0000000000004c81 RDI: 0000000000000005 [ 598.914504][T10999] RBP: 00007fa511e35024 R08: 0000000000000000 R09: 0000000000000000 [ 598.922508][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.930534][T10999] R13: 00007fa512026128 R14: 00007fa512026090 R15: 00007ffe8c68ab98 [ 598.938642][T10999] [ 598.941695][T10999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 598.948979][T10999] CPU: 0 UID: 0 PID: 10999 Comm: syz.2.1495 Not tainted syzkaller #0 PREEMPT(full) [ 598.958358][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.968412][T10999] Call Trace: [ 598.971690][T10999] [ 598.974613][T10999] vpanic+0x56c/0xa60 [ 598.978648][T10999] ? __pfx__printk+0x10/0x10 [ 598.983280][T10999] ? __pfx_vpanic+0x10/0x10 [ 598.987789][T10999] ? is_bpf_text_address+0x292/0x2b0 [ 598.993073][T10999] ? is_bpf_text_address+0x26/0x2b0 [ 598.998277][T10999] panic+0xc5/0xd0 [ 599.002017][T10999] ? __pfx_panic+0x10/0x10 [ 599.006455][T10999] __warn+0x315/0x4c0 [ 599.010438][T10999] ? cleanup_srcu_struct+0x3aa/0x890 [ 599.015724][T10999] ? cleanup_srcu_struct+0x3aa/0x890 [ 599.021011][T10999] __report_bug+0x276/0x570 [ 599.025644][T10999] ? cleanup_srcu_struct+0x3aa/0x890 [ 599.030936][T10999] ? __pfx___report_bug+0x10/0x10 [ 599.035957][T10999] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.041003][T10999] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.046380][T10999] ? cleanup_srcu_struct+0x3aa/0x890 [ 599.051667][T10999] report_bug+0x16a/0x220 [ 599.056001][T10999] ? cleanup_srcu_struct+0x3aa/0x890 [ 599.061284][T10999] ? cleanup_srcu_struct+0x3ac/0x890 [ 599.066565][T10999] handle_bug+0x9c/0x200 [ 599.070810][T10999] exc_invalid_op+0x1a/0x50 [ 599.075330][T10999] asm_exc_invalid_op+0x1a/0x20 [ 599.080180][T10999] RIP: 0010:cleanup_srcu_struct+0x3aa/0x890 [ 599.086078][T10999] Code: b9 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 0e ff ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 599.105681][T10999] RSP: 0018:ffffc9000394fcf0 EFLAGS: 00010202 [ 599.111747][T10999] RAX: 0000000000000001 RBX: 0000607edacfc300 RCX: 0000000000000000 [ 599.119710][T10999] RDX: 0000000000000000 RSI: ffffffff8e253559 RDI: 00000000ffffffff [ 599.127671][T10999] RBP: ffffe8ffffc08300 R08: ffffffff9058fb7f R09: 1ffffffff20b1f6f [ 599.135640][T10999] R10: dffffc0000000000 R11: fffffbfff20b1f70 R12: ffff888026a93000 [ 599.143609][T10999] R13: 0000000000000000 R14: ffffffff8e5237d0 R15: 1ffffffff1ca47de [ 599.151601][T10999] blk_mq_free_tag_set+0x617/0x780 [ 599.156732][T10999] loop_remove+0x4e/0xc0 [ 599.160979][T10999] loop_control_ioctl+0x4a6/0x5a0 [ 599.166005][T10999] ? __pfx_loop_control_ioctl+0x10/0x10 [ 599.171542][T10999] ? __fget_files+0x2a/0x420 [ 599.176127][T10999] ? bpf_lsm_file_ioctl+0x9/0x20 [ 599.181052][T10999] ? __pfx_loop_control_ioctl+0x10/0x10 [ 599.186591][T10999] __se_sys_ioctl+0xfc/0x170 [ 599.191180][T10999] do_syscall_64+0x166/0x510 [ 599.195766][T10999] ? trace_irq_disable+0x3b/0x140 [ 599.200789][T10999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.206871][T10999] ? clear_bhb_loop+0x70/0xc0 [ 599.211547][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.217434][T10999] RIP: 0033:0x7fa511d9e0d9 [ 599.221931][T10999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.241532][T10999] RSP: 002b:00007fa50ffd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.249945][T10999] RAX: ffffffffffffffda RBX: 00007fa512026090 RCX: 00007fa511d9e0d9 [ 599.257907][T10999] RDX: 0000000000000005 RSI: 0000000000004c81 RDI: 0000000000000005 [ 599.265864][T10999] RBP: 00007fa511e35024 R08: 0000000000000000 R09: 0000000000000000 [ 599.273820][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.281787][T10999] R13: 00007fa512026128 R14: 00007fa512026090 R15: 00007ffe8c68ab98 [ 599.289769][T10999] [ 599.293099][T10999] Kernel Offset: disabled [ 599.297444][T10999] Rebooting in 86400 seconds..