last executing test programs: 30m39.377876515s ago: executing program 32 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1000, 0x7, @loopback, 0x3ff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "fdb87942485c70d0", "e9f894f1bea76fae88e137bbe22c560e6c1bd363aba53c9e1899fae620c670d9", '\x00\x00\x00T', "9f7501f055e67379"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 21m13.641734827s ago: executing program 33 (id=1471): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x4, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f0000000000), 0x10) 20m5.484352985s ago: executing program 34 (id=1599): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a01, 0xd8284b08a06635e2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 19m21.674868303s ago: executing program 35 (id=1679): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/82, 0x52}], 0x1, 0x8a3, 0x0) 17m24.454531074s ago: executing program 36 (id=1953): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getrandom(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 16m32.468246696s ago: executing program 37 (id=2095): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15m54.757385537s ago: executing program 38 (id=2221): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 14m44.815159s ago: executing program 39 (id=2342): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1}, 0x2140) 14m42.788325277s ago: executing program 8 (id=2387): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) r1 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x400c840) 14m41.471509168s ago: executing program 8 (id=2391): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x400454a4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0xcb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 14m39.216529818s ago: executing program 8 (id=2396): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003280)={0x2020}, 0x2020) 14m28.487731958s ago: executing program 8 (id=2415): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) prlimit64(0x0, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0xc0844123, 0x0) 14m27.235116403s ago: executing program 8 (id=2421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14m25.580898725s ago: executing program 8 (id=2423): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat(0xffffffffffffff9c, 0x0, 0xb4800, 0x88) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$rfkill(r0, &(0x7f0000000240)={0x9, 0x4, 0x0, 0x1, 0x4}, 0x8) 14m10.143414147s ago: executing program 40 (id=2423): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat(0xffffffffffffff9c, 0x0, 0xb4800, 0x88) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$rfkill(r0, &(0x7f0000000240)={0x9, 0x4, 0x0, 0x1, 0x4}, 0x8) 14m1.939550769s ago: executing program 9 (id=2473): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x180, 0x420, 0xffffffffffffff9c, 0x0) 14m1.804600045s ago: executing program 9 (id=2474): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x400c840) 14m0.981392776s ago: executing program 9 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 14m0.821946958s ago: executing program 9 (id=2476): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)={[{@lastblock}, {@umask}, {@undelete}, {@partition={'partition', 0x3d, 0x10}}, {@nostrict}, {@unhide}, {@volume={'volume', 0x3d, 0xf2}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortad}, {@noadinicb}, {@uid_forget}, {@noadinicb}, {@session}, {@fileset={'fileset', 0x3d, 0x9}}, {@noadinicb}, {@adinicb}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0]) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000002dc0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 14m0.287102624s ago: executing program 9 (id=2479): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) 13m59.527556207s ago: executing program 9 (id=2480): dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f00000000c0)) 13m58.788502673s ago: executing program 41 (id=2480): dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f00000000c0)) 9m54.776769603s ago: executing program 1 (id=2997): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) fallocate(r1, 0x83, 0x20000000000000, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4], [0x0, 0x4]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}], '\x00', 0x1268000, 0x0, 0x0, 0x5000000, 0x0, 0x2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) unshare(0x6a040000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="5611c5d4da242e0ac86d34903d62df46d6f120b65de61c6f9567bad3315629a3c197eeb107ff8925838e092b348c0bb33c3495f02c66d3d6fe61f07a146ad6a637769befba6cb4b4104dbe169fbe3cd06aab723128185c334428e91431c3ff0106e264e25e0ac0d8e3fc4ca0faf6f917ff4ac7d62de5b1f95a108e49a1ffb99dd914fda60f", @ANYRES16, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 9m53.115671653s ago: executing program 1 (id=3006): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0x0, 0xffffffffffffffff) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) 9m50.773504968s ago: executing program 1 (id=3010): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/net\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) 9m49.818581331s ago: executing program 1 (id=3012): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x42, &(0x7f0000000100)=ANY=[], 0xfd, 0x1229, &(0x7f0000002ac0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x150b, &(0x7f0000001580)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x101000) fcntl$lock(r0, 0x26, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigqueueinfo(0x0, 0x11, &(0x7f00000000c0)={0x20, 0x3800000, 0x1000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5417, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045510, &(0x7f0000000040)) 9m47.665529361s ago: executing program 1 (id=3016): ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000001300), &(0x7f0000001400)={[0x0]}, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r5, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 9m46.695061552s ago: executing program 1 (id=3017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) epoll_create1(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8044) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000300)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64d0, &(0x7f0000000280)={0x3, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000001b008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 9m46.322920021s ago: executing program 42 (id=3017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) epoll_create1(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8044) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000300)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64d0, &(0x7f0000000280)={0x3, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000001b008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 6m19.827141138s ago: executing program 7 (id=3572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x2, 0x42f, &(0x7f0000000940)="$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") syz_init_net_socket$ax25(0x3, 0x5, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) r2 = socket(0x15, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8000, @local, 0x7f}, 0x1c) bind$inet6(r2, 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x2, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x3e, 0x1, 0x7}) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x4000005, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8d, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x403, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x3, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x4, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x40004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x221, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x6, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000880)=0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e40)=@generic={&(0x7f0000000900)='./file2\x00', r3}, 0x18) mount$nfs(&(0x7f0000000000)='/dev/bsg\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000d80)={[{}], [{@euid_eq={'euid', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, '].$,%{*\\@}'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x32}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname}, {@audit}, {@measure}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') open(0x0, 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m17.870997744s ago: executing program 7 (id=3578): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') lseek(r4, 0xcbe, 0x0) futex(0x0, 0x8c, 0x0, 0x0, 0x0, 0x0) fallocate(r2, 0x0, 0x3, 0x6) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000140)) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 6m16.105833277s ago: executing program 7 (id=3584): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4880) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 6m15.766499177s ago: executing program 7 (id=3585): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r0, 0x1, 0x80, 0x6, @link_local}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) chdir(0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x6, 0x6cb7, @vifc_lcl_ifindex=r0, @remote}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x0, 0x0}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 6m13.938938044s ago: executing program 7 (id=3590): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x2, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_init_net_socket$ax25(0x3, 0x5, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) r2 = socket(0x15, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8000, @local, 0x7f}, 0x1c) bind$inet6(r2, 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x2, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x3e, 0x1, 0x7}) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x4000005, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8d, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x403, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x3, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x4, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x40004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x221, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x6, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000880)=0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e40)=@generic={&(0x7f0000000900)='./file2\x00', r3}, 0x18) mount$nfs(&(0x7f0000000000)='/dev/bsg\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000d80)={[{}], [{@euid_eq={'euid', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, '].$,%{*\\@}'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x32}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname}, {@audit}, {@measure}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') open(0x0, 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m10.166729904s ago: executing program 7 (id=3596): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x10001, 0x12) read(r3, &(0x7f0000000100)=""/98, 0x62) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) accept4(r1, &(0x7f0000000000)=@pppoe, &(0x7f00000000c0)=0x80, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m6.888722329s ago: executing program 43 (id=3596): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x10001, 0x12) read(r3, &(0x7f0000000100)=""/98, 0x62) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) accept4(r1, &(0x7f0000000000)=@pppoe, &(0x7f00000000c0)=0x80, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.364925087s ago: executing program 0 (id=4774): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x4004) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6(0xa, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e0000"], 0x80}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 15.462097835s ago: executing program 5 (id=4781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x46, 0x3, 0x8, 0x6, 0xd, 0x7f}) 15.209866009s ago: executing program 5 (id=4782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 12.08850483s ago: executing program 5 (id=4791): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x81, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x1b, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 10.35871477s ago: executing program 5 (id=4797): write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x0, 0x80800) prlimit64(0x0, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000240), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r6, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x2e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket(0x1e, 0x5, 0x0) listen(r10, 0x0) accept4$inet6(r10, 0x0, 0x0, 0x0) 8.884841869s ago: executing program 5 (id=4801): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) 8.726593048s ago: executing program 4 (id=4804): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init1(0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) waitid(0x2, r0, 0x0, 0x80000000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) 8.514639042s ago: executing program 6 (id=4806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r3, 0x0) 8.513938627s ago: executing program 5 (id=4807): socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x4f4, 0xffffffff, 0x42c, 0x248, 0x340, 0xfeffffff, 0xffffffff, 0x42c, 0x42c, 0x42c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'macsec0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x550) 7.703036447s ago: executing program 6 (id=4808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x4}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "091aea46"}}}}}, 0x2a) 7.627790831s ago: executing program 0 (id=4809): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000004c0)={0x23d17, 0x0, 0xfffffffd, 0x3, 0x0, "7e12105588f633bbb1df022dace17a32d211ee"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc34d, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.5938774s ago: executing program 4 (id=4810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) gettid() timer_delete(0x0) 7.184411085s ago: executing program 3 (id=4812): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x840) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 6.221845685s ago: executing program 0 (id=4813): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63178e6203c229"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.168836321s ago: executing program 6 (id=4814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000140)) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x40000000}) 6.027153302s ago: executing program 2 (id=4815): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101442, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.026602963s ago: executing program 4 (id=4816): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd0e}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.947210641s ago: executing program 3 (id=4817): syz_open_dev$sndmidi(&(0x7f0000000040), 0x81, 0x480000) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x4) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.939576716s ago: executing program 4 (id=4818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r1, &(0x7f0000000040), 0x0) 4.791059389s ago: executing program 3 (id=4819): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) rmdir(0x0) 4.693265735s ago: executing program 0 (id=4820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r3, 0x0) 4.650485947s ago: executing program 2 (id=4821): r0 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000005}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) 4.522933591s ago: executing program 3 (id=4822): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x208, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x1f4, 0x1, [@m_gact={0x100, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xbf1, 0x8001, 0x4, 0xae5a, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x5, 0xe, 0x466e, 0x80000001}}]}, {0xa1, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc1619"}, {0xc}, {0xc}}}, @m_sample={0x6c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0x33, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x54, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x2, 0x7, 0x7f, 0x8}, @broadcast, @rand_addr=0x64010101}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x208}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.115166807s ago: executing program 4 (id=4823): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) listxattr(0x0, 0x0, 0x0) 4.073484506s ago: executing program 0 (id=4824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\xa1\'\x04\x00\xe8e\x10\b\x00\x00Lk\x00', 0x0, 0x0) mknod(0x0, 0x10, 0x2) ioprio_get$uid(0x3, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES16=r3], 0x2c}}, 0x0) 3.911140459s ago: executing program 2 (id=4825): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x201) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}) 3.718172783s ago: executing program 6 (id=4826): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x4e, 0x3a, 0x33, 0x2f, 0x32]}}}, 0x4e}]}) 3.707981644s ago: executing program 3 (id=4827): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.946090388s ago: executing program 0 (id=4828): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x2081) syz_usb_disconnect(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.862502928s ago: executing program 2 (id=4829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) gettid() timer_delete(0x0) 1.648839085s ago: executing program 3 (id=4830): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd0e}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.219665799s ago: executing program 6 (id=4831): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) 990.498692ms ago: executing program 4 (id=4832): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x158) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 802.951234ms ago: executing program 2 (id=4833): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) 639.307996ms ago: executing program 6 (id=4834): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x200}, {0xffffffffffffffff, 0x40}], 0x2, &(0x7f0000000180), 0x0, 0x0) 0s ago: executing program 2 (id=4835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) kernel console output (not intermixed with test programs): omm="syz.3.3124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe56b18cde9 code=0x0 [ 1420.997441][T13182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.271028][T17445] openvswitch: netlink: Flow key attr not present in new flow. [ 1422.546129][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.552614][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.650485][T17505] fuse: Invalid rootmode [ 1425.771291][T12990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1425.853271][T11215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1425.862381][T11215] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1425.878038][T11215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1425.886349][T11215] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1425.896372][T11215] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1427.593864][T17522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3144'. [ 1427.844794][T17538] x_tables: unsorted underflow at hook 3 [ 1428.058455][T11215] Bluetooth: hci5: command tx timeout [ 1428.671531][T17509] chnl_net:caif_netlink_parms(): no params data found [ 1430.258006][T11215] Bluetooth: hci5: command tx timeout [ 1431.424039][T17577] fuse: Bad value for 'rootmode' [ 1431.494944][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.524396][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.549169][T17509] bridge_slave_0: entered allmulticast mode [ 1431.834313][T17509] bridge_slave_0: entered promiscuous mode [ 1431.863390][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.881598][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.484292][T16318] Bluetooth: hci5: command tx timeout [ 1432.527524][T17509] bridge_slave_1: entered allmulticast mode [ 1433.269727][T17509] bridge_slave_1: entered promiscuous mode [ 1434.538570][T16318] Bluetooth: hci5: command tx timeout [ 1434.891520][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.903088][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.826640][T17509] team0: Port device team_slave_0 added [ 1436.928531][T17509] team0: Port device team_slave_1 added [ 1437.219622][T17626] loop0: detected capacity change from 0 to 512 [ 1437.278497][T17626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1437.313697][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.349891][T17626] EXT4-fs (loop0): 1 truncate cleaned up [ 1437.356542][T17626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1437.398548][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.649120][T17632] fuse: Bad value for 'rootmode' [ 1437.696285][T17630] x_tables: duplicate underflow at hook 1 [ 1437.733505][T17630] nfs: Unknown parameter 'euid' [ 1438.069003][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.140623][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.147605][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.324367][T16999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.338783][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.694246][T15942] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1440.758380][T15942] usb 5-1: Using ep0 maxpacket: 8 [ 1440.789802][T15942] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1440.797954][T15942] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1440.855022][T17509] hsr_slave_0: entered promiscuous mode [ 1440.878647][T15942] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1440.888824][T15942] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1440.899516][T15942] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1440.914098][T15942] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1440.920634][T17509] hsr_slave_1: entered promiscuous mode [ 1440.923300][T15942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.974528][T17509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.034535][T17509] Cannot create hsr debugfs directory [ 1441.548321][T15942] usb 5-1: usb_control_msg returned -32 [ 1441.645329][T15942] usbtmc 5-1:16.0: can't read capabilities [ 1442.293783][T15942] usb 5-1: USB disconnect, device number 25 [ 1445.477950][T17509] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.906111][T17687] dccp_close: ABORT with 20 bytes unread [ 1446.129308][T17509] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.319021][T17699] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1448.822168][T17509] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.227083][T17509] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.103695][T17741] new mount options do not match the existing superblock, will be ignored [ 1451.768923][T17509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1451.823998][T17509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1451.921844][T17509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1452.002014][T17509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1452.523666][T17509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.655125][T17509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.691425][T17773] fuse: Bad value for 'rootmode' [ 1452.707394][T17772] x_tables: unsorted underflow at hook 3 [ 1452.722513][T12999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.729792][T12999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.828183][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.835422][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.546513][T17509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.761078][T17819] fuse: Unknown parameter 'use00000000000000000000' [ 1457.919887][T17820] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1458.346515][T17509] veth0_vlan: entered promiscuous mode [ 1458.434678][T17509] veth1_vlan: entered promiscuous mode [ 1458.560051][T17834] x_tables: duplicate underflow at hook 1 [ 1460.022406][T17509] veth0_macvtap: entered promiscuous mode [ 1460.066978][T17509] veth1_macvtap: entered promiscuous mode [ 1460.239001][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.303672][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.358374][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.398342][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.614703][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.671314][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.712983][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.758074][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.822334][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.871788][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.913227][T17856] fuse: Unknown parameter 'use00000000000000000000' [ 1460.935113][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.023953][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.088328][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.122466][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.157855][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.213691][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.268519][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.321435][T17863] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1461.368308][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.432078][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.493098][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.574030][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.657227][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.719921][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.839187][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.921138][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.962448][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.059749][T17509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.173614][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.224779][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.263650][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.316059][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.345720][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.395097][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.426362][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.467141][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.500596][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.520403][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.546586][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.596077][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.651920][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.678511][ T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1462.687321][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.709842][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.732323][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.755120][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.776356][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.802439][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.826686][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.872409][ T9] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 1462.881348][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1462.888209][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.914786][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1462.936233][ T9] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1462.949057][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.989852][ T9] usb 6-1: Product: syz [ 1463.000939][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.018118][ T9] usb 6-1: Manufacturer: syz [ 1463.035401][ T9] usb 6-1: SerialNumber: syz [ 1463.045737][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.098860][T17509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.121608][T17509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.162740][T17509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.386501][T17509] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.417153][T17509] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.433748][T17509] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.457118][T17509] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.702339][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1463.752844][ T9] usb 6-1: USB disconnect, device number 26 [ 1463.838589][ T9] usblp0: removed [ 1463.889041][T12998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.929255][T12998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.007676][T17468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.041370][T17468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.710026][T17905] fuse: Unknown parameter 'use00000000000000000000' [ 1466.344946][T17917] netlink: 'syz.5.3246': attribute type 4 has an invalid length. [ 1466.353305][T17917] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1466.377020][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1467.052710][T17918] usb usb1: check_ctrlrecip: process 17918 (syz.5.3246) requesting ep 01 but needs 81 [ 1467.062535][T17918] usb usb1: usbfs: process 17918 (syz.5.3246) did not claim interface 0 before use [ 1467.629575][T17927] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1468.194577][T17928] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3248'. [ 1469.147058][T17938] mac80211_hwsim hwsim36 imer: renamed from wlan1 (while UP) [ 1470.480874][T17962] fuse: Unknown parameter 'user_i00000000000000000000' [ 1470.833069][T17974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.888999][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1470.937197][T17974] batadv_slave_1: entered promiscuous mode [ 1471.792106][T17980] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3262'. [ 1471.848475][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1471.933445][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1472.218414][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1472.498405][ T9] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1472.507499][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.617764][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 1472.911682][ T9] usb 8-1: Product: syz [ 1472.948380][ T9] usb 8-1: Manufacturer: syz [ 1472.953042][ T9] usb 8-1: SerialNumber: syz [ 1473.024106][ T9] usb 8-1: config 0 descriptor?? [ 1473.090295][ T9] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1473.397098][ T1321] usb 8-1: Failed to submit usb control message: -71 [ 1473.492601][ T9] usb 8-1: USB disconnect, device number 9 [ 1473.794056][ T1321] usb 8-1: unable to send the bmi data to the device: -71 [ 1473.896123][ T1321] usb 8-1: unable to get target info from device [ 1474.143602][ T1321] usb 8-1: could not get target info (-71) [ 1474.170504][T17986] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1474.178221][ T1321] usb 8-1: could not probe fw (-71) [ 1475.177932][T18026] fuse: Unknown parameter 'user_i00000000000000000000' [ 1476.545950][T18039] syz.0.3275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1480.971403][T11215] Bluetooth: hci1: command 0x0406 tx timeout [ 1482.285973][T18090] fuse: Unknown parameter 'user_i00000000000000000000' [ 1483.182038][ T5948] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1483.440206][ T5948] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1483.468750][ T5948] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1483.510434][ T5948] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1483.544910][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.656006][T18082] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1483.704278][ T5948] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1483.990201][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.997464][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.688166][ T5948] usb 7-1: USB disconnect, device number 30 [ 1484.947699][T18118] udevd[18118]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1485.923676][T18137] netlink: 'syz.4.3294': attribute type 4 has an invalid length. [ 1485.931852][T18137] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1485.955167][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1486.027961][T18149] usb usb1: check_ctrlrecip: process 18149 (syz.4.3294) requesting ep 01 but needs 81 [ 1486.037795][T18149] usb usb1: usbfs: process 18149 (syz.4.3294) did not claim interface 0 before use [ 1488.801514][T18164] x_tables: unsorted underflow at hook 3 [ 1488.934326][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3309'. [ 1491.182951][T11215] Bluetooth: hci2: command 0x0406 tx timeout [ 1492.717300][T18219] loop0: detected capacity change from 0 to 512 [ 1492.807843][T18219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1492.893646][T18219] EXT4-fs (loop0): 1 truncate cleaned up [ 1492.949457][T18219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.098723][T18228] x_tables: duplicate underflow at hook 1 [ 1493.269528][T18228] nfs: Unknown parameter 'euid' [ 1493.869348][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3306'. [ 1494.278791][T16999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.552616][T18255] loop5: detected capacity change from 0 to 128 [ 1497.068752][T11218] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1497.508553][T11218] usb 5-1: device descriptor read/64, error -71 [ 1498.030390][T11218] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1498.368644][T11218] usb 5-1: device descriptor read/64, error -71 [ 1498.587854][T11218] usb usb5-port1: attempt power cycle [ 1498.941446][T17083] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1499.483738][T11218] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1499.548877][T17083] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1500.482725][T11218] usb 5-1: device descriptor read/8, error -71 [ 1500.673895][T15942] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1500.866057][T15942] usb 1-1: Using ep0 maxpacket: 16 [ 1500.894884][T15942] usb 1-1: config 0 has no interfaces? [ 1500.924065][T15942] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1500.935135][T18307] fuse: Unknown parameter 'user_id00000000000000000000' [ 1501.020915][T15942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.670045][T11215] Bluetooth: hci3: command 0x0406 tx timeout [ 1501.883558][T15942] usb 1-1: config 0 descriptor?? [ 1502.042237][T15942] usb 1-1: USB disconnect, device number 16 [ 1503.761969][T18333] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1504.554559][T18335] loop4: detected capacity change from 0 to 128 [ 1506.724392][T18359] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3351'. [ 1506.949251][T11215] Bluetooth: hci4: command 0x0406 tx timeout [ 1508.661468][T18389] x_tables: unsorted underflow at hook 3 [ 1511.190689][ T5948] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1511.372014][ T5948] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1511.490281][ T5948] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.809440][ T5948] usb 7-1: config 0 has no interface number 0 [ 1512.028106][ T5948] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1512.037227][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.061655][ T5948] usb 7-1: Product: syz [ 1512.065856][ T5948] usb 7-1: Manufacturer: syz [ 1512.083112][ T5948] usb 7-1: SerialNumber: syz [ 1512.116568][ T5948] usb 7-1: config 0 descriptor?? [ 1512.132731][ T5948] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 1512.144837][ T5948] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 1512.428036][ T9] usb 7-1: USB disconnect, device number 31 [ 1513.505671][T18447] loop5: detected capacity change from 0 to 512 [ 1513.550515][T18447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1513.763654][T18447] EXT4-fs (loop5): 1 truncate cleaned up [ 1513.843283][T18447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.122350][T18455] x_tables: duplicate underflow at hook 1 [ 1514.154100][T18455] nfs: Unknown parameter 'euid' [ 1514.713917][T16941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.888592][T18475] syz.0.3382: attempt to access beyond end of device [ 1516.888592][T18475] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1516.901863][T18475] vxfs: unable to read disk superblock at 1 [ 1516.908778][T18475] syz.0.3382: attempt to access beyond end of device [ 1516.908778][T18475] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1516.922141][T18475] vxfs: unable to read disk superblock at 8 [ 1516.928106][T18475] vxfs: can't find superblock. [ 1517.284875][T18478] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1517.671758][ T5948] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1517.762639][T18494] loop6: detected capacity change from 0 to 512 [ 1517.799309][T18494] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1517.870146][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1517.897245][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1517.923101][T18494] EXT4-fs (loop6): 1 truncate cleaned up [ 1517.936080][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1517.964958][ T5948] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1517.981727][ T5948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.996944][T18494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1517.999079][ T5948] usb 8-1: Product: syz [ 1518.037223][ T5948] usb 8-1: Manufacturer: syz [ 1518.041891][ T5948] usb 8-1: SerialNumber: syz [ 1518.133295][ T5948] usb 8-1: config 0 descriptor?? [ 1518.413917][T18506] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1519.855734][ T5948] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1520.466490][T18505] x_tables: duplicate underflow at hook 1 [ 1520.476218][T18505] nfs: Unknown parameter 'euid' [ 1521.104441][ T5948] usb 8-1: USB disconnect, device number 10 [ 1521.107093][T17509] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.052581][T18564] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1527.464565][ T5948] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1528.557133][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 1528.595993][ T5948] usb 1-1: config 0 has no interfaces? [ 1528.602103][ T5948] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1528.650927][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.684416][ T5948] usb 1-1: config 0 descriptor?? [ 1529.016339][ T5948] usb 1-1: USB disconnect, device number 17 [ 1531.819504][T18642] x_tables: unsorted underflow at hook 3 [ 1534.039127][T18655] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 1534.183666][T18655] bond1: entered promiscuous mode [ 1534.346208][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3437'. [ 1535.516655][T18663] team0: Port device team_slave_1 removed [ 1535.576121][T18663] bond1: (slave team_slave_1): making interface the new active one [ 1535.614163][T18663] team_slave_1: entered promiscuous mode [ 1535.669236][T18663] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 1535.726987][T18655] bond1: left promiscuous mode [ 1535.750664][T18655] team_slave_1: left promiscuous mode [ 1535.780245][T18655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1536.212504][T18699] mac80211_hwsim hwsim38 imer: renamed from wlan1 (while UP) [ 1536.733910][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1537.688574][T18725] x_tables: unsorted underflow at hook 3 [ 1541.458256][T17083] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1541.827069][T17083] usb 7-1: Using ep0 maxpacket: 32 [ 1543.982927][T17083] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1544.013903][T17083] usb 7-1: config 255 has an invalid interface number: 81 but max is 0 [ 1544.022214][T17083] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.083577][T17083] usb 7-1: config 255 has no interface number 0 [ 1544.130991][T17083] usb 7-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1544.226347][T17083] usb 7-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1544.297210][T17083] usb 7-1: config 255 interface 81 has no altsetting 0 [ 1544.381903][T17083] usb 7-1: string descriptor 0 read error: -71 [ 1544.414954][T17083] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 1544.535617][T17083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.614526][T17083] usb 7-1: can't set config #255, error -71 [ 1544.623277][T17083] usb 7-1: USB disconnect, device number 32 [ 1545.521336][T18794] x_tables: unsorted underflow at hook 3 [ 1547.319635][T18803] loop7: detected capacity change from 0 to 128 [ 1547.440605][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1547.513883][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1547.536155][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1547.725543][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1547.830279][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1548.128520][T18825] No such timeout policy "syz1" [ 1548.805974][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1548.812286][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.831951][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1550.436085][T18845] x_tables: unsorted underflow at hook 3 [ 1553.253991][T18870] loop7: detected capacity change from 0 to 128 [ 1553.383009][T18875] ipvlan2: entered promiscuous mode [ 1553.859407][T15942] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1554.125537][T15942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.186761][T15942] usb 7-1: config 0 has no interfaces? [ 1554.216293][T15942] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 1554.290613][T15942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.465768][T15942] usb 7-1: config 0 descriptor?? [ 1556.206296][T18881] vlan2: entered promiscuous mode [ 1556.217032][T11215] Bluetooth: hci5: command 0x0406 tx timeout [ 1556.365423][T18907] x_tables: unsorted underflow at hook 3 [ 1556.457503][T18881] bridge0: entered promiscuous mode [ 1556.515902][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3494'. [ 1557.018319][T18881] vlan2: entered allmulticast mode [ 1557.056503][T18881] bridge0: entered allmulticast mode [ 1557.120082][T18883] bridge_slave_1: left allmulticast mode [ 1557.183649][T18883] bridge_slave_1: left promiscuous mode [ 1557.260431][T18917] fuse: Unknown parameter 'fd0x0000000000000003' [ 1557.303137][T18883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.455790][T18883] bridge_slave_0: left allmulticast mode [ 1557.500311][T18883] bridge_slave_0: left promiscuous mode [ 1557.547952][T18883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.339204][T18883] bridge0: left allmulticast mode [ 1558.344296][T18883] bridge0: left promiscuous mode [ 1558.976850][T18925] loop4: detected capacity change from 0 to 128 [ 1561.073221][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1561.459149][T11218] IPVS: starting estimator thread 0... [ 1561.588814][T18944] IPVS: using max 21 ests per chain, 50400 per kthread [ 1562.108914][T18949] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3513'. [ 1562.993172][T11218] usb 7-1: USB disconnect, device number 33 [ 1564.203945][T18943] tipc: Started in network mode [ 1564.241397][T18943] tipc: Node identity ac1414aa, cluster identity 4711 [ 1564.249378][T18943] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1564.392629][T18943] tipc: Enabled bearer , priority 10 [ 1564.402668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1564.418647][T18979] fuse: Unknown parameter 'fd0x0000000000000003' [ 1564.549964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1564.667983][T18984] loop4: detected capacity change from 0 to 512 [ 1564.695358][T18984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1564.705301][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1564.784515][T18984] EXT4-fs (loop4): 1 truncate cleaned up [ 1564.819619][T18984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.849449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1565.009644][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1565.159393][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1565.281228][T18992] nfs: Unknown parameter 'euid' [ 1565.590444][ T5948] tipc: Node number set to 2886997162 [ 1565.619023][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1565.904433][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.913629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1566.474307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1569.301916][T19037] loop5: detected capacity change from 0 to 128 [ 1569.703181][T19047] loop5: detected capacity change from 0 to 256 [ 1569.770602][T19047] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1569.792394][T19050] x_tables: duplicate underflow at hook 1 [ 1569.809809][ C0] net_ratelimit: 2 callbacks suppressed [ 1569.809834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1570.514970][ T29] audit: type=1800 audit(2000000108.994:131): pid=19060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3539" name="file1" dev="loop5" ino=301 res=0 errno=0 [ 1570.921563][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1570.931703][T17083] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1571.074732][T19074] x_tables: unsorted underflow at hook 3 [ 1571.154357][T17083] usb 8-1: Using ep0 maxpacket: 8 [ 1571.172965][T17083] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1571.218730][T17083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.258775][T17083] usb 8-1: Product: syz [ 1571.303639][T17083] usb 8-1: Manufacturer: syz [ 1571.340579][T17083] usb 8-1: SerialNumber: syz [ 1571.379994][T17083] usb 8-1: config 0 descriptor?? [ 1571.748040][T17083] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1572.033418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1573.016344][T19092] x_tables: unsorted underflow at hook 3 [ 1573.145833][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1574.101762][T17083] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1574.267692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1574.289574][T17083] usb 8-1: USB disconnect, device number 11 [ 1575.368827][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1575.824602][T19111] x_tables: duplicate underflow at hook 1 [ 1576.193001][T19123] x_tables: unsorted underflow at hook 3 [ 1576.480651][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1577.565810][T19143] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1577.592470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1578.704332][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1579.816118][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1580.927938][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1580.980663][T19172] loop7: detected capacity change from 0 to 512 [ 1581.262990][T19172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1581.411436][T19179] x_tables: unsorted underflow at hook 3 [ 1581.479636][T19172] EXT4-fs (loop7): 1 truncate cleaned up [ 1581.506634][T19172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.721766][T14703] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1581.811326][T19192] nfs: Unknown parameter 'euid' [ 1581.999461][T14703] usb 7-1: Using ep0 maxpacket: 8 [ 1582.039917][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1582.318775][T14703] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1582.333198][T14703] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1582.360586][T14703] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1582.413821][T14703] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1582.423932][T14703] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.509533][T16861] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.570508][T14703] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1582.640219][T14703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.162290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1583.303524][T14703] usb 7-1: GET_CAPABILITIES returned 0 [ 1583.413322][T14703] usbtmc 7-1:16.0: can't read capabilities [ 1584.176546][T19228] loop0: detected capacity change from 0 to 256 [ 1584.222651][ T5948] usb 7-1: USB disconnect, device number 34 [ 1584.263481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1585.386256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1585.754103][T19228] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1586.487077][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1586.711656][ T29] audit: type=1800 audit(2000000124.119:132): pid=19257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3581" name="file1" dev="loop0" ino=302 res=0 errno=0 [ 1587.598892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1588.710698][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1588.777619][T19269] random: crng reseeded on system resumption [ 1589.833264][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1589.853751][T19277] mac80211_hwsim hwsim29 imer: renamed from wlan1 [ 1590.934354][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1591.821998][ T5902] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1592.046204][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1592.324379][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.334683][ T5902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1592.419253][ T5902] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1592.869451][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.924058][ T5902] usb 5-1: Product: syz [ 1592.928287][ T5902] usb 5-1: Manufacturer: syz [ 1592.932921][ T5902] usb 5-1: SerialNumber: syz [ 1593.010660][ T5902] usb 5-1: config 0 descriptor?? [ 1593.130509][T12998] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.158005][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1593.683537][T19309] dccp_invalid_packet: P.Data Offset(4) too small [ 1594.269863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1594.824542][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1595.373345][T12998] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.384150][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1595.750569][T12998] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.407704][T12998] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.493529][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1596.730335][T14703] usb 5-1: USB disconnect, device number 30 [ 1596.775166][T11215] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1596.858376][T11215] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1596.889301][T11215] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1597.050113][T11215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1597.073038][T11215] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1597.082824][T11215] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1597.605390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1598.717124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1599.091474][T12998] bridge_slave_1: left allmulticast mode [ 1599.102520][T12998] bridge_slave_1: left promiscuous mode [ 1599.108242][T12998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.188529][T19360] loop5: detected capacity change from 0 to 256 [ 1599.241328][T19360] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1599.319041][T11215] Bluetooth: hci2: command tx timeout [ 1599.340118][T12998] bridge_slave_0: left allmulticast mode [ 1599.448950][T12998] bridge_slave_0: left promiscuous mode [ 1599.631627][T12998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.829056][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1600.288809][ T29] audit: type=1800 audit(2000000136.756:133): pid=19383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3615" name="file1" dev="loop5" ino=303 res=0 errno=0 [ 1600.504536][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3618'. [ 1600.951553][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1601.539728][T11215] Bluetooth: hci2: command tx timeout [ 1602.052619][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1603.164412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1603.763271][T11215] Bluetooth: hci2: command tx timeout [ 1603.956241][T12998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.981649][T12998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.001820][T12998] bond0 (unregistering): Released all slaves [ 1604.286942][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1604.770607][T19328] chnl_net:caif_netlink_parms(): no params data found [ 1605.398837][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1605.987208][T11215] Bluetooth: hci2: command tx timeout [ 1606.169463][T19442] 9pnet_fd: Insufficient options for proto=fd [ 1606.499873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1607.611778][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1608.711877][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1608.724069][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1608.974796][T19478] loop4: detected capacity change from 0 to 512 [ 1608.993245][T19478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1609.094131][T19478] EXT4-fs (loop4): 1 truncate cleaned up [ 1609.162826][T19478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1609.846471][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1609.964931][T12998] hsr_slave_0: left promiscuous mode [ 1610.032078][T19496] nfs: Unknown parameter 'euid' [ 1610.551661][T12998] hsr_slave_1: left promiscuous mode [ 1610.563005][T12998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.611458][T12998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.644186][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.693960][T12998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.733703][T12998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.789669][T19504] 9pnet_fd: Insufficient options for proto=fd [ 1610.883109][T12998] veth1_macvtap: left promiscuous mode [ 1610.888715][T12998] veth0_macvtap: left promiscuous mode [ 1610.917819][T12998] veth1_vlan: left promiscuous mode [ 1610.942033][T12998] veth0_vlan: left promiscuous mode [ 1610.957873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1612.069681][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1612.197644][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1613.170820][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1614.092342][ T5903] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1614.225463][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.232130][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.282663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1614.347783][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.358730][ T5903] usb 5-1: config 0 has no interfaces? [ 1614.391206][ T5903] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1614.409160][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.423902][ T5903] usb 5-1: Product: syz [ 1614.428114][ T5903] usb 5-1: Manufacturer: syz [ 1614.433972][ T5903] usb 5-1: SerialNumber: syz [ 1614.444810][ T5903] usb 5-1: config 0 descriptor?? [ 1614.693601][ T5903] usb 5-1: USB disconnect, device number 31 [ 1615.276611][T12998] team0 (unregistering): Port device team_slave_1 removed [ 1615.405153][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1615.474092][T12998] team0 (unregistering): Port device team_slave_0 removed [ 1615.551865][T19552] loop4: detected capacity change from 0 to 512 [ 1615.615119][T19552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1615.690220][T19552] EXT4-fs (loop4): 1 truncate cleaned up [ 1615.701873][T19552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.873242][T19555] nfs: Unknown parameter 'euid' [ 1616.506310][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1616.545774][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.608734][T19538] mac80211_hwsim hwsim40 imer: renamed from wlan1 (while UP) [ 1617.618227][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1617.657343][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.665104][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.684951][T19328] bridge_slave_0: entered allmulticast mode [ 1617.740893][T19328] bridge_slave_0: entered promiscuous mode [ 1617.755705][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.773903][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.844786][T19328] bridge_slave_1: entered allmulticast mode [ 1617.870499][T19562] 9pnet_fd: Insufficient options for proto=fd [ 1617.886286][T19328] bridge_slave_1: entered promiscuous mode [ 1618.740683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1619.511564][T19328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.514395][T19328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.841756][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1620.272445][T19328] team0: Port device team_slave_0 added [ 1620.336835][T19328] team0: Port device team_slave_1 added [ 1620.953650][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1621.150444][T19596] loop5: detected capacity change from 0 to 512 [ 1621.235777][T19596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1621.329879][T19328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.382386][T19596] EXT4-fs (loop5): 1 truncate cleaned up [ 1621.388830][T19596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.411547][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.598141][T19606] nfs: Unknown parameter 'euid' [ 1622.065416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1622.097536][T19328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.215990][T19609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1622.295289][T16941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.316087][T19328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.335292][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.452434][T19328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.634217][T19614] mac80211_hwsim hwsim32 imer: renamed from wlan1 (while UP) [ 1623.187926][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1624.291644][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1624.488062][T19328] hsr_slave_0: entered promiscuous mode [ 1624.669768][T19328] hsr_slave_1: entered promiscuous mode [ 1624.726047][T19328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1624.741679][T19328] Cannot create hsr debugfs directory [ 1625.403126][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1626.512775][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1627.624580][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1628.736382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1629.858861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1630.959987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1632.071859][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1633.094877][T19724] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1633.183674][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1634.295466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1635.407367][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1636.519146][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1637.630967][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1638.742764][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1639.854599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1640.038968][T19328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1640.147001][T19328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1640.261101][T19328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1640.508528][T19328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1640.966410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1642.078242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1642.416818][T19800] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3718'. [ 1642.561652][T19328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.660442][T19328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.732232][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.739601][T17468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.053930][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.061091][T13178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1643.190090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1644.216188][T19328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.301935][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1645.360392][T19328] veth0_vlan: entered promiscuous mode [ 1645.413799][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1645.420467][T19328] veth1_vlan: entered promiscuous mode [ 1645.587306][T19328] veth0_macvtap: entered promiscuous mode [ 1645.650460][T19328] veth1_macvtap: entered promiscuous mode [ 1645.688115][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.709460][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.770164][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.841352][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.851245][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.922673][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.960672][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.033867][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.095759][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.198896][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.243873][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.309231][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.356026][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.422639][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.469412][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.525522][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1646.553399][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.614611][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.691911][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.706649][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.749879][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.782092][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.839154][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.868014][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.931943][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.974337][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.027967][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.115921][T19328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1647.637368][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1647.880798][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1647.971270][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.019462][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.043548][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.053378][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.064000][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.074716][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.194605][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.232553][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.293233][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.323125][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.342988][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.352885][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.428718][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.438615][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.555063][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.647224][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.679869][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.706461][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.728334][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.738243][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.759875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1648.779971][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.801733][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.850571][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.142610][T19328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.274003][T19903] netlink: 'syz.0.3742': attribute type 4 has an invalid length. [ 1649.281877][T19903] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1649.291783][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1649.378480][T19328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.561639][T19328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.570481][T19328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.657933][T19328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.860988][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1650.188897][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3746'. [ 1650.872963][T12999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.932636][T12999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.972813][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1651.104945][T19919] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚޹+ÕuµŽê!Þ÷œ8¦ [ 1651.202420][T17468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.239024][T17468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.084883][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1653.196576][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1654.131187][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3754'. [ 1654.308360][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1654.496962][T19947] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1655.430800][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1655.594259][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1656.002988][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1656.411638][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1656.531934][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1656.656232][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.702501][ T9] usb 6-1: config 0 has no interface number 0 [ 1656.829588][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1656.917669][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.980989][ T9] usb 6-1: Product: syz [ 1657.002325][ T9] usb 6-1: Manufacturer: syz [ 1657.055791][ T9] usb 6-1: SerialNumber: syz [ 1657.094065][ T9] usb 6-1: config 0 descriptor?? [ 1657.408179][ T9] ims_pcu 6-1:0.41: Zero length descriptor [ 1657.511821][ T9] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 1657.643781][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1658.007576][T17083] usb 6-1: USB disconnect, device number 27 [ 1658.755574][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1658.767070][T14703] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1658.958827][T14703] usb 3-1: Using ep0 maxpacket: 8 [ 1658.985730][T14703] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1659.266413][T14703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1659.315914][T14703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1659.867410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1660.166577][T14703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1660.797524][T14703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1660.824462][T14703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1660.872532][T14703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.979230][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1661.151250][T14703] usb 3-1: usb_control_msg returned -32 [ 1661.170479][T14703] usbtmc 3-1:16.0: can't read capabilities [ 1661.446111][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1661.494257][T20044] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1661.537107][T11834] usb 3-1: USB disconnect, device number 5 [ 1661.603896][T17083] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1661.808867][T17083] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1661.827475][T17083] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1661.842574][T17083] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1661.865031][T17083] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1661.914293][T17083] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1661.945908][T17083] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1661.966153][T17083] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1661.994504][T17083] usb 5-1: Product: syz [ 1662.013398][T17083] usb 5-1: Manufacturer: syz [ 1662.036419][T17083] cdc_wdm 5-1:1.0: skipping garbage [ 1662.058820][T17083] cdc_wdm 5-1:1.0: skipping garbage [ 1662.078803][T17083] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1662.091815][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1662.107710][T17083] cdc_wdm 5-1:1.0: Unknown control protocol [ 1662.546629][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1662.553571][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1662.555165][T11834] usb 5-1: USB disconnect, device number 32 [ 1662.559680][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1663.213577][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1663.408111][T20086] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1664.325381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1664.882012][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3793'. [ 1665.426534][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1666.538349][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1667.650213][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1668.772675][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1669.230004][T20160] tipc: Started in network mode [ 1669.235147][T20160] tipc: Node identity 7f000001, cluster identity 4711 [ 1669.246129][T20160] tipc: Enabled bearer , priority 10 [ 1669.281704][T20160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1669.302020][T20160] tipc: Enabled bearer , priority 0 [ 1669.873831][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1670.985644][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1671.103559][ T5902] tipc: Node number set to 2130706433 [ 1672.097478][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1673.209297][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1674.321122][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1675.432956][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1675.660130][T20232] x_tables: unsorted underflow at hook 3 [ 1676.544750][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1677.667293][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1677.884987][ T5948] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1678.172929][ T5948] usb 6-1: device descriptor read/64, error -71 [ 1678.554629][ T5948] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1678.658616][T20282] x_tables: unsorted underflow at hook 3 [ 1678.768402][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1678.822023][ T5948] usb 6-1: device descriptor read/64, error -71 [ 1678.998431][ T5948] usb usb6-port1: attempt power cycle [ 1679.513408][ T5948] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1679.761719][ T5948] usb 6-1: device descriptor read/8, error -71 [ 1679.884379][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1679.935081][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.943334][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.316056][ T5948] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1680.555619][ T5948] usb 6-1: device not accepting address 31, error -71 [ 1680.789422][ T5948] usb usb6-port1: unable to enumerate USB device [ 1680.992115][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1682.120021][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1683.226406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1684.348191][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1684.832530][T20334] x_tables: unsorted underflow at hook 3 [ 1685.450070][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1686.258500][T20341] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1686.561848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1686.699233][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3859'. [ 1687.673745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1688.785838][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1689.149665][T20371] x_tables: unsorted underflow at hook 3 [ 1689.886632][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1691.009149][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1692.110306][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1692.134558][T20392] loop2: detected capacity change from 0 to 512 [ 1692.174771][T20392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1692.234365][T20392] EXT4-fs (loop2): 1 truncate cleaned up [ 1692.271844][T20392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1692.737731][T20397] x_tables: duplicate underflow at hook 1 [ 1692.781165][T20397] nfs: Unknown parameter 'euid' [ 1693.222104][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1693.449717][T19328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.334182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1695.445762][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1696.557594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1697.061426][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3890'. [ 1697.089771][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3890'. [ 1697.669608][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1698.610307][ T5901] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1698.781231][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1698.820029][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 1698.844853][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1698.897949][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.918989][ T5901] usb 1-1: Product: syz [ 1698.936267][ T5901] usb 1-1: Manufacturer: syz [ 1698.940927][ T5901] usb 1-1: SerialNumber: syz [ 1698.997146][ T5901] usb 1-1: config 0 descriptor?? [ 1699.229305][ T5901] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1699.903848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1700.241308][T20479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1700.998811][ T5901] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1701.015601][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1701.027482][ T5901] usb 1-1: USB disconnect, device number 18 [ 1702.127396][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1702.606761][T20508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1703.228524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1704.351171][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1705.452155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1705.847841][ T5901] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1706.051392][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1706.265191][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1706.285178][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.575195][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1707.110463][ T5901] usb 3-1: Product: syz [ 1707.114695][ T5901] usb 3-1: Manufacturer: syz [ 1707.119917][ T5901] usb 3-1: SerialNumber: syz [ 1707.156149][ T5901] usb 3-1: config 0 descriptor?? [ 1707.452451][T20563] batadv0: entered promiscuous mode [ 1707.536399][ T5901] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1707.675858][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1708.798866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1709.318109][ T5901] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1709.351821][ T5901] usb 3-1: USB disconnect, device number 6 [ 1709.910152][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1711.022568][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1712.133796][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1713.234946][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1713.731069][T20625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1713.792240][T20625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1713.881526][T14703] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1713.994785][T20625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1714.346751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1714.407504][T20625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1714.507409][T14703] usb 1-1: Using ep0 maxpacket: 32 [ 1714.533351][T14703] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1714.561677][T14703] usb 1-1: config 0 has no interface number 0 [ 1714.626985][T14703] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1714.656990][T14703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.665148][T14703] usb 1-1: Product: syz [ 1714.711675][T14703] usb 1-1: Manufacturer: syz [ 1714.716836][T14703] usb 1-1: SerialNumber: syz [ 1714.929491][T14703] usb 1-1: config 0 descriptor?? [ 1715.105457][T14703] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1715.219829][T11215] Bluetooth: min 0 < 6 [ 1715.469654][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1715.532677][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3958'. [ 1715.586921][ T5901] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1715.794463][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.818514][ T5901] usb 3-1: config 0 has no interfaces? [ 1715.857004][ T5901] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1716.072187][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.083342][ T5901] usb 3-1: Product: syz [ 1716.088111][ T5901] usb 3-1: Manufacturer: syz [ 1716.140912][ T5901] usb 3-1: SerialNumber: syz [ 1716.292548][ T5901] usb 3-1: config 0 descriptor?? [ 1716.570594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1717.425813][T11215] Bluetooth: hci5: command 0x0406 tx timeout [ 1717.607475][T14703] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1717.614344][T14703] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1717.682414][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1717.688711][T14703] usb 1-1: USB disconnect, device number 19 [ 1718.805531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1719.905908][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1720.337239][ T5903] usb 3-1: USB disconnect, device number 7 [ 1721.017708][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1722.129518][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1723.241375][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1723.582065][T20713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3982'. [ 1723.919433][T20716] loop5: detected capacity change from 0 to 512 [ 1724.001458][T20716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1724.202955][T20716] EXT4-fs (loop5): 1 truncate cleaned up [ 1724.291247][T20716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1724.353576][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1725.475682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1726.027841][T20716] nfs: Unknown parameter 'euid' [ 1726.207532][T16941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.576916][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1727.688686][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1728.620273][T20759] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3997'. [ 1728.655451][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3996'. [ 1728.800457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1729.154788][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1729.228896][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1729.923003][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1730.507672][T20786] loop6: detected capacity change from 0 to 128 [ 1731.035011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1731.412781][T11215] Bluetooth: hci2: command 0x0406 tx timeout [ 1731.688289][T20806] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4011'. [ 1732.136005][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1733.247887][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1733.765210][T20842] loop4: detected capacity change from 0 to 128 [ 1734.073472][T20849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4028'. [ 1734.359583][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1735.471429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1736.034276][T20867] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1736.508991][T20876] loop6: detected capacity change from 0 to 128 [ 1736.583326][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1736.679970][T20879] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4036'. [ 1737.009437][T20878] loop0: detected capacity change from 0 to 512 [ 1737.284647][T20878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1737.431128][T20878] EXT4-fs (loop0): 1 truncate cleaned up [ 1737.491395][T20878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.695057][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1738.242531][T20894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4043'. [ 1738.339356][T20898] nfs: Unknown parameter 'euid' [ 1738.806855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1739.735630][T16999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.895793][T16318] Bluetooth: min 158 > max 0 [ 1739.918687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1741.030527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1741.473515][T20926] loop6: detected capacity change from 0 to 128 [ 1741.481632][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1742.104866][T16318] Bluetooth: hci2: command 0x0406 tx timeout [ 1742.142390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1743.024361][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1743.254160][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1744.376694][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1745.337511][T20964] loop5: detected capacity change from 0 to 512 [ 1745.438663][T20964] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1745.477809][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1745.571879][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1745.578372][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1745.622182][T20968] loop2: detected capacity change from 0 to 128 [ 1746.155746][T20977] batadv0: entered promiscuous mode [ 1746.267117][T20964] EXT4-fs (loop5): 1 truncate cleaned up [ 1746.571534][T20964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1746.591004][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1747.701863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1748.367281][T20997] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1748.645800][T20998] nfs: Unknown parameter 'euid' [ 1748.813298][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1749.127371][T21005] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1749.430779][T16941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.694984][T15942] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1749.707244][T21016] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4081'. [ 1749.925093][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1750.120326][T15942] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1750.288644][T15942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.381929][T15942] usb 3-1: config 0 has no interface number 0 [ 1750.413815][T15942] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1750.513434][T15942] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1750.523194][T15942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.584677][T15942] usb 3-1: Product: syz [ 1750.614315][T15942] usb 3-1: Manufacturer: syz [ 1750.618976][T15942] usb 3-1: SerialNumber: syz [ 1750.662376][T15942] usb 3-1: config 0 descriptor?? [ 1750.801599][T21024] x_tables: unsorted underflow at hook 3 [ 1751.038628][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1751.106897][T15942] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1751.133987][T15942] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 1751.181745][T15942] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1751.281958][T15942] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1751.396364][T15942] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1751.426492][T15942] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1751.479918][T15942] usb 3-1: USB disconnect, device number 8 [ 1751.543948][T15942] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1751.583410][T15942] keyspan 3-1:0.133: device disconnected [ 1752.148745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1752.700312][T21044] overlayfs: failed to clone upperpath [ 1753.131631][T21047] loop2: detected capacity change from 0 to 512 [ 1753.199634][T21047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1753.260577][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1753.292196][T21047] EXT4-fs (loop2): 1 truncate cleaned up [ 1753.320750][T21047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1753.429566][T21058] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1753.608760][T21047] nfs: Unknown parameter 'euid' [ 1753.786639][T19328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.383100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1754.470242][T21067] loop5: detected capacity change from 0 to 128 [ 1755.494905][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1756.596043][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1756.912263][T21099] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4112'. [ 1757.485770][T21101] loop4: detected capacity change from 0 to 512 [ 1757.506637][T21101] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1757.589387][T21101] EXT4-fs (loop4): 1 truncate cleaned up [ 1757.605579][T21101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1757.707863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1757.922318][T21106] nfs: Unknown parameter 'euid' [ 1758.819707][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1758.982756][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1759.505990][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.931651][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1760.332994][ T5901] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1761.043324][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1761.417993][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 1761.447454][ T5901] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1761.492370][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.522034][ T5901] usb 5-1: Product: syz [ 1761.539184][ T5901] usb 5-1: Manufacturer: syz [ 1761.554642][ T5901] usb 5-1: SerialNumber: syz [ 1761.590128][ T5901] usb 5-1: config 0 descriptor?? [ 1761.781027][ T5902] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1761.835039][ T5901] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1761.975861][ T5902] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1762.155160][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1762.239941][ T5902] usb 3-1: config 0 has no interface number 0 [ 1762.267825][ T5902] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1763.271599][ T5902] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1763.277687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1763.295605][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.100102][ T5902] usb 3-1: Product: syz [ 1764.120242][ T5902] usb 3-1: Manufacturer: syz [ 1764.130360][ T5902] usb 3-1: SerialNumber: syz [ 1764.161479][ T5902] usb 3-1: config 0 descriptor?? [ 1764.361470][ T5901] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1764.378904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1764.398740][ T5902] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1764.422293][ T5901] usb 5-1: USB disconnect, device number 33 [ 1764.437552][ T5902] keyspan 3-1:0.133: unsupported endpoint type 0 [ 1764.467996][ T5902] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1764.503483][ T5902] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1764.547925][ T5902] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1764.587277][ T5902] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1764.648418][ T5902] usb 3-1: USB disconnect, device number 9 [ 1764.690543][ T5902] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1764.731931][ T5902] keyspan 3-1:0.133: device disconnected [ 1765.490802][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1765.985420][T21170] x_tables: unsorted underflow at hook 3 [ 1766.602444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1767.714364][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1768.833761][T21205] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1768.842100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1768.850062][T21206] syz.4.4151: attempt to access beyond end of device [ 1768.850062][T21206] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1768.900358][T21206] syz.4.4151: attempt to access beyond end of device [ 1768.900358][T21206] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1768.954163][T21204] nbd4: detected capacity change from 0 to 67108884 [ 1768.997962][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1769.031041][T21206] block nbd4: Send control failed (result -89) [ 1769.073896][T21206] block nbd4: Request send failed, requeueing [ 1769.107189][T21210] block nbd4: shutting down sockets [ 1769.108787][T18017] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.125502][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 1769.166704][ T5903] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1769.193820][ T42] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1769.205651][ T42] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1769.214320][ T42] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1769.224033][ T42] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1769.231875][ T42] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1769.242100][T17157] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.277353][T17157] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1769.370880][T17157] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.457856][T17157] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1769.538101][T21206] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.566163][T17157] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.599059][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 1769.654222][T17157] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1769.691727][T21206] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.716706][T17157] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.741083][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1769.788082][T17157] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1769.884797][T17157] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.893892][T17157] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1769.905866][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 1769.947722][ T5903] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1769.956920][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1769.970105][T17157] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1769.990460][T17157] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1769.998815][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.013648][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1770.026395][T17157] ldm_validate_partition_table(): Disk read failed. [ 1770.036234][ T5903] usb 6-1: Product: syz [ 1770.040461][ T5903] usb 6-1: Manufacturer: syz [ 1770.047788][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1770.066595][ T5903] usb 6-1: SerialNumber: syz [ 1770.077760][T17157] Dev nbd4: unable to read RDB block 0 [ 1770.085385][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1770.107737][T17157] nbd4: unable to read partition table [ 1770.115236][ T5903] usb 6-1: config 0 descriptor?? [ 1770.152104][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1770.166907][T17157] ldm_validate_partition_table(): Disk read failed. [ 1770.174085][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1770.188270][T17157] Dev nbd4: unable to read RDB block 0 [ 1770.203748][T17157] nbd4: unable to read partition table [ 1770.216167][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1770.335404][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1770.392998][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1770.450604][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1770.501126][ T5903] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1770.514893][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1770.525640][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1770.536338][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1770.547816][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1770.562128][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1770.575615][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1770.825293][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1771.049738][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1771.146596][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1771.196192][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1771.251648][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1771.334050][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1771.347359][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1771.358302][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1771.369067][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1771.380457][T21206] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1771.395762][T21206] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1771.895382][T21233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1772.073276][ T5903] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1772.161611][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1772.433245][ T5903] usb 6-1: USB disconnect, device number 32 [ 1773.273422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1774.385276][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1775.497047][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1776.619546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1777.721236][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1778.367821][T21303] 9pnet_virtio: no channels available for device syz [ 1778.832548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1779.338471][T21324] loop5: detected capacity change from 0 to 512 [ 1779.458836][T21328] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4193'. [ 1779.826983][T21324] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1779.944321][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1780.145325][T21324] EXT4-fs (loop5): 1 truncate cleaned up [ 1780.171998][T21324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.056152][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1781.390127][T21339] x_tables: duplicate underflow at hook 1 [ 1781.863668][T21339] nfs: Unknown parameter 'euid' [ 1782.032088][T16941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.167977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1782.189789][ T5903] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1782.199267][T21351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4202'. [ 1782.431701][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1782.605942][ T5903] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1782.629451][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.643562][ T5903] usb 1-1: Product: syz [ 1782.659489][ T5903] usb 1-1: Manufacturer: syz [ 1782.677473][ T5903] usb 1-1: SerialNumber: syz [ 1782.701547][ T5903] usb 1-1: config 0 descriptor?? [ 1782.966495][ T5903] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1783.290523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1784.391678][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1784.428844][T21388] loop6: detected capacity change from 0 to 512 [ 1784.464235][T21388] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1784.560773][ T5903] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1784.590847][ T5903] usb 1-1: USB disconnect, device number 20 [ 1784.726803][T21388] EXT4-fs (loop6): 1 truncate cleaned up [ 1784.733222][T21388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1785.503449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1785.547339][T21388] x_tables: duplicate underflow at hook 1 [ 1785.554274][T21388] nfs: Unknown parameter 'euid' [ 1785.805729][T17509] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.615474][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1787.737786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1788.838940][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1789.077008][T21436] loop0: detected capacity change from 0 to 512 [ 1789.131374][T21436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1789.172880][T21436] EXT4-fs (loop0): 1 truncate cleaned up [ 1789.203647][T21436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1789.950750][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1790.649322][T21436] x_tables: duplicate underflow at hook 1 [ 1790.672414][T21436] nfs: Unknown parameter 'euid' [ 1790.766527][T21458] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4235'. [ 1791.062548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1791.378548][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4239'. [ 1792.185145][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1793.286207][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1794.398041][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1794.671552][T16999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.510185][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1796.568858][T21505] loop0: detected capacity change from 0 to 128 [ 1796.621791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1797.744206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1798.001315][T21511] x_tables: unsorted underflow at hook 3 [ 1798.856021][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1799.957170][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1800.559406][T21541] loop2: detected capacity change from 0 to 128 [ 1801.069090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1801.101270][ T5902] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1802.180785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1802.374907][ T5902] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1802.383155][ T5902] usb 5-1: config 0 has no interface number 0 [ 1802.397199][ T5902] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1802.406508][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.414519][ T5902] usb 5-1: Product: syz [ 1803.303335][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1803.436788][ T5902] usb 5-1: Manufacturer: syz [ 1803.441439][ T5902] usb 5-1: SerialNumber: syz [ 1803.775287][ T5902] usb 5-1: config 0 descriptor?? [ 1804.085120][ T5902] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1804.094124][ T5902] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1804.175616][ T5902] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1804.191753][T21575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4281'. [ 1804.218111][ T5902] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1804.274707][ T5902] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1804.380166][T21580] x_tables: unsorted underflow at hook 3 [ 1804.404554][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1804.412125][ T5902] usb 5-1: USB disconnect, device number 34 [ 1804.617605][ T5902] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1804.728576][ T5902] keyspan 5-1:0.133: device disconnected [ 1805.516263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1805.528061][T21595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1806.638810][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1806.938277][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 1807.739918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1808.862443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1809.167761][T21629] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4297'. [ 1809.466986][T21636] x_tables: unsorted underflow at hook 3 [ 1809.963710][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1810.185375][T21641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4304'. [ 1811.075549][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1811.290458][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1811.297136][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1812.198068][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1813.310076][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1813.676490][T21683] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4317'. [ 1813.816586][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4310'. [ 1814.411038][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1814.863867][T21693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1815.533607][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1816.634548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1817.746324][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1818.868854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1818.910845][T21726] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4334'. [ 1819.182041][T21732] 9pnet_virtio: no channels available for device syz [ 1819.382433][T21734] netlink: 'syz.3.4328': attribute type 4 has an invalid length. [ 1819.390231][T21734] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4328'. [ 1819.981010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1821.081825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1822.194107][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1823.305446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1824.427945][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1824.879580][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4351'. [ 1825.529166][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1826.433616][T21803] batadv0: entered promiscuous mode [ 1826.641031][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1826.921487][T21810] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4359'. [ 1827.763467][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1828.864573][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1829.987462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1831.098947][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1832.200026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1833.322535][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1833.845218][T21847] loop2: detected capacity change from 0 to 128 [ 1834.423671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1835.535495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1836.097001][T16318] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 1836.442842][T21884] loop0: detected capacity change from 0 to 128 [ 1836.658015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1837.759155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1838.881657][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1839.129323][T21913] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4396'. [ 1839.916531][T21922] loop4: detected capacity change from 0 to 128 [ 1839.982927][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1840.464566][T16318] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1840.492905][T16318] Bluetooth: hci4: Injecting HCI hardware error event [ 1840.504220][T16318] Bluetooth: hci4: hardware error 0x00 [ 1841.094620][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1842.206450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1842.936700][T16318] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1843.318279][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1844.430095][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1845.541945][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1846.653739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1846.710265][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4413'. [ 1847.765652][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1848.888121][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1849.524778][T22013] x_tables: unsorted underflow at hook 3 [ 1849.989346][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1851.101022][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1852.223550][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1852.949550][T22045] overlayfs: failed to resolve './file0': -2 [ 1853.335370][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1853.448031][T22059] x_tables: unsorted underflow at hook 3 [ 1853.656782][ T5903] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1853.893116][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 1853.936039][ T5903] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1853.993092][ T5903] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1854.067545][ T5903] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1854.226254][ T5903] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1854.387705][ T5903] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1854.436535][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1854.482588][ T5903] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1854.512351][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.980536][ T5903] usb 5-1: usb_control_msg returned -32 [ 1854.997653][ T5903] usbtmc 5-1:16.0: can't read capabilities [ 1855.074281][T22072] xt_hashlimit: size too large, truncated to 1048576 [ 1855.444490][T22076] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 1855.548418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1856.543112][T11834] usb 5-1: USB disconnect, device number 35 [ 1856.660265][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1857.772226][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1857.853066][T22088] loop0: detected capacity change from 0 to 128 [ 1858.783933][T22096] loop4: detected capacity change from 0 to 512 [ 1858.856600][T22096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1858.883804][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1858.992886][T22105] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4461'. [ 1859.009882][T22096] EXT4-fs (loop4): 1 truncate cleaned up [ 1859.027678][T22096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1859.235683][T22108] nfs: Unknown parameter 'euid' [ 1860.006340][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1860.717202][T22129] x_tables: unsorted underflow at hook 3 [ 1861.107443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1862.219303][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1862.400131][T22115] dccp_close: ABORT with 32 bytes unread [ 1863.331129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1864.453597][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1865.554728][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1866.677497][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1866.935214][T22178] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1866.972135][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1867.778389][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1868.354047][T22200] overlayfs: failed to clone upperpath [ 1868.890219][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1869.137434][T22211] loop4: detected capacity change from 0 to 512 [ 1869.168773][T22211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1869.319001][T22211] EXT4-fs (loop4): 1 truncate cleaned up [ 1869.347974][T22211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1870.002026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1870.104780][T22219] nfs: Unknown parameter 'euid' [ 1871.113853][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1872.225671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1873.337500][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1874.449394][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1875.561317][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1876.672985][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1877.163150][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1877.182278][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1877.784775][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1877.852159][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4509'. [ 1878.896629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1880.008456][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1880.326315][T22304] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4530'. [ 1881.120372][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1881.326565][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1882.232072][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1883.042776][T22319] x_tables: unsorted underflow at hook 3 [ 1883.346026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1884.456053][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1885.567932][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1886.022042][T22348] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1886.679396][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1887.791206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1888.738722][T22364] x_tables: unsorted underflow at hook 3 [ 1888.905026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1890.014903][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1891.126671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1892.238540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1893.063973][T22401] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 1893.353023][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1893.495075][ T5903] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1893.842718][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 1893.871722][T22410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1893.875431][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.931436][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1893.967828][ T5903] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1894.024571][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.067979][ T5903] usb 5-1: config 0 descriptor?? [ 1894.380297][T22415] x_tables: unsorted underflow at hook 3 [ 1894.462152][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1894.654632][ T5903] kye 0003:0458:5016.0008: control desc unexpectedly large [ 1894.904384][ T5903] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input31 [ 1895.059877][ T5903] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input32 [ 1895.187517][ T5903] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 1895.241610][ T5903] usb 5-1: USB disconnect, device number 36 [ 1895.573978][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1895.586955][T22425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1896.685781][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1896.729432][T22449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4579'. [ 1897.797627][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1898.035973][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'. [ 1898.238475][T22465] x_tables: unsorted underflow at hook 3 [ 1898.790081][T22464] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4581'. [ 1898.909447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1899.615111][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 1900.021424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1901.133275][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1902.244979][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1903.356798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1904.468537][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1904.898589][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'. [ 1905.527048][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1905.580381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1905.874516][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1905.917783][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.940990][ T9] usb 7-1: Product: syz [ 1905.954593][ T9] usb 7-1: Manufacturer: syz [ 1905.959305][ T9] usb 7-1: SerialNumber: syz [ 1905.978282][ T9] usb 7-1: config 0 descriptor?? [ 1906.279686][ T5901] usb 7-1: USB disconnect, device number 35 [ 1906.596139][T22565] netlink: 696 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1906.649540][T22562] loop4: detected capacity change from 0 to 512 [ 1906.680159][T22562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1906.692206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1907.094539][T22562] EXT4-fs (loop4): 1 truncate cleaned up [ 1907.241625][T22562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1907.256741][T19358] udevd[19358]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.804074][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1908.926574][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1909.119916][T22572] x_tables: duplicate underflow at hook 1 [ 1909.155428][T22576] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1909.200021][T22576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4624'. [ 1909.266438][T22572] nfs: Unknown parameter 'euid' [ 1909.515951][T22586] batadv0: entered promiscuous mode [ 1910.027712][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1910.317276][T22600] ip6tnl1: entered promiscuous mode [ 1911.139937][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1911.194451][T22599] loop0: detected capacity change from 0 to 256 [ 1911.506187][T22606] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1912.251515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1912.283354][T22599] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1912.626676][ T29] audit: type=1800 audit(2000000429.022:134): pid=22610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4633" name="file1" dev="loop0" ino=304 res=0 errno=0 [ 1913.363336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1914.264675][T22630] mmap: syz.2.4642 (22630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1914.474962][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1915.586812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1916.552510][T22637] batadv0: entered promiscuous mode [ 1916.698624][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1916.810360][T16793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1917.359662][T22652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1917.810432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1918.850700][T22658] wireguard0: entered promiscuous mode [ 1918.922235][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1920.034135][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1920.256897][T22674] ip6erspan0: entered promiscuous mode [ 1921.145918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1922.257798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1923.034034][T22686] loop5: detected capacity change from 0 to 512 [ 1923.096529][T22686] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1923.198718][T22686] EXT4-fs (loop5): 1 truncate cleaned up [ 1923.216553][T22686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1923.349434][T22693] x_tables: duplicate underflow at hook 1 [ 1923.360923][T22693] nfs: Unknown parameter 'euid' [ 1923.369533][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1924.357607][T22702] loop6: detected capacity change from 0 to 128 [ 1924.481388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1925.593222][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1926.705021][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1926.774404][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4674'. [ 1926.782080][T16941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1927.816855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1928.512670][ T29] audit: type=1326 audit(2000000443.876:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.0.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8849f8cde9 code=0x7fc00000 [ 1928.928799][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1929.245676][ T29] audit: type=1326 audit(2000000444.522:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.0.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8849f8cde9 code=0x7fc00000 [ 1930.040489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1931.152395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1931.307511][T22782] x_tables: unsorted underflow at hook 3 [ 1931.866413][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4698'. [ 1932.264137][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1932.572958][T22819] tmpfs: Bad value for 'mpol' [ 1933.375956][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1933.543836][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 1933.900300][T22847] netlink: 'syz.0.4705': attribute type 4 has an invalid length. [ 1933.908150][T22847] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4705'. [ 1934.488021][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1935.171980][T22867] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1935.599606][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1935.891725][T22866] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4728'. [ 1936.530324][ T29] audit: type=1326 audit(2000000451.350:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22859 comm="syz.2.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a18cde9 code=0x7fc00000 [ 1936.711427][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1937.001506][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'. [ 1937.436399][ T29] audit: type=1326 audit(2000000452.220:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730af8cde9 code=0x7fc00000 [ 1937.532932][ T29] audit: type=1326 audit(2000000452.248:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22872 comm="syz.6.4730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523fd8cde9 code=0x7fc00000 [ 1937.823370][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1938.241172][T22908] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1938.935072][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1939.693865][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1939.874913][T22927] fuse: Unknown parameter '0x0000000000000005' [ 1940.046970][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1940.835959][T22951] ip6erspan0: entered promiscuous mode [ 1941.012509][T22953] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1941.158966][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1941.235992][ T29] audit: type=1326 audit(2000000455.747:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22938 comm="syz.3.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56b18cde9 code=0x7fc00000 [ 1941.663016][ T29] audit: type=1326 audit(2000000455.737:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22936 comm="syz.0.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8849f8cde9 code=0x7fc00000 [ 1941.923437][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1942.270788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1942.517118][T22972] netlink: 'syz.3.4766': attribute type 4 has an invalid length. [ 1942.525031][T22972] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4766'. [ 1942.635736][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1942.659322][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1943.382633][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1944.016811][T22984] ip6erspan0: entered promiscuous mode [ 1944.494420][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1944.499527][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4778'. [ 1944.846388][ T29] audit: type=1326 audit(2000000459.151:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22985 comm="syz.2.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a18cde9 code=0x7fc00000 [ 1945.606193][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1945.826361][ T29] audit: type=1326 audit(2000000459.975:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22991 comm="syz.4.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4058cde9 code=0x7fc00000 [ 1946.355782][T23021] netlink: 'syz.5.4782': attribute type 4 has an invalid length. [ 1946.363574][T23021] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4782'. [ 1946.717880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1947.829682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1948.941517][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1950.053453][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1950.385097][ T29] audit: type=1326 audit(2000000464.296:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23044 comm="syz.4.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4058cde9 code=0x7fc00000 [ 1951.165134][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1952.276973][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1953.388809][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1954.343825][T23107] random: crng reseeded on system resumption [ 1954.500600][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1955.612691][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1956.724299][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1957.836088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1958.947967][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1960.059840][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1960.268808][T23160] [ 1960.271214][T23160] ====================================================== [ 1960.278243][T23160] WARNING: possible circular locking dependency detected [ 1960.285270][T23160] 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 Not tainted [ 1960.292402][T23160] ------------------------------------------------------ [ 1960.299416][T23160] syz.4.4832/23160 is trying to acquire lock: [ 1960.305477][T23160] ffff8880259b7510 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x9d/0x400 [ 1960.314403][T23160] [ 1960.314403][T23160] but task is already holding lock: [ 1960.321768][T23160] ffff888143372a98 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x388/0x1a30 [ 1960.332001][T23160] [ 1960.332001][T23160] which lock already depends on the new lock. [ 1960.332001][T23160] [ 1960.342413][T23160] [ 1960.342413][T23160] the existing dependency chain (in reverse order) is: [ 1960.351430][T23160] [ 1960.351430][T23160] -> #7 (&q->sysfs_lock){+.+.}-{4:4}: [ 1960.359014][T23160] lock_acquire+0x1ed/0x550 [ 1960.364063][T23160] __mutex_lock+0x19c/0x1010 [ 1960.369182][T23160] blk_mq_update_nr_hw_queues+0x388/0x1a30 [ 1960.375530][T23160] nbd_start_device+0x163/0xab0 [ 1960.381037][T23160] nbd_ioctl+0x5dc/0xf40 [ 1960.385803][T23160] blkdev_ioctl+0x5d2/0x6f0 [ 1960.390844][T23160] __se_sys_ioctl+0xf7/0x170 [ 1960.395957][T23160] do_syscall_64+0xf3/0x230 [ 1960.400985][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.407410][T23160] [ 1960.407410][T23160] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1960.416045][T23160] lock_acquire+0x1ed/0x550 [ 1960.421087][T23160] blk_mq_submit_bio+0x14e1/0x25a0 [ 1960.426727][T23160] __submit_bio+0x2cf/0x6a0 [ 1960.431770][T23160] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1960.437931][T23160] mpage_readahead+0x630/0x780 [ 1960.443227][T23160] read_pages+0x17b/0x570 [ 1960.448088][T23160] page_cache_ra_unbounded+0x708/0x820 [ 1960.454080][T23160] page_cache_sync_ra+0x3e2/0xb00 [ 1960.459632][T23160] filemap_get_pages+0x59a/0x1fb0 [ 1960.465186][T23160] filemap_read+0x464/0x1260 [ 1960.470304][T23160] blkdev_read_iter+0x31f/0x460 [ 1960.475673][T23160] vfs_read+0x977/0xb40 [ 1960.480383][T23160] ksys_read+0x18f/0x2b0 [ 1960.485142][T23160] do_syscall_64+0xf3/0x230 [ 1960.490171][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.496591][T23160] [ 1960.496591][T23160] -> #5 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1960.505142][T23160] lock_acquire+0x1ed/0x550 [ 1960.510188][T23160] down_read+0xb1/0xa40 [ 1960.514879][T23160] filemap_fault+0x7f8/0x16c0 [ 1960.520093][T23160] __do_fault+0x137/0x390 [ 1960.524945][T23160] __handle_mm_fault+0x4c44/0x70f0 [ 1960.530590][T23160] handle_mm_fault+0x3e5/0x8d0 [ 1960.535884][T23160] exc_page_fault+0x2b9/0x8b0 [ 1960.541082][T23160] asm_exc_page_fault+0x26/0x30 [ 1960.546462][T23160] _copy_from_user+0x76/0xb0 [ 1960.551662][T23160] copy_msghdr_from_user+0xae/0x680 [ 1960.557382][T23160] do_recvmmsg+0x3bd/0xab0 [ 1960.562330][T23160] __x64_sys_recvmmsg+0x199/0x250 [ 1960.567887][T23160] do_syscall_64+0xf3/0x230 [ 1960.572919][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.579342][T23160] [ 1960.579342][T23160] -> #4 (&mm->mmap_lock){++++}-{4:4}: [ 1960.586918][T23160] lock_acquire+0x1ed/0x550 [ 1960.591975][T23160] __might_fault+0xc6/0x120 [ 1960.597032][T23160] _copy_from_iter+0x100/0x1c40 [ 1960.602410][T23160] tcp_sendmsg_locked+0x213d/0x5330 [ 1960.608139][T23160] tcp_sendmsg+0x30/0x50 [ 1960.612918][T23160] __sock_sendmsg+0x1a6/0x270 [ 1960.618259][T23160] sock_write_iter+0x2d7/0x3f0 [ 1960.623567][T23160] vfs_write+0xad1/0xd10 [ 1960.628339][T23160] ksys_write+0x18f/0x2b0 [ 1960.633189][T23160] do_syscall_64+0xf3/0x230 [ 1960.638218][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.644645][T23160] [ 1960.644645][T23160] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1960.652335][T23160] lock_acquire+0x1ed/0x550 [ 1960.657398][T23160] lock_sock_nested+0x48/0x100 [ 1960.662706][T23160] inet_sendmsg+0x120/0x390 [ 1960.667801][T23160] __sock_sendmsg+0x1a6/0x270 [ 1960.673010][T23160] sock_sendmsg+0x16c/0x250 [ 1960.678037][T23160] __sock_xmit+0x219/0x4e0 [ 1960.682981][T23160] nbd_send_cmd+0x996/0x2110 [ 1960.688093][T23160] nbd_queue_rq+0xcd5/0xef0 [ 1960.693118][T23160] blk_mq_dispatch_rq_list+0xad5/0x19d0 [ 1960.699192][T23160] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 1960.706052][T23160] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 1960.712571][T23160] blk_mq_run_hw_queue+0x354/0x500 [ 1960.718252][T23160] blk_mq_flush_plug_list+0x118e/0x1870 [ 1960.724342][T23160] __blk_flush_plug+0x420/0x500 [ 1960.729731][T23160] __submit_bio+0x54a/0x6a0 [ 1960.734772][T23160] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1960.740937][T23160] __bread_gfp+0x23c/0x400 [ 1960.745883][T23160] udf_read_tagged+0xa6/0xe00 [ 1960.751096][T23160] udf_check_anchor_block+0xba/0x550 [ 1960.756907][T23160] udf_load_vrs+0xb16/0x1130 [ 1960.762023][T23160] udf_fill_super+0x5f2/0x1cb0 [ 1960.767314][T23160] get_tree_bdev_flags+0x48e/0x5c0 [ 1960.772951][T23160] vfs_get_tree+0x92/0x2b0 [ 1960.777897][T23160] do_new_mount+0x2be/0xb40 [ 1960.782929][T23160] __se_sys_mount+0x2d6/0x3c0 [ 1960.788136][T23160] do_syscall_64+0xf3/0x230 [ 1960.793167][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.799592][T23160] [ 1960.799592][T23160] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1960.807255][T23160] lock_acquire+0x1ed/0x550 [ 1960.812294][T23160] __mutex_lock+0x19c/0x1010 [ 1960.817412][T23160] nbd_queue_rq+0x262/0xef0 [ 1960.822446][T23160] blk_mq_dispatch_rq_list+0xad5/0x19d0 [ 1960.828526][T23160] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 1960.835407][T23160] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 1960.841935][T23160] blk_mq_run_hw_queue+0x354/0x500 [ 1960.847575][T23160] blk_mq_flush_plug_list+0x118e/0x1870 [ 1960.853652][T23160] __blk_flush_plug+0x420/0x500 [ 1960.859076][T23160] __submit_bio+0x54a/0x6a0 [ 1960.864112][T23160] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1960.870274][T23160] __bread_gfp+0x23c/0x400 [ 1960.875224][T23160] udf_read_tagged+0xa6/0xe00 [ 1960.880432][T23160] udf_check_anchor_block+0xba/0x550 [ 1960.886243][T23160] udf_load_vrs+0xb16/0x1130 [ 1960.891354][T23160] udf_fill_super+0x5f2/0x1cb0 [ 1960.896639][T23160] get_tree_bdev_flags+0x48e/0x5c0 [ 1960.902271][T23160] vfs_get_tree+0x92/0x2b0 [ 1960.907204][T23160] do_new_mount+0x2be/0xb40 [ 1960.912234][T23160] __se_sys_mount+0x2d6/0x3c0 [ 1960.917440][T23160] do_syscall_64+0xf3/0x230 [ 1960.922467][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.928894][T23160] [ 1960.928894][T23160] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1960.936127][T23160] lock_acquire+0x1ed/0x550 [ 1960.941171][T23160] __mutex_lock+0x19c/0x1010 [ 1960.946287][T23160] nbd_queue_rq+0xcf/0xef0 [ 1960.951248][T23160] blk_mq_dispatch_rq_list+0xad5/0x19d0 [ 1960.957338][T23160] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 1960.964198][T23160] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 1960.970712][T23160] blk_mq_run_hw_queue+0x354/0x500 [ 1960.976654][T23160] blk_mq_flush_plug_list+0x118e/0x1870 [ 1960.982746][T23160] __blk_flush_plug+0x420/0x500 [ 1960.988126][T23160] __submit_bio+0x54a/0x6a0 [ 1960.993164][T23160] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1960.999342][T23160] __bread_gfp+0x23c/0x400 [ 1961.004294][T23160] udf_read_tagged+0xa6/0xe00 [ 1961.009678][T23160] udf_check_anchor_block+0xba/0x550 [ 1961.015511][T23160] udf_load_vrs+0xb16/0x1130 [ 1961.020625][T23160] udf_fill_super+0x5f2/0x1cb0 [ 1961.025918][T23160] get_tree_bdev_flags+0x48e/0x5c0 [ 1961.031556][T23160] vfs_get_tree+0x92/0x2b0 [ 1961.036496][T23160] do_new_mount+0x2be/0xb40 [ 1961.041526][T23160] __se_sys_mount+0x2d6/0x3c0 [ 1961.046729][T23160] do_syscall_64+0xf3/0x230 [ 1961.051761][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.058256][T23160] [ 1961.058256][T23160] -> #0 (set->srcu){.+.+}-{0:0}: [ 1961.065404][T23160] validate_chain+0x18ef/0x5920 [ 1961.070784][T23160] __lock_acquire+0x1397/0x2100 [ 1961.076167][T23160] lock_sync+0x18b/0x310 [ 1961.080977][T23160] __synchronize_srcu+0xb1/0x400 [ 1961.086446][T23160] elevator_disable+0xd4/0x4e0 [ 1961.091743][T23160] blk_mq_update_nr_hw_queues+0x5d3/0x1a30 [ 1961.098111][T23160] nbd_start_device+0x163/0xab0 [ 1961.103481][T23160] nbd_ioctl+0x5dc/0xf40 [ 1961.108245][T23160] blkdev_ioctl+0x5d2/0x6f0 [ 1961.113274][T23160] __se_sys_ioctl+0xf7/0x170 [ 1961.118379][T23160] do_syscall_64+0xf3/0x230 [ 1961.123405][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.129828][T23160] [ 1961.129828][T23160] other info that might help us debug this: [ 1961.129828][T23160] [ 1961.140048][T23160] Chain exists of: [ 1961.140048][T23160] set->srcu --> &q->q_usage_counter(io)#53 --> &q->sysfs_lock [ 1961.140048][T23160] [ 1961.153481][T23160] Possible unsafe locking scenario: [ 1961.153481][T23160] [ 1961.160926][T23160] CPU0 CPU1 [ 1961.166281][T23160] ---- ---- [ 1961.171539][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1961.171711][T23160] lock(&q->sysfs_lock); [ 1961.183069][T23160] lock(&q->q_usage_counter(io)#53); [ 1961.191067][T23160] lock(&q->sysfs_lock); [ 1961.197923][T23160] sync(set->srcu); [ 1961.201820][T23160] [ 1961.201820][T23160] *** DEADLOCK *** [ 1961.201820][T23160] [ 1961.209957][T23160] 5 locks held by syz.4.4832/23160: [ 1961.215147][T23160] #0: ffff888025ab3198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 1961.224494][T23160] #1: ffff888025ab30d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa0/0x1a30 [ 1961.235530][T23160] #2: ffff888143372568 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x2c3/0x1a30 [ 1961.247254][T23160] #3: ffff8881433725a0 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x2c3/0x1a30 [ 1961.259237][T23160] #4: ffff888143372a98 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x388/0x1a30 [ 1961.269910][T23160] [ 1961.269910][T23160] stack backtrace: [ 1961.275796][T23160] CPU: 1 UID: 0 PID: 23160 Comm: syz.4.4832 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1961.275822][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1961.275838][T23160] Call Trace: [ 1961.275847][T23160] [ 1961.275858][T23160] dump_stack_lvl+0x241/0x360 [ 1961.275888][T23160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1961.275912][T23160] ? __pfx__printk+0x10/0x10 [ 1961.275937][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.275976][T23160] print_circular_bug+0x13a/0x1b0 [ 1961.276003][T23160] check_noncircular+0x36a/0x4a0 [ 1961.276030][T23160] ? __pfx_check_noncircular+0x10/0x10 [ 1961.276055][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.276096][T23160] ? lockdep_lock+0x123/0x2b0 [ 1961.276127][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.276162][T23160] ? add_lock_to_list+0x1e8/0x2f0 [ 1961.276190][T23160] validate_chain+0x18ef/0x5920 [ 1961.276226][T23160] ? __pfx_validate_chain+0x10/0x10 [ 1961.276253][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.276302][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.276337][T23160] ? mark_lock+0x9a/0x360 [ 1961.276360][T23160] __lock_acquire+0x1397/0x2100 [ 1961.276401][T23160] lock_sync+0x18b/0x310 [ 1961.276433][T23160] ? __synchronize_srcu+0x9d/0x400 [ 1961.276470][T23160] ? __synchronize_srcu+0x9d/0x400 [ 1961.276505][T23160] ? __pfx_lock_sync+0x10/0x10 [ 1961.276539][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.276574][T23160] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1961.276611][T23160] __synchronize_srcu+0xb1/0x400 [ 1961.276648][T23160] ? __pfx___synchronize_srcu+0x10/0x10 [ 1961.276691][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.276726][T23160] ? synchronize_srcu+0x2a7/0x2d0 [ 1961.276763][T23160] elevator_disable+0xd4/0x4e0 [ 1961.276798][T23160] blk_mq_update_nr_hw_queues+0x5d3/0x1a30 [ 1961.276843][T23160] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1961.276880][T23160] ? __pfx___mutex_lock+0x10/0x10 [ 1961.276911][T23160] nbd_start_device+0x163/0xab0 [ 1961.276942][T23160] nbd_ioctl+0x5dc/0xf40 [ 1961.276968][T23160] ? __pfx_nbd_ioctl+0x10/0x10 [ 1961.276998][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.277033][T23160] ? file_to_blk_mode+0xcc/0x140 [ 1961.277053][T23160] ? __pfx_nbd_ioctl+0x10/0x10 [ 1961.277083][T23160] blkdev_ioctl+0x5d2/0x6f0 [ 1961.277114][T23160] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1961.277145][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.277180][T23160] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1961.277210][T23160] __se_sys_ioctl+0xf7/0x170 [ 1961.277235][T23160] do_syscall_64+0xf3/0x230 [ 1961.277263][T23160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1961.277300][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.277331][T23160] RIP: 0033:0x7f2b4058cde9 [ 1961.277351][T23160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1961.277369][T23160] RSP: 002b:00007f2b413d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1961.277393][T23160] RAX: ffffffffffffffda RBX: 00007f2b407a6160 RCX: 00007f2b4058cde9 [ 1961.277410][T23160] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1961.277424][T23160] RBP: 00007f2b4060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1961.277439][T23160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1961.277453][T23160] R13: 0000000000000000 R14: 00007f2b407a6160 R15: 00007fffde245078 [ 1961.277478][T23160] [ 1961.610690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1961.765164][T23100] PM: hibernation: Basic memory bitmaps freed [ 1961.967643][T16318] block nbd4: Receive control failed (result -32) [ 1961.974333][T16318] block nbd4: Receive control failed (result -32) [ 1962.049907][T23167] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1962.283342][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1962.542414][T23160] block nbd4: shutting down sockets [ 1963.245711][T16073] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1963.395222][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1963.431512][T16073] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1963.565774][T16073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.574506][T16073] usb 1-1: Product: syz [ 1963.578935][T16073] usb 1-1: Manufacturer: syz [ 1963.585632][T16073] usb 1-1: SerialNumber: syz [ 1963.595743][T16073] usb 1-1: config 0 descriptor?? [ 1963.821920][T16073] usb 1-1: USB disconnect, device number 21 [ 1964.508502][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1965.618814][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1966.741322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1967.842472][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1968.964993][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1970.066115][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available